import hmac
import hashlib
import os
from flask import Flask, request, jsonify

app = Flask(__name__)
WEBHOOK_SECRET = os.getenv("OLTANOM_SECRET", "whsec_your_secret_key")

@app.route('/webhook/oltanom', methods=['POST'])
def handle_oltanom_webhook():
    signature_header = request.headers.get('X-Oltanom-Signature', '')
    raw_payload = request.get_data()

    # HMAC-SHA256 imza doğrulaması
    computed_signature = 'sha256=' + hmac.new(
        WEBHOOK_SECRET.encode('utf-8'),
        raw_payload,
        hashlib.sha256
    ).hexdigest()

    if not hmac.compare_digest(signature_header, computed_signature):
        return jsonify({"error": "Geçersiz imza"}), 401

    data = request.json
    threat = data.get("threat", {})

    print(f"[ALARM] Oltanom tehdit bildirimi: {threat.get('domain')} -> Hedef: {threat.get('target_brand')}")
    # TODO: SOAR / takedown tetikleme fonksiyonunuz

    return jsonify({"status": "received"}), 200

if __name__ == '__main__':
    app.run(port=8080)

const express = require('express');
const crypto = require('crypto');
const app = express();

const WEBHOOK_SECRET = process.env.OLTANOM_SECRET || 'whsec_your_secret_key';

app.post('/webhook/oltanom', express.raw({ type: 'application/json' }), (req, res) => {
  const signature = req.headers['x-oltanom-signature'] || '';

  // HMAC-SHA256 imza doğrulaması
  const expectedSig = 'sha256=' + crypto.createHmac('sha256', WEBHOOK_SECRET)
                                        .update(req.body)
                                        .digest('hex');

  const a = Buffer.from(signature);
  const b = Buffer.from(expectedSig);
  if (a.length !== b.length || !crypto.timingSafeEqual(a, b)) {
    return res.status(401).json({ error: 'Geçersiz imza' });
  }

  const { threat } = JSON.parse(req.body.toString('utf8'));
  console.log(`[ALARM] Oltanom tehdit bildirimi: ${threat.domain} -> Hedef: ${threat.target_brand}`);

  res.status(200).json({ status: 'received' });
});

app.listen(8080, () => console.log('Oltanom webhook alıcısı 8080 portunda aktif.'));