Initial commit: sap-webhook-api

API NestJS que recibe el Webhook Messenger de SAP Business One (CloudEvents), valida HMAC opcional y guarda cada notificacion local (data/events/) e inserta en Postgres (webhook_events). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-16 07:41:25 -05:00
commit 5e0df73477
@@ -0,0 +1,81 @@
+#!/usr/bin/env bash
+# Revierte la suscripción de SAP a AuthenticationType: None, y vacía
+# HMAC_SECRET_KEY en .env para que la API deje de exigir la firma.
+#
+# El Service Layer no permite cambiar AuthenticationType con PATCH sobre
+# una suscripción existente -> hay que Pause + Delete + volver a crearla
+# (POST), reusando su WebhookURL/Handshake/EventCollection actuales.
+set -euo pipefail
+cd "$(dirname "$0")/.."
+
+ENV_FILE=".env"
+[ -f "$ENV_FILE" ] || { echo "No existe $ENV_FILE (copiá .env.example primero)"; exit 1; }
+set -a
+source "$ENV_FILE"
+set +a
+
+: "${SERVICE_LAYER_URL:?Falta SERVICE_LAYER_URL en .env}"
+: "${COMPANY_DB:?Falta COMPANY_DB en .env}"
+: "${SL_USER:?Falta SL_USER en .env}"
+: "${SL_PASS:?Falta SL_PASS en .env}"
+: "${WEBHOOK_ID:?Falta WEBHOOK_ID en .env}"
+
+COOKIE_JAR="$(mktemp)"
+trap 'rm -f "$COOKIE_JAR"' EXIT
+
+echo "Login en Service Layer ($SERVICE_LAYER_URL, compañía $COMPANY_DB)..."
+curl -sk -c "$COOKIE_JAR" -o /dev/null -w "  -> HTTP %{http_code}\n" \
+  -X POST "$SERVICE_LAYER_URL/Login" \
+  -H "Content-Type: application/json" \
+  -d "{\"CompanyDB\":\"$COMPANY_DB\",\"UserName\":\"$SL_USER\",\"Password\":\"$SL_PASS\"}"
+
+echo "Leyendo configuración actual de '$WEBHOOK_ID'..."
+CURRENT=$(curl -sk -b "$COOKIE_JAR" "$SERVICE_LAYER_URL/EventSubscriptions('$WEBHOOK_ID')")
+
+NEW_BODY=$(echo "$CURRENT" | python3 -c "
+import json, sys
+current = json.load(sys.stdin)
+body = {
+    'WebhookID': current['WebhookID'],
+    'WebhookURL': current['WebhookURL'],
+    'AuthenticationType': 'None',
+    'Handshake': current.get('Handshake', 'tNO'),
+    'VerifyCertificate': current.get('VerifyCertificate', 'tNO'),
+    'EventCollection': [
+        {'BusinessObject': e['BusinessObject'], 'TransactionType': e['TransactionType']}
+        for e in current['EventCollection']
+    ],
+}
+print(json.dumps(body))
+")
+
+echo "Pausando suscripción '$WEBHOOK_ID'..."
+curl -sk -b "$COOKIE_JAR" -o /dev/null -w "  -> HTTP %{http_code}\n" \
+  -X POST "$SERVICE_LAYER_URL/EventSubscriptions('$WEBHOOK_ID')/Pause"
+
+echo "Eliminando suscripción '$WEBHOOK_ID'..."
+curl -sk -b "$COOKIE_JAR" -o /dev/null -w "  -> HTTP %{http_code}\n" \
+  -X DELETE "$SERVICE_LAYER_URL/EventSubscriptions('$WEBHOOK_ID')"
+
+echo "Recreando '$WEBHOOK_ID' con AuthenticationType: None..."
+curl -sk -b "$COOKIE_JAR" -o /dev/null -w "  -> HTTP %{http_code}\n" \
+  -X POST "$SERVICE_LAYER_URL/EventSubscriptions" \
+  -H "Content-Type: application/json" \
+  -d "$NEW_BODY"
+
+# El POST de creación ignora el VerifyCertificate que mandamos y siempre
+# arranca en tYES -> hace falta un PATCH aparte para volver a ponerlo en tNO.
+echo "Ajustando VerifyCertificate: tNO..."
+curl -sk -b "$COOKIE_JAR" -o /dev/null -w "  -> HTTP %{http_code}\n" \
+  -X PATCH "$SERVICE_LAYER_URL/EventSubscriptions('$WEBHOOK_ID')" \
+  -H "Content-Type: application/json" \
+  -d '{"VerifyCertificate": "tNO"}'
+
+if grep -q '^HMAC_SECRET_KEY=' "$ENV_FILE"; then
+  sed -i.bak "s|^HMAC_SECRET_KEY=.*|HMAC_SECRET_KEY=|" "$ENV_FILE"
+  rm -f "$ENV_FILE.bak"
+  echo
+  echo "HMAC_SECRET_KEY vaciado en $ENV_FILE"
+fi
+
+echo "Listo. Reiniciá la API (npm run start) para que deje de exigir la firma."