Trade alerts

import { createHmac, timingSafeEqual } from "node:crypto";

Bun.serve({
  port: 3000,
  async fetch(request) {
    const body = await request.text();
    const { t, v1 } = Object.fromEntries((request.headers.get("x-kopyon-signature") ?? "").split(",").map((p) => p.split("=")));
    const expected = createHmac("sha256", process.env.WEBHOOK_SECRET).update(t + "." + body).digest();
    if (!v1 || !timingSafeEqual(Buffer.from(v1, "hex"), expected)) return new Response("bad signature", { status: 401 });

    const frame = JSON.parse(body);
    for (const e of frame.data?.events ?? []) {
      await fetch(process.env.DISCORD_WEBHOOK, {
        method: "POST",
        headers: { "content-type": "application/json" },
        body: JSON.stringify({ content: frame.traderId + " " + e.event + " " + e.side + " " + e.symbol }),
      });
    }
    return new Response("ok");
  },
});