📡 Webhook Documentation

// PHP Example - webhook-receiver.php
<?php
header('Content-Type: application/json');

// Get POST data
$payload = file_get_contents('php://input');
$data = json_decode($payload, true);

// Log received webhook
file_put_contents('webhook.log', date('Y-m-d H:i:s') . ' - ' . $payload . "\n", FILE_APPEND);

// Process based on event type
if ($data['event'] === 'message') {
    $from = $data['data']['from'];
    $message = $data['data']['message'];
    
    // Your logic here
    // Example: Save to database, send auto-reply, etc.
}

// Return success response
echo json_encode(['success' => true]);
?>

{
  "event": "message",
  "device_id": "wa-user123-1234567890",
  "timestamp": "2025-12-16T14:30:00.000Z",
  "data": {
    "from": "6281234567890",
    "message": "Halo, saya mau pesan produk A",
    "message_id": "3EB0B430B6F8F1D0E5F2",
    "name": "John Doe",
    "type": "text",
    "timestamp": 1702740600
  }
}

{
  "event": "message",
  "device_id": "wa-user123-1234567890",
  "timestamp": "2025-12-16T14:35:00.000Z",
  "data": {
    "from": "6281234567890",
    "message": "Lihat foto ini",
    "message_id": "3EB0B430B6F8F1D0E5F3",
    "name": "John Doe",
    "type": "image",
    "timestamp": 1702740900,
    "media": {
      "mimetype": "image/jpeg",
      "data": "base64_encoded_image_data...",
      "filename": "photo.jpg"
    }
  }
}

{
  "event": "ready",
  "device_id": "wa-user123-1234567890",
  "timestamp": "2025-12-16T14:20:00.000Z",
  "data": {
    "phone_number": "6285161058860",
    "device_name": "My WhatsApp Bot"
  }
}

$payload = file_get_contents('php://input');
$receivedSignature = $_SERVER['HTTP_X_WEBHOOK_SIGNATURE'] ?? '';
$webhookSecret = 'your_webhook_secret_from_dashboard';

// Hitung signature
$expectedSignature = hash_hmac('sha256', $payload, $webhookSecret);

// Verifikasi
if (hash_equals($expectedSignature, $receivedSignature)) {
    // ✅ Valid webhook dari WAGate
    $data = json_decode($payload, true);
    // Process webhook...
} else {
    // ❌ Invalid signature - reject request
    http_response_code(401);
    die('Unauthorized');
}

const crypto = require('crypto');
const express = require('express');
const app = express();

app.post('/webhook/whatsapp', express.json(), (req, res) => {
    const receivedSignature = req.headers['x-webhook-signature'];
    const webhookSecret = 'your_webhook_secret_from_dashboard';
    
    // Hitung signature
    const expectedSignature = crypto
        .createHmac('sha256', webhookSecret)
        .update(JSON.stringify(req.body))
        .digest('hex');
    
    // Verifikasi
    if (expectedSignature === receivedSignature) {
        // ✅ Valid webhook
        const { event, data } = req.body;
        
        if (event === 'message') {
            console.log('New message from:', data.from);
            console.log('Message:', data.message);
        }
        
        res.json({ success: true });
    } else {
        // ❌ Invalid signature
        res.status(401).json({ error: 'Unauthorized' });
    }
});

// routes/api.php
Route::post('/webhook/whatsapp', [WebhookController::class, 'handle']);

// app/Http/Controllers/WebhookController.php
public function handle(Request $request)
{
    // Verify signature
    $payload = $request->getContent();
    $signature = $request->header('X-Webhook-Signature');
    $secret = config('services.wagate.webhook_secret');
    
    $expected = hash_hmac('sha256', $payload, $secret);
    
    if (!hash_equals($expected, $signature)) {
        return response()->json(['error' => 'Unauthorized'], 401);
    }
    
