API Externa

Authorization: Bearer fsk_sua_chave_api_aqui

curl -X GET "https://feito.io/api/v1/leads?phone=%2B5511999999999" \
  -H "Authorization: Bearer fsk_sua_chave_api"

{
  "lead": {
    "id": "550e8400-e29b-41d4-a716-446655440000",
    "phone": "+5511999999999",
    "contactId": "crm_123",
    "name": "João Silva",
    "state": "active",
    "handler": "ai",
    "createdAt": "2024-01-15T10:00:00Z"
  }
}

{
  "error": "Lead not found"
}

curl -X POST https://feito.io/api/v1/leads \
  -H "Authorization: Bearer fsk_sua_chave_api" \
  -H "Content-Type: application/json" \
  -d '{
    "contactId": "crm_123",
    "phone": "+5511999999999",
    "name": "João Silva"
  }'

{
  "lead": {
    "id": "550e8400-e29b-41d4-a716-446655440000",
    "phone": "+5511999999999",
    "contactId": "crm_123",
    "name": "João Silva",
    "state": "new",
    "handler": "ai",
    "createdAt": "2024-01-15T10:00:00Z"
  },
  "created": true
}

{
  "lead": { ... },
  "created": false
}

curl -X POST https://feito.io/api/v1/leads/550e8400.../send-template \
  -H "Authorization: Bearer fsk_sua_chave_api" \
  -H "Content-Type: application/json" \
  -d '{
    "template_name": "welcome_message",
    "variables": {
      "1": "João",
      "2": "Empresa XYZ"
    }
  }'

{
  "success": true,
  "messageSid": "SMXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
}

curl -X POST https://feito.io/api/v1/replies \
  -H "Authorization: Bearer fsk_sua_chave_api" \
  -H "Content-Type: application/json" \
  -d '{
    "contactId": "user_123",
    "contactName": "João Silva",
    "message": "Olá, gostaria de agendar uma consulta"
  }'

{
  "id": "550e8400-e29b-41d4-a716-446655440000",
  "status": "queued"
}

{
  "id": "evt_abc123def456",
  "type": "reply.generated",
  "api_version": "2024-01-01",
  "created_at": "2024-01-15T10:30:00.000Z",
  "account_id": "acc_xyz789",
  "data": {
    "object": { ... }
  }
}

{
  "id": "evt_xyz789abc123",
  "type": "lead.created",
  "api_version": "2024-01-01",
  "created_at": "2024-01-15T10:30:00.000Z",
  "account_id": "acc_xyz789",
  "data": {
    "object": {
      "lead_id": "550e8400-e29b-41d4-a716-446655440000",
      "external_id": "crm_123",
      "phone": "+5511999999999",
      "profile_name": "João Silva",
      "source": "external_api"
    }
  }
}

{
  "id": "evt_abc123def456",
  "type": "reply.generated",
  "api_version": "2024-01-01",
  "created_at": "2024-01-15T10:30:00.000Z",
  "account_id": "acc_xyz789",
  "data": {
    "object": {
      "request_id": "550e8400-e29b-41d4-a716-446655440000",
      "contact_id": "user_123",
      "reply": "Olá João! Claro, ficarei feliz em ajudá-lo...",
      "confidence": 0.92
    }
  }
}

{
  "id": "evt_abc456def789",
  "type": "reply.skipped",
  "api_version": "2024-01-01",
  "created_at": "2024-01-15T10:30:00.000Z",
  "account_id": "acc_xyz789",
  "data": {
    "object": {
      "request_id": "550e8400-e29b-41d4-a716-446655440000",
      "contact_id": "user_123",
      "reason": "Contato confirmou mensagem anterior"
    }
  }
}

{
  "id": "evt_abcdef123456",
  "type": "reply.failed",
  "api_version": "2024-01-01",
  "created_at": "2024-01-15T10:30:00.000Z",
  "account_id": "acc_xyz789",
  "data": {
    "object": {
      "request_id": "550e8400-e29b-41d4-a716-446655440000",
      "contact_id": "user_123",
      "error": "Timeout na orquestração"
    }
  }
}

const crypto = require('crypto');

function verifyWebhookSignature(req, secret) {
  const signature = req.headers['x-feito-signature'];
  const timestamp = req.headers['x-feito-timestamp'];
  const payload = JSON.stringify(req.body);

  // Verifica se timestamp está dentro de 5 minutos
  const now = Math.floor(Date.now() / 1000);
  if (Math.abs(now - parseInt(timestamp)) > 300) {
    return false; // Replay attack prevention
  }

  // Calcula assinatura esperada
  const signedPayload = `${timestamp}.${payload}`;
  const expected = crypto
    .createHmac('sha256', secret)
    .update(signedPayload)
    .digest('hex');

  // Extrai valor da assinatura (remove prefixo sha256=)
  const sigValue = signature.replace('sha256=', '');

  return crypto.timingSafeEqual(
    Buffer.from(sigValue),
    Buffer.from(expected)
  );
}

{
  "error": "contactId is required"
}