Postlarni tashkilot saytiga chiqaring

{
  "id": "6f0c2a8e-3b9d-4c1e-9a55-2d7c1b0e8f41",
  "type": "post.published",
  "created_at": "2026-10-18T09:30:00.000Z",
  "data": {
    "id": "01a14b7e-200f-75da-a03c-dcfd65f9991a",
    "post_id": "01a14b7e-1f9a-7c11-8d2e-6a1f0b9c4e77",
    "title": "Yoshlar markazi ochiladi",
    "language": "uz",
    "html": "<p><strong>1-noyabrdan</strong> bepul to'garaklar ...</p>",
    "text": "1-noyabrdan bepul to'garaklar ...",
    "media": [
      {
        "type": "image",
        "url": "https://smm.example.uz/m/media/…/photo.jpg",
        "mime": "image/jpeg",
        "width": 1280,
        "height": 720,
        "alt": null
      }
    ]
  }
}

import crypto from "node:crypto";
import express from "express";

const app = express();
const SECRET = process.env.GOVSOCIAL_SIGNING_SECRET;

// Keep the raw body: the signature covers the exact bytes.
app.post("/govsocial/webhook", express.raw({ type: "application/json" }), (req, res) => {
  const header = req.get("X-GovSocial-Signature") ?? "";
  const parts = Object.fromEntries(header.split(",").map((part) => part.split("=", 2)));
  const t = Number(parts.t);
  const expected = crypto
    .createHmac("sha256", SECRET)
    .update(`${t}.${req.body}`)
    .digest("hex");
  const valid =
    Math.abs(Date.now() / 1000 - t) <= 300 &&
    typeof parts.v1 === "string" &&
    parts.v1.length === expected.length &&
    crypto.timingSafeEqual(Buffer.from(parts.v1), Buffer.from(expected));
  if (!valid) return res.status(401).end();

  const event = JSON.parse(req.body.toString("utf8"));
  // event.type: post.published | post.updated | post.deleted | ping
  res.json({ id: "news-123", url: "https://example.uz/news/123" });
});

<?php
$secret = getenv('GOVSOCIAL_SIGNING_SECRET');
$body = file_get_contents('php://input');
parse_str(str_replace(',', '&', $_SERVER['HTTP_X_GOVSOCIAL_SIGNATURE'] ?? ''), $sig);
$t = (int) ($sig['t'] ?? 0);
$expected = hash_hmac('sha256', $t . '.' . $body, $secret);

if (abs(time() - $t) > 300 || !hash_equals($expected, $sig['v1'] ?? '')) {
    http_response_code(401);
    exit;
}

$event = json_decode($body, true);
// $event['type']: post.published | post.updated | post.deleted | ping
header('Content-Type: application/json');
echo json_encode(['id' => 'news-123', 'url' => 'https://example.uz/news/123']);

import hashlib, hmac, os, time
from flask import Flask, abort, jsonify, request

app = Flask(__name__)
SECRET = os.environ["GOVSOCIAL_SIGNING_SECRET"].encode()

@app.post("/govsocial/webhook")
def govsocial_webhook():
    body = request.get_data()  # raw bytes
    header = request.headers.get("X-GovSocial-Signature", "")
    parts = dict(p.split("=", 1) for p in header.split(",") if "=" in p)
    t = int(parts.get("t", "0"))
    expected = hmac.new(SECRET, f"{t}.".encode() + body, hashlib.sha256).hexdigest()
    if abs(time.time() - t) > 300 or not hmac.compare_digest(expected, parts.get("v1", "")):
        abort(401)

    event = request.get_json()
    # event["type"]: post.published | post.updated | post.deleted | ping
    return jsonify(id="news-123", url="https://example.uz/news/123")

curl -H "Authorization: Bearer gsk_…" \
  "https://gsocial.uz/api/v1/posts?limit=20"

{
  "data": [
    {
      "id": "01a14b7e-200f-75da-a03c-dcfd65f9991a",
      "post_id": "01a14b7e-1f9a-7c11-8d2e-6a1f0b9c4e77",
      "title": "Yoshlar markazi ochiladi",
      "html": "<p>…</p>",
      "text": "…",
      "hashtags": ["yoshlar"],
      "language": "uz",
      "media": [],
      "url": "https://example.uz/news/123",
      "channel": { "id": "01a14b54-…", "name": "Rasmiy sayt" },
      "published_at": "2026-10-18T09:30:00.000Z",
      "updated_at": "2026-10-18T09:30:02.000Z"
    }
  ],
  "next_cursor": "WyIyMDI2LTEwLTE4VDA5OjMwOjAwLjAwMFoiLCIwMWExNGI3ZSJd"
}

curl -H "Authorization: Bearer gsk_…" \
  "https://gsocial.uz/api/v1/posts/01a14b7e-200f-75da-a03c-dcfd65f9991a"

{ "data": { "id": "01a14b7e-…", "title": "…", "html": "<p>…</p>" } }

HTTP/1.1 429 Too Many Requests
Retry-After: 17
Content-Type: application/json

{ "error": "rate_limited" }