    // Process webhook
    $event = $request->input('event');
    $data = $request->input('data');
    
    if ($event === 'message') {
        // Auto-reply example
        if (stripos($data['message'], 'harga') !== false) {
            $this->sendReply($data['from'], 'Harga produk kami mulai dari Rp 50.000');
        }
        
        // Save to database
        Message::create([
            'from' => $data['from'],
            'message' => $data['message'],
            'received_at' => now(),
        ]);
    }
    
    return response()->json(['success' => true]);
}

private function sendReply($to, $message)
{
    // Call WAGate API to send message
    Http::withToken(config('services.wagate.api_token'))
        ->post('https://wagate.in/api/webhook/send/your-session-id', [
            'to' => $to,
            'message' => $message,
        ]);
}

from flask import Flask, request, jsonify
import hmac
import hashlib
import json

app = Flask(__name__)
WEBHOOK_SECRET = 'your_webhook_secret'

@app.route('/webhook/whatsapp', methods=['POST'])
def webhook():
    # Get signature
    signature = request.headers.get('X-Webhook-Signature', '')
    
    # Calculate expected signature
    payload = request.get_data()
    expected = hmac.new(
        WEBHOOK_SECRET.encode(),
        payload,
        hashlib.sha256
    ).hexdigest()
    
    # Verify
    if not hmac.compare_digest(expected, signature):
        return jsonify({'error': 'Unauthorized'}), 401
    
    # Process webhook
    data = request.get_json()
    
    if data['event'] == 'message':
        from_number = data['data']['from']
        message = data['data']['message']
        
        print(f"New message from {from_number}: {message}")
        
        # Your logic here
        if 'help' in message.lower():
            send_reply(from_number, 'Silakan hubungi admin di 08123456789')
    
    return jsonify({'success': True})

def send_reply(to, message):
    import requests
    
    response = requests.post(
        'https://wagate.in/api/webhook/send/your-session-id',
        headers={'Authorization': 'Bearer YOUR_API_TOKEN'},
        json={'to': to, 'message': message}
    )
    return response.json()

if __name__ == '__main__':
    app.run(port=5000)

// Simple auto-reply bot
app.post('/webhook/whatsapp', (req, res) => {
    const { event, data } = req.body;
    
    if (event === 'message') {
        const message = data.message.toLowerCase();
        const from = data.from;
        
        // Keyword-based auto-reply
        const replies = {
            'halo': 'Halo! Ada yang bisa kami bantu?',
            'harga': 'Harga produk kami mulai dari Rp 50.000. Silakan cek katalog lengkap di website kami.',
            'order': 'Untuk order silakan ketik: ORDER [Nama Produk] [Jumlah]',
            'cs': 'Customer Service kami siap membantu di 08123456789',
            'jam': `Kami buka Senin-Jumat 09:00-17:00 WIB`,
        };
        
        // Check keywords
        for (const [keyword, reply] of Object.entries(replies)) {
            if (message.includes(keyword)) {
                sendMessage(from, reply);
                break;
            }
        }
        
        // Save to database
        saveMessage(data);
    }
    
    res.json({ success: true });
});

# Install ngrok
# Download dari https://ngrok.com/download

# Jalankan local server Anda (contoh: port 8000)
php artisan serve

# Di terminal lain, jalankan ngrok
ngrok http 8000

# Copy URL yang muncul (contoh: https://abc123.ngrok.io)
# Paste ke Dashboard Webhook URL: https://abc123.ngrok.io/webhook/whatsapp

# Kirim test webhook dari dashboard
# Cek terminal ngrok - Anda akan lihat request masuk!

GET https://wagate.in/api/webhook/quota
Authorization: Bearer YOUR_API_TOKEN

# Response:
{
  "success": true,
  "data": {
    "quota_limit": 1000,
    "quota_used": 234,
    "quota_remaining": 766,
    "quota_sent": 120,
    "quota_received": 114,
    "quota_reset_at": "2025-01-01T00:00:00Z"
  }
}