Webhook Integration

const express = require('express');
const app = express();
app.use(express.json());

app.post('/api/webhook', (req, res) => {
  const secret = req.headers['x-webhook-secret'];

  if (secret !== process.env.FIRSTSEARCH_WEBHOOK_SECRET) {
    return res.status(401).json({ error: 'Invalid secret' });
  }

  // Authenticated — process the article
  const { title, content, slug, seo, featuredImage } = req.body;
  console.log('Received article:', title);

  // Create post in your CMS here...

  res.status(200).json({ success: true });
});

app.listen(3000);

import os
from flask import Flask, request, jsonify

app = Flask(__name__)

@app.route('/api/webhook', methods=['POST'])
def webhook():
    secret = request.headers.get('X-Webhook-Secret', '')

    if secret != os.environ['FIRSTSEARCH_WEBHOOK_SECRET']:
        return jsonify({'error': 'Invalid secret'}), 401

    # Authenticated — process the article
    article = request.get_json()
    print(f"Received article: {article['title']}")

    # Create post in your CMS here...

    return jsonify({'success': True}), 200

<?php
$secret = $_SERVER['HTTP_X_WEBHOOK_SECRET'] ?? '';

if ($secret !== getenv('FIRSTSEARCH_WEBHOOK_SECRET')) {
    http_response_code(401);
    echo json_encode(['error' => 'Invalid secret']);
    exit;
}

// Authenticated — process the article
$article = json_decode(file_get_contents('php://input'), true);
error_log('Received article: ' . $article['title']);

// Create post in your CMS here...

http_response_code(200);
echo json_encode(['success' => true]);

add_action('rest_api_init', function () {
  register_rest_route('firstsearch/v1', '/webhook', [
    'methods' => 'POST',
    'callback' => 'handle_firstsearch_webhook',
    'permission_callback' => '__return_true',
  ]);
});

function handle_firstsearch_webhook($request) {
  $secret = $request->get_header('X-Webhook-Secret');

  if ($secret !== get_option('firstsearch_webhook_secret')) {
    return new WP_Error('unauthorized', 'Invalid secret', ['status' => 401]);
  }

  // Authenticated — create the post
  $article = $request->get_json_params();

  $post_id = wp_insert_post([
    'post_title'   => sanitize_text_field($article['title']),
    'post_content' => wp_kses_post($article['content']),
    'post_excerpt' => sanitize_text_field($article['excerpt'] ?? ''),
    'post_status'  => 'draft',  // Save as draft for review
    'post_type'    => 'post',
    'post_name'    => sanitize_title($article['slug']),
  ]);

  return ['success' => true, 'post_id' => $post_id];
}

const crypto = require('crypto');
const express = require('express');
const app = express();

// Important: preserve raw body for signature verification
app.use(express.json({
  verify: (req, res, buf) => {
    req.rawBody = buf.toString('utf8');
  }
}));

app.post('/api/webhook', (req, res) => {
  const secret = process.env.FIRSTSEARCH_WEBHOOK_SECRET;

  // Step 1: Verify secret header (required)
  if (req.headers['x-webhook-secret'] !== secret) {
    return res.status(401).json({ error: 'Invalid secret' });
  }

  // Step 2: Verify HMAC signature (optional, additional security)
  const signature = req.headers['x-webhook-signature'];
  const expected = crypto
    .createHmac('sha256', secret)
    .update(req.rawBody)
    .digest('hex');

  if (signature !== expected) {
    return res.status(401).json({ error: 'Invalid signature' });
  }

  // Step 3: Check timestamp freshness (optional, prevents replay attacks)
  const timestamp = req.headers['x-webhook-timestamp'];
  const now = Math.floor(Date.now() / 1000);
  if (Math.abs(now - parseInt(timestamp)) > 300) {
    return res.status(401).json({ error: 'Timestamp expired' });
  }

  // Process the article
  const article = req.body;
  console.log('Received article:', article.title);

  res.status(200).json({ success: true });
});

app.listen(3000);

import hmac
import hashlib
import time
import os
from flask import Flask, request, jsonify

app = Flask(__name__)

@app.route('/api/webhook', methods=['POST'])
def webhook():
    secret = os.environ['FIRSTSEARCH_WEBHOOK_SECRET']

    # Step 1: Verify secret header (required)
    if request.headers.get('X-Webhook-Secret', '') != secret:
        return jsonify({'error': 'Invalid secret'}), 401

    # Step 2: Verify HMAC signature (optional, additional security)
    signature = request.headers.get('X-Webhook-Signature', '')
    expected = hmac.new(
        secret.encode('utf-8'),
        request.get_data(),
        hashlib.sha256
    ).hexdigest()

    if not hmac.compare_digest(signature, expected):
        return jsonify({'error': 'Invalid signature'}), 401

    # Step 3: Check timestamp freshness (optional)
    timestamp = request.headers.get('X-Webhook-Timestamp', '0')
    if abs(time.time() - int(timestamp)) > 300:
        return jsonify({'error': 'Timestamp expired'}), 401

    # Process the article
    article = request.get_json()
    print(f"Received article: {article['title']}")

    return jsonify({'success': True}), 200

{
  "title": "How to Optimize Images for Web Performance",
  "content": "## Quick Summary\n\n- Compress images...\n\n## Why Image Optimization Matters\n\nPage speed directly affects...",
  "excerpt": "Learn how to optimize images for faster page loads and better SEO rankings.",
  "slug": "optimize-images-web-performance",
  "seo": {
    "metaTitle": "How to Optimize Images for Web Performance",
    "metaDescription": "Learn how to optimize images for faster page loads and better SEO rankings.",
    "focusKeyword": "optimize images for web"
  },
  "featuredImage": {
    "url": "https://replicate.delivery/...",
    "alt": "Web performance optimization dashboard showing image compression results",
    "width": 1200,
    "height": 630
  },
  "openGraph": {
    "title": "How to Optimize Images for Web Performance",
    "description": "Learn how to optimize images for faster page loads.",
    "type": "article",
    "image": "https://replicate.delivery/..."
  },
  "metadata": {
    "keyword": "optimize images for web",
    "wordCount": 3200,
    "readingTime": 16,
    "difficulty": 35,
    "searchVolume": 1200
  },
  "publishDate": "2026-02-08T00:05:00.000Z",
  "status": "publish",
  "author": "Jane Smith",
  "categories": ["Web Development"],
  "tags": ["image optimization", "page speed", "web performance"],
  "schema": { "@context": "https://schema.org", "@type": "Article", "..." : "..." }
}