Alerts

{
  "id": "0192f3a4-0000-7000-8000-00000000e001",
  "type": "alert.fired",
  "created_at": "2026-10-07T12:00:00.000Z",
  "org_id": "0192f3a4-0000-7000-8000-00000000a001",
  "rule": {
    "id": "0192f3a4-0000-7000-8000-00000000f001",
    "preset": "crash_free_below",
    "params": { "threshold_percent": 99, "window_hours": 24, "min_sessions": 100 }
  },
  "project": { "id": "0192f3a4-0000-7000-8000-00000000a101", "name": "Shop" },
  "app_id": null,
  "value": 0.974,
  "detail": { "sessions": 1234, "crashed": 32, "threshold_percent": 99, "window_hours": 24 },
  "summary": "Crash-free sessions in Shop fell to 97.4%, below 99% (1,234 sessions in 24 h).",
  "url": "https://app.apsio.io/o/0192f3a4-0000-7000-8000-00000000a001/p/0192f3a4-0000-7000-8000-00000000a101/releases"
}

Apsio-Signature: t=1791374400,v1=5f2b...e9
Apsio-Event-Id: 0192f3a4-0000-7000-8000-00000000e001

import { createHmac, timingSafeEqual } from 'node:crypto'

export function verify(secret, rawBody, header, now = Date.now()) {
  let t
  const signatures = []
  for (const part of String(header ?? '').split(',')) {
    const [key, value = ''] = part.trim().split('=', 2)
    if (key === 't' && /^\d{1,12}$/.test(value)) t = Number(value)
    if (key === 'v1' && /^[0-9a-f]{64}$/.test(value)) signatures.push(Buffer.from(value, 'hex'))
  }
  if (t === undefined || Math.abs(now / 1000 - t) > 300) return false
  const expected = createHmac('sha256', secret).update(`${t}.`).update(rawBody).digest()
  return signatures.some((s) => timingSafeEqual(s, expected))
}

import hashlib
import hmac
import re
import time


def verify(secret: str, raw_body: bytes, header: str, now: float | None = None) -> bool:
    t = None
    signatures = []
    for part in (header or "").split(","):
        key, _, value = part.strip().partition("=")
        if key == "t" and re.fullmatch(r"\d{1,12}", value):
            t = int(value)
        elif key == "v1" and re.fullmatch(r"[0-9a-f]{64}", value):
            signatures.append(value)
    if t is None or abs((time.time() if now is None else now) - t) > 300:
        return False
    expected = hmac.new(secret.encode(), f"{t}.".encode() + raw_body, hashlib.sha256).hexdigest()
    return any(hmac.compare_digest(expected, s) for s in signatures)