Enode Webhooks

When to Use This Skill

• Setting up Enode webhook handlers
• Debugging Enode signature verification failures
• Understanding Enode event types and payloads
• Handling user:vehicle:updated, user:charger:updated, or user:battery:updated events
• Why is my Enode webhook signature verification (x-enode-signature) failing?

Verification (core)

Enode signs the raw request body with HMAC-SHA1 keyed on the per-webhook secret you generated (min 128 bits) and supplied at webhook creation. The digest is sent in the x-enode-signature header formatted as sha1=<hex> (lowercase hex). Enode does not follow the Standard Webhooks spec. Pass the raw body, and compare timing-safe.

Node:

const crypto = require('crypto');