Node.js SDK

import { validateWebhook } from '@webdecoy/node';

app.post('/webhooks/webdecoy', (req, res) => {
  const signature = req.headers['x-webdecoy-signature'];
  const payload = req.body;

  const isValid = validateWebhook(
    payload,
    signature,
    process.env.WEBHOOK_SECRET
  );

  if (!isValid) {
    return res.status(401).send('Invalid signature');
  }

  // Process the detection event
  const { detection_type, threat_score, ip } = payload;

  console.log(`Detection: ${detection_type}, Score: ${threat_score}`);

  res.status(200).send('OK');
});

import express from 'express';
import { webdecoyMiddleware } from '@webdecoy/express';

const app = express();

// Apply globally
app.use(webdecoyMiddleware({
  apiKey: process.env.WEBDECOY_API_KEY,
  sensitivity: 'medium',
  blockThreshold: 70,
  exclude: ['/health', '/static/*']
}));

// Or per-route
app.post('/api/login',
  webdecoyMiddleware({ blockThreshold: 50 }),
  (req, res) => {
    // Access detection results
    const { score, threatLevel } = req.webdecoy;

    if (req.webdecoy.shouldChallenge()) {
      return res.status(429).json({
        error: 'Please complete verification'
      });
    }

    // Process login...
  }
);

import { withWebDecoy } from '@webdecoy/nextjs';
import { NextResponse } from 'next/server';

export default withWebDecoy({
  apiKey: process.env.WEBDECOY_API_KEY,

  // Handle detection results
  onDetection: async (detection, request) => {
    if (detection.score > 80) {
      return NextResponse.json(
        { error: 'Blocked' },
        { status: 403 }
      );
    }

    if (detection.shouldChallenge()) {
      return NextResponse.redirect(
        new URL('/verify', request.url)
      );
    }

    return NextResponse.next();
  }
});

export const config = {
  matcher: ['/api/:path*', '/checkout/:path*']
};