Webhooks payload encrypt & decrypt

webhook-payload-encrypt-decrypt.js

const CryptoJS = require('crypto-js')
const secret = 'my-secret-key' // shared by producer & consumer

// Producer
const payload = {
  name: 'John Doe',
  email: 'john.doe@example.com',
  phone: '555-1234',
}

// send via header
const signature = CryptoJS.HmacSHA256(JSON.stringify(payload), secret).toString()

const encrypted = CryptoJS.AES.encrypt(JSON.stringify(payload), secret).toString()

console.log({ signature, encrypted })
// {
//    signature: 'eb463519efbb1073912188c21758719f5774389c697e5bb45c2b990ffc72b457',
//    encrypted: 'U2FsdGVkX1/ZiUfmnwwUW/xbmw5bx7DDcMZhTICKBxIZgQVy+OnUULeu0uzNtVckVXqXFQCf6scdAwT/kTHuVU+EhZm69jgUtB5V2CE5d958idRR1pt4Z1wYhsw1bRlN'
// }

// Consumer
const bytes = CryptoJS.AES.decrypt(encrypted, secret)
const decryptedPayload = JSON.parse(bytes.toString(CryptoJS.enc.Utf8))

// verify the integrity of data using signature
const verified = CryptoJS.HmacSHA256(JSON.stringify(decryptedPayload), secret).toString() === signature

console.log({ decryptedPayload, verified })
// {
//     decryptedPayload: {
//       name: 'John Doe',
//       email: 'john.doe@example.com',
//       phone: '555-1234'
//     },
//     verified: true
// }