SDKs & Libraries

pip install ifo4

// Express.js webhook handler
const express = require('express');
const crypto = require('crypto');
const app = express();

app.use(express.json());

// Verify webhook signature
function verifySignature(payload, signature, secret) {
  const expected = crypto
    .createHmac('sha256', secret)
    .update(JSON.stringify(payload))
    .digest('hex');
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expected)
  );
}

app.post('/webhooks/ifo4', (req, res) => {
  const signature = req.headers['x-ifo4-signature'];
  const webhookSecret = process.env.IFO4_WEBHOOK_SECRET;

  // Verify signature
  if (!verifySignature(req.body, signature, webhookSecret)) {
    return res.status(401).json({ error: 'Invalid signature' });
  }

  const { event, data, timestamp } = req.body;

  switch (event) {
    case 'anomaly.detected':
      console.log(`Anomaly: ${data.service} - ${data.description}`);
      sendSlackAlert(data);
      break;

    case 'commitment.expiring':
      console.log(`Expiring: ${data.commitmentId} in ${data.daysRemaining}d`);
      createRenewalTicket(data);
      break;

    case 'compliance.drift':
      console.log(`Drift: ${data.control} - ${data.framework}`);
      notifySecurityTeam(data);
      break;

    default:
      console.log(`Unhandled event: ${event}`);
  }

  res.json({ received: true });
});

app.listen(3000);