{
  "name": "Application for external integration",
  "secret": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQLJpFe5pVIDE9fknN1z2rDIgl9uDLqK8oW1MgmI3JwIDAQAB"
}

{
  "url": "http://example.url",
  "filters": [
    {
      "eventType": "exampleentity:updated",
      "condition": "data.exampleAttribute eq 'someValue'"
    }
  ],
  "customHeaders": [
    {
      "name": "Example Header",
      "value": "Example Header Value"
    }
  ]
}

{
  "eventType": "exampleentity:updated",
  "condition": "data.exampleAttribute eq 'someValue'"
}

{
  "id": "8469bf71-4942-45ea-98b8-393077288785",
  "time": "2024-02-14T14:24:40Z",
  "type": "crmatch:updated",
  "applicationId": "6fc051df-90e0-4fa4-b78e-af243f0023b3",
  "webhookId": "22cc6baf-7d9a-4230-a5fe-8004a9b34a17",
  "tenant": "cxdev50streamer",
  "data": {
    "entityId": "2.3",
    "changedFields": [
      "attributechanges",
      "statusinfo",
      "modificationdate"
    ]
  }
}

{
  "entityId": "2.3",
  "changedFields": [
    "attributechanges",
    "statusinfo",
    "modificationdate"
  ]
}

{
  "filters": [
    {
      "eventType": "cremployee:updated"
    }
  ]
}

{
  "filters": [
    {
      "eventType": "crmatch:created"
    }
  ]
}

{
  "filters": [
    {
      "eventType": "cremployee:updated",
      "condition": "metadata.paths has any of ['hascar']"
    }
  ]
}

{
  "filters": [
    {
      "eventType": "cremployee:updated",
      "condition": "metadata.paths has any of ['hascar', 'notes']"
    }
  ]
}

"customHeaders": [
{
"name": "Custom-Signature",
"value": "FE: Basic Y3g1YXBpY2xpZW50OmN4NWNvbm5lY3RhcGlmZWF0dXJl"
}
]

public class SignatureVerification {
    public static void main(String[] args) throws NoSuchAlgorithmException, InvalidKeySpecException, SignatureException, InvalidKeyException {
        var payload = "<your raw request body>";
        var signature = "<your Cx-Signature header value>";
        var applicationSecret = "<your webhook application secret>";
        
        var verified = verifySignature(applicationSecret, signature, payload);
        System.out.println("Signature is verified: " + verified);
    }

    private static boolean verifySignature(String applicationSecret, String signature, String payload) throws NoSuchAlgorithmException, InvalidKeySpecException, InvalidKeyException, SignatureException {
        var publicKeyAsString = applicationSecret
                .replace("-----BEGIN PUBLIC KEY-----", "")
                .replace("\\n", "")
                .replace("-----END PUBLIC KEY-----", "");

        var payloadBytes = payload.getBytes(StandardCharsets.UTF_8);
        var signatureBytes = Base64.getDecoder().decode(signature);
        var publicKeyBytes = Base64.getDecoder().decode(publicKeyAsString);

        var spec = new X509EncodedKeySpec(publicKeyBytes);
        var keyFactory = KeyFactory.getInstance("RSA");
        var publicKey = keyFactory.generatePublic(spec);
        var signatureWithPublicKey = Signature.getInstance("SHA256withRSA");
        signatureWithPublicKey.initVerify(publicKey);
        signatureWithPublicKey.update(payloadBytes);
        
        return signatureWithPublicKey.verify(signatureBytes);
    }
}

// Importing Required Modules
const crypto = require('crypto');

function verifySignature(data, signature, applicationSecret) {
    const publicKey = crypto.createPublicKey(applicationSecret);
    const algorithm = "SHA256";
    const verifier = crypto.createVerify(algorithm);
    verifier.update(data)
    const signatureBuffer = Buffer.from(signature, 'base64');
    
    return verifier.verify(publicKey, signatureBuffer);
}

// Example usage
const data = '<your raw request body>';
const applicationSecret = "<your webhook application secret>";
const signature = "<your Cx-Signature header value>";

let isVerified = verifySignature(data, signature, applicationSecret);
console.log(`Is signature verified: ${isVerified}`);

<?php
function verifySignature($data, $signature, $applicationSecret)
{
    $publicKey = openssl_pkey_get_public($applicationSecret);
    $verificationResult = openssl_verify($data, base64_decode($signature), $publicKey, OPENSSL_ALGO_SHA256);
    
    if ($verificationResult == 1) {
        echo "Signature is valid.";
    } elseif ($verificationResult == 0) {
        echo "Signature is invalid.";
    } else {
        echo "Error during verification.";
    }
}

// Example usage
$data = "<your raw request body>";
$signature = "<your Cx-Signature header value>";
$applicationSecret = "<your webhook application secret>";

verifySignature($data, $signature, $applicationSecret);
?>