WhatsApp Business Cloud API Integration Services

import { NextRequest, NextResponse } from "next/server";
import crypto from "crypto";

// 1. Webhook Challenge Verification (GET)
export async function GET(req: NextRequest) {
  const { searchParams } = new URL(req.url);
  const mode = searchParams.get("hub.mode");
  const token = searchParams.get("hub.verify_token");
  const challenge = searchParams.get("hub.challenge");

  if (mode === "subscribe" && token === process.env.META_VERIFY_TOKEN) {
    return new Response(challenge, { status: 200 });
  }
  return new Response("Forbidden", { status: 403 });
}

// 2. Incoming Event & Signature Verification (POST)
export async function POST(req: NextRequest) {
  const rawBody = await req.text();
  const signature = req.headers.get("x-hub-signature-256");

  const expectedSig = "sha256=" + crypto
    .createHmac("sha256", process.env.META_APP_SECRET!)
    .update(rawBody)
    .digest("hex");

  if (signature !== expectedSig) {
    return NextResponse.json({ error: "Invalid signature" }, { status: 401 });
  }

  const payload = JSON.parse(rawBody);
  // Queue incoming message or delivery status to Redis / BullMQ for async processing
  await messageQueue.add("whatsapp-event", payload);

  return NextResponse.json({ status: "success" });
}