Forwarded webhooks

import {
  meridianChallengeResponse,
  verifyMeridianWebhook,
} from "@the-meridian/sdk/server"

export const action = async ({ request }) => {
  const raw = await request.text()
  const secret = process.env.MERIDIAN_WEBHOOK_SECRET ?? ""

  // 1. A verification handshake? Answer it and stop.
  const challenge = await meridianChallengeResponse(raw, null, secret, {
    headers: request.headers,
  })
  if (challenge) return Response.json(challenge)

  // 2. Otherwise it is a forwarded webhook.
  if (!(await verifyMeridianWebhook({ rawBody: raw, headers: request.headers, secret }))) {
    return new Response("invalid signature", { status: 401 })
  }

  const topic = request.headers.get("X-Shopify-Topic")
  // handle the event
  return new Response(null, { status: 200 })
}