Подключение своего сайта
через Webhook

Content-Type: application/json
X-SeoSmith-Signature: sha256=<hmac-hex>
X-SeoSmith-Event: article.published

{
  "event": "article.published",
  "article": {
    "id": 123,
    "title": "Заголовок статьи (H1)",
    "slug": "slug-stati",
    "url": "slug-stati",
    "body": "<p>Готовый HTML-текст статьи...</p>",
    "meta": {
      "title": "SEO-заголовок до 60 символов",
      "description": "Мета-описание до 165 символов",
      "keywords": ["ключевое слово 1", "ключевое слово 2"]
    },
    "faq": [
      { "q": "Вопрос?", "a": "Ответ." }
    ],
    "json_ld": "{...BlogPosting schema...}",
    "image_prompt": "Описание для генерации изображения",
    "alt_text": "Alt-текст для изображения"
  },
  "company": {
    "name": "Название компании",
    "site_url": "https://ваш-сайт.ru"
  }
}

// app/api/seosmith/route.ts
import { createHmac, timingSafeEqual } from "crypto";
import { NextRequest, NextResponse } from "next/server";

export async function POST(req: NextRequest) {
  const rawBody = await req.text();
  const signature = req.headers.get("x-seosmith-signature") ?? "";
  const received = signature.replace("sha256=", "");

  const expected = createHmac("sha256", process.env.SEOSMITH_WEBHOOK_SECRET!)
    .update(rawBody)
    .digest("hex");

  if (!timingSafeEqual(Buffer.from(expected), Buffer.from(received))) {
    return NextResponse.json({ error: "Invalid signature" }, { status: 401 });
  }

  const payload = JSON.parse(rawBody);
  if (payload.event !== "article.published") {
    return NextResponse.json({ ok: true, skipped: true });
  }

  const { article } = payload;
  // Сохраните статью в вашу БД или файловую систему
  // await db.articles.create({ slug: article.slug, body: article.body, ... })

  return NextResponse.json({ ok: true });
}

// routes/api.php
Route::post('/seosmith', function (Request $request) {
    $rawBody = $request->getContent();
    $signature = $request->header('X-SeoSmith-Signature', '');
    $received = str_replace('sha256=', '', $signature);
    $expected = hash_hmac('sha256', $rawBody, env('SEOSMITH_WEBHOOK_SECRET'));

    if (!hash_equals($expected, $received)) {
        return response()->json(['error' => 'Invalid signature'], 401);
    }

    $payload = $request->json()->all();
    if (($payload['event'] ?? '') !== 'article.published') {
        return response()->json(['ok' => true, 'skipped' => true]);
    }

    $article = $payload['article'];
    // Article::create(['slug' => $article['slug'], 'body' => $article['body'], ...]);

    return response()->json(['ok' => true]);
});

import hashlib, hmac, os
from fastapi import APIRouter, Header, HTTPException, Request
from fastapi.responses import JSONResponse

router = APIRouter()

@router.post("/api/seosmith")
async def receive_webhook(
    request: Request,
    x_seosmith_signature: str = Header(alias="X-SeoSmith-Signature"),
):
    raw_body = await request.body()
    secret = os.environ["SEOSMITH_WEBHOOK_SECRET"]
    expected = hmac.new(secret.encode(), raw_body, hashlib.sha256).hexdigest()
    received = x_seosmith_signature.removeprefix("sha256=")

    if not hmac.compare_digest(expected, received):
        raise HTTPException(status_code=401, detail="Invalid signature")

    payload = await request.json()
    if payload.get("event") != "article.published":
        return JSONResponse({"ok": True, "skipped": True})

    article = payload["article"]
    # Сохраните статью в вашу БД
    return JSONResponse({"ok": True})

curl -X POST https://ваш-сайт.ru/api/seosmith

SEOSMITH_WEBHOOK_SECRET=вставьте-секрет-здесь