面向 Next.js 的 Device Intelligence

// app/api/webhook/tracio/route.ts — identification events land here in real time
import crypto from 'crypto'
function verify(raw: Buffer, header: string, secret: string) {
  const p = Object.fromEntries(header.split(',').map((kv) => kv.split('=')))
  const signed = Buffer.concat([Buffer.from(`${p.t}.`), raw])
  const expected = crypto.createHmac('sha256', secret).update(signed).digest('hex')
  const a = Buffer.from(p.v1, 'hex')
  const b = Buffer.from(expected, 'hex')
  return a.length === b.length && crypto.timingSafeEqual(a, b)
}
export async function POST(req: Request) {
  const raw = Buffer.from(await req.arrayBuffer())
  const sig = req.headers.get('x-tracio-signature') ?? ''
  if (!verify(raw, sig, process.env.TRACIO_WEBHOOK_SECRET!)) {
    return new Response('Invalid signature', { status: 401 })
  }
  const event = JSON.parse(raw.toString())
  if (event.bot.result === 'bot') {
    await blockVisitor(event.visitorId)
  }
  return new Response('OK')
}