Dokümantasyon

curl -X POST https://flanque.com/api/v1/messages \
  -H "Authorization: Bearer flq_live_XXXXXXXXXXXXXXXX" \
  -H "Content-Type: application/json" \
  -d '{
    "from": "Firma <info@firma.com>",
    "to": "musteri@example.com",
    "subject": "Siparişiniz onaylandı",
    "html": "<h1>Teşekkürler!</h1><p>Sipariş no: 12345</p>",
    "tags": ["order", "confirmation"],
    "idempotencyKey": "order-12345"
  }'

import { Flanque } from class="tok-str">'flanque-sdk'

const flanque = new Flanque(process.env.FLANQUE_API_KEY)

const { messageId } = await flanque.emails.send({
  from: class="tok-str">'Firma <info@firma.com>',
  to: class="tok-str">'musteri@example.com',
  subject: class="tok-str">'Siparişiniz onaylandı',
  html: class="tok-str">'<h1>Teşekkürler!</h1><p>Sipariş no: 12345</p>',
  tags: [class="tok-str">'order', class="tok-str">'confirmation'],
  idempotencyKey: class="tok-str">'order-12345',
})

console.log(messageId) class=class="tok-str">"tok-cm">// msg_8f3a…

import { createHmac, timingSafeEqual } from class="tok-str">'node:crypto'

class=class="tok-str">"tok-cm">// Başlık: X-Flanque-Signature: t=<ms>,v1=<hex>; imza class="tok-str">"${t}.${rawBody}" üzerinden hesaplanır.
export function verifyFlanqueSignature(rawBody, header, secret, toleranceMs = 5 * 60 * 1000) {
  const parts = Object.fromEntries((header ?? class="tok-str">'').split(class="tok-str">',').map((p) => p.split(class="tok-str">'=')))
  const t = Number(parts.t)
  if (!Number.isFinite(t) || !parts.v1 || Math.abs(Date.now() - t) > toleranceMs) return false
  const expected = createHmac(class="tok-str">'sha256', secret).update(class="tok-str">`${t}.${rawBody}`).digest(class="tok-str">'hex')
  const a = Buffer.from(expected, class="tok-str">'utf8')
  const b = Buffer.from(parts.v1, class="tok-str">'utf8')
  return a.length === b.length && timingSafeEqual(a, b)
}

class=class="tok-str">"tok-cm">// Express: ham gövdeyi kullanın (express.raw)
app.post(class="tok-str">'/hooks/flanque', express.raw({ type: class="tok-str">'application/json' }), (req, res) => {
  if (!verifyFlanqueSignature(req.body.toString(class="tok-str">'utf8'), req.get(class="tok-str">'X-Flanque-Signature'), process.env.FLANQUE_WEBHOOK_SECRET)) {
    return res.status(401).end()
  }
  const event = JSON.parse(req.body.toString(class="tok-str">'utf8'))
  res.status(200).end()
})