Webhooks

curl --fail-with-body -X POST \
  "https://app.beam.cloud/api/v1/webhook/$WORKSPACE_ID" \
  -H "Authorization: Bearer $BEAM_TOKEN" \
  -H 'Content-Type: application/json' \
  -d '{"url":"https://your-service.example/beam-events","event_types":["task.*","stub.deploy"],"description":"Deployment and task events"}'

import hashlib
import hmac


def valid_signature(raw_body: bytes, signature: str, secret: str) -> bool:
    expected = "sha256=" + hmac.new(
        secret.encode(), raw_body, hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(expected, signature)