Traiter et router automatiquement les fichiers reçus dans l'Inbox

# 1. Soumettre des fichiers dans une drop-box
curl -X POST https://api.coffrify.com/v1/inbox/submit \
  -H "Authorization: Bearer cit_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{
    "requester_email": "alice@exemple.fr",
    "requester_name": "Alice Martin",
    "message": "Voici les documents demandes.",
    "files": [
      { "name": "contrat.pdf", "size": 204800 },
      { "name": "annexe.xlsx", "size": 51200 }
    ]
  }'
 
# 2. Mettre la demande en pause apres traitement
curl -X PATCH https://api.coffrify.com/v1/requests/req_abc123 \
  -H "Authorization: Bearer cof_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{"status": "paused"}'

// POST /v1/inbox/submit, 201 Created
{
  "ok": true,
  "submission_id": "7f3a1c2d-e4b5-4f8a-9c0d-1e2f3a4b5c6d",
  "tracking_token": "aB3xZ9mKpQ2nWv5tYr8s",
  "tracking_expires_at": "2026-07-06T14:23:00.000Z"
}
 
// PATCH /v1/requests/{id}, 200 OK
{
  "id": "req_abc123",
  "short_code": "m4k9pz2q",
  "title": "Documents comptables T2 2026",
  "is_password_protected": false,
  "allowed_emails": ["alice@exemple.fr"],
  "status": "archived",
  "expires_at": "2026-06-30T23:59:59.000Z",
  "max_submissions": 10,
  "total_submissions": 7,
  "notify_email": "comptable@cabinet.fr",
  "cover_color": "#4F46E5",
  "cover_emoji": "\ud83d\udcc1",
  "updated_at": "2026-06-06T09:15:00.000Z"
}
 
// GET /v1/requests/{id}, statistiques de soumissions incluses
{
  "id": "req_abc123",
  "submission_stats": {
    "pending": 3,
    "reviewed": 2,
    "approved": 1,
    "rejected": 1,
    "spam": 0
  }
}

# Recepteur webhook Flask, router les fichiers recus
import hashlib
import hmac
from flask import Flask, request, abort
 
app = Flask(__name__)
WEBHOOK_SECRET = "whsec_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
 
def verify_signature(payload: bytes, header: str | None) -> bool:
    if not header:
        return False
    sig = header.removeprefix("sha256=")
    expected = hmac.new(
        WEBHOOK_SECRET.encode(),
        payload,
        hashlib.sha256).hexdigest()
    return hmac.compare_digest(sig, expected)
 
@app.post("/webhook/coffrify")
def coffrify_webhook():
    raw = request.get_data()
    sig = request.headers.get("X-Coffrify-Signature")
    if not verify_signature(raw, sig):
        abort(401, "Signature invalide")
 
    event = request.get_json()
    event_type = event.get("type")
 
    if event_type == "request.submitted":
        request_id = event["payload"].get("request_id")
        print(f"Nouvelle soumission sur la demande {request_id}")
        # Exemple : lancer un pipeline de traitement
        # pipeline.process(request_id, event["payload"])
 
    elif event_type == "request.completed":
        print(f"Demande {event['payload'].get('request_id')} completee.")
 
    return {"received": True}, 200