Merge pull request #31 from fixie-ai/ben-add-webhooks

Ben add webhooks

docs/src/content/codesnippets/webhooks-security.txt

@@ -0,0 +1,12 @@
+import datetime
+import hmac
+
+request_timestamp = request.headers["X-Ultravox-Webhook-Timestamp"]
+if datetime.datetime.now() - datetime.dateimte.fromisoformat(request_timestamp) > datetime.timedelta(minutes=1):
+  raise RuntimeError("Expired message")
+expected_signature = hmac.new(WEBHOOK_SECRET.encode(), request.content + request_timestamp.encode(), "sha256").hexdigest()
+for signature in request.headers["X-Ultravox-Webhook-Signature"].split(","):
+  if hmac.compare_digest(signature, expected_signature):
+    break  # Valid signature
+else:
+  raise RuntimeError("Message or timestamp was tampered with")