Webhook Receiver

[MiguelMachado-dev]

Create a webhook receiver

• Receive a POST request from github webhook
• First webhook trigger: member_added
• Second webhook trigger: member_removed
• Sanitize and prepare data to be saved

[LPMLarica]

This is a small start to build on

"In the repository, go to "Settings" -> "Webhooks" -> "Add webhook".
Enter the public or server URL where your webhook app will be listening.
Choose the "Members" event that will trigger the webhook.
Specify a secret password (token) to validate webhook requests.
Select the content type as "application/json".
Click "Add webhook" to save the configuration."

package main

import (
	"crypto/hmac"
	"crypto/sha1"
	"encoding/hex"
	"encoding/json"
	"fmt"
	"io/ioutil"
	"log"
	"net/http"
)

const (
	secretToken = "your secret password" // Replace with the secret password defined in the GitHub webhook
)

type GitHubWebhookEvent struct {
	Action  string `json:"action"`
	Member  struct {
		Login string `json:"login"`
	} `json:"member"`
}

func main() {
	http.HandleFunc("/webhook", handleWebhook)
	log.Fatal(http.ListenAndServe(":8080", nil))
}

func handleWebhook(w http.ResponseWriter, r *http.Request) {
	if r.Method != http.MethodPost {
		http.Error(w, "Invalid request method", http.StatusMethodNotAllowed)
		return
	}

	// Verify webhook signature using secret password set on GitHub
	signature := r.Header.Get("X-Hub-Signature")
	if !verifySignature(signature, secretToken, r.Body) {
		http.Error(w, "Invalid signature", http.StatusUnauthorized)
		return
	}

	// Read event payload from webhook
	payload, err := ioutil.ReadAll(r.Body)
	if err != nil {
		http.Error(w, "Failed to read request body", http.StatusInternalServerError)
		return
	}

	var event GitHubWebhookEvent
	err = json.Unmarshal(payload, &event)
	if err != nil {
		http.Error(w, "Failed to unmarshal JSON", http.StatusBadRequest)
		return
	}

	if event.Action == "added" {
		fmt.Printf("Added Member: %s\n", event.Member.Login)
		// Here you can perform the necessary actions with the added member

	}

	w.WriteHeader(http.StatusOK)
}

func verifySignature(signature, secretToken string, body []byte) bool {
	mac := hmac.New(sha1.New, []byte(secretToken))
	mac.Write(body)
	expectedMAC := mac.Sum(nil)

	expectedSignature := "sha1=" + hex.EncodeToString(expectedMAC)
	return hmac.Equal([]byte(expectedSignature), []byte(signature))
}

[MiguelMachado-dev]

Updated:
using this webhook instead of the organization user added. https://docs.github.com/en/webhooks-and-events/webhooks/webhook-events-and-payloads#membership

When a user is added to organization, we do not have the information of which team the user belongs.
So we need to get this information as well to prepare the data to be saved on database.
We can do this in two ways.

• 1

package main

import (
	"context"
	"fmt"
	"github.com/google/go-github/github"
	"golang.org/x/oauth2"
)

func main() {
	ctx := context.Background()
	ts := oauth2.StaticTokenSource(
		&oauth2.Token{AccessToken: "... your access token ..."},
	)
	tc := oauth2.NewClient(ctx, ts)

	client := github.NewClient(tc)

	org := "your-organization" // replace with your organization
	user := "username" // replace with the username you are looking for

	opt := &github.ListOptions{}
	teams, _, err := client.Teams.ListTeams(ctx, org, opt)
	if err != nil {
		fmt.Println(err)
		return
	}
	for _, team := range teams {
		members, _, err := client.Teams.ListTeamMembersByID(ctx, *team.ID, &github.TeamListTeamMembersOptions{})
		if err != nil {
			fmt.Println(err)
			return
		}
		for _, member := range members {
			if *member.Login == user {
				fmt.Printf("User %s is a member of team %s\n", user, *team.Name)
			}
		}
	}
}

• 2: GraphQL building our own key.