vercel-webhooks-events

# Vercel Webhooks & Events ## Overview Handle Vercel webhook events (deployment.created, deployment.ready, deployment.error) with HMAC signature verification. Covers both integration webhooks (Vercel Marketplace) and project-level deploy hooks. ## Prerequisites - HTTPS endpoint accessible from the internet - Webhook secret from Vercel dashboard or integration settings - `crypto` module for HMAC signature verification ## Instructions ### Step 1: Register a Webhook In the Vercel dashboard: 1. Go to **Settings > Webhooks** 2. Add your endpoint URL (must be HTTPS) 3. Select events to subscribe to 4. Copy the webhook secret for signature verification Or for Integration webhooks, configure in the Integration Console at `vercel.com/dashboard/integrations`. ### Step 2: Verify Webhook Signature ```typescript // api/webhooks/vercel.ts import type { VercelRequest, VercelResponse } from '@vercel/node'; import crypto from 'crypto'; const WEBHOOK_SECRET = process.env.VERCEL_WEBHOOK_SECRET!; function verifySignature(body: string, signature: string): boolean { const expectedSignature = crypto .createHmac('sha1', WEBHOOK_SECRET) .update(body) .digest('hex'); return crypto.timingSafeEqual( Buffer.from(signature), Buffer.from(expectedSignature) ); } export default async function handler(req: VercelRequest, res: VercelResponse) { if (req.method !== 'POST') { return res.status(405).json({ error: 'Method not allowed' }); } // Get raw body for signature...