রেডি-টু-পেস্ট কোড স্নিপেট (Laravel / PHP Controller)

// app/Http/Controllers/BongoMindWebhookController.php
public function handle(Request $request) {
    $signature = $request->header('X-BongoMind-Signature');
    $timestamp = $request->header('X-BongoMind-Timestamp');
    
    // Verify HMAC-SHA256 signature
    $expected = 'sha256=' . hash_hmac('sha256', $timestamp . '.' . $request->getContent(), config('bongomind.secret'));
    if (!hash_equals($expected, $signature)) {
        return response()->json(['ok' => false, 'error' => 'invalid_signature'], 401);
    }
    
    $tool = $request->input('tool');
    if ($tool === 'get_user_bill') {
        $bill = Bill::where('user_id', $request->input('end_user_id'))->first();
        return response()->json(['ok' => true, 'data' => ['due_amount' => $bill->due, 'due_date' => $bill->date]]);
    }
    return response()->json(['ok' => false, 'error' => 'tool_not_found'], 404);
}