The Tipping Jar Developer Platform

{
  "id": "evt_01HXYZ3Qf8TzKYlo2C1Bx",
  "type": "tip.completed",
  "created": 1740481200,
  "livemode": true,
  "data": {
    "tip": {
      "id": 123,
      "amount": "50.00",
      "currency": "zar",
      "message": "Love your work!",
      "status": "completed",
      "jar": null,
      "creator": {
        "slug": "jane-creates",
        "display_name": "Jane Creates"
      },
      "tipper_name": "BigFan",
      "created_at": "2026-02-21T08:20:00Z"
    }
  }
}

import crypto from "crypto";

function verifyWebhook(rawBody, signature, secret) {
  const expected = crypto
    .createHmac("sha256", secret)
    .update(rawBody, "utf8")
    .digest("hex");

  // Constant-time comparison to prevent timing attacks
  return crypto.timingSafeEqual(
    Buffer.from(expected, "hex"),
    Buffer.from(signature, "hex"),
  );
}

// Express example
app.post("/webhook/tippingjar", express.raw({ type: "*/*" }), (req, res) => {
  const sig = req.headers["tj-signature"];
  if (!verifyWebhook(req.body, sig, process.env.WEBHOOK_SECRET)) {
    return res.status(401).send("Invalid signature");
  }
  const event = JSON.parse(req.body);
  if (event.type === "tip.completed") {
    console.log("Tip received:", event.data.tip.amount, "ZAR");
  }
  res.sendStatus(200);
});