Build a Filing Review Intake Queue

import hashlib
import hmac
import json
import os
import time
from flask import Flask, jsonify, request

app = Flask(__name__)
secret = os.environ["SECAPI_WEBHOOK_SIGNING_SECRET"].encode()

def valid(raw: bytes, header: str) -> bool:
    fields = dict(part.split("=", 1) for part in header.split(",") if "=" in part)
    try:
        timestamp = int(fields["t"])
    except (KeyError, ValueError):
        return False
    signature = fields.get("v1", "")
    if not signature or abs(time.time() - timestamp) > 300:
        return False
    expected = hmac.new(secret, f"{timestamp}.".encode() + raw, hashlib.sha256).hexdigest()
    return hmac.compare_digest(expected, signature)

@app.post("/webhooks/secapi/review")
def receive():
    raw = request.get_data()
    if not valid(raw, request.headers.get("x-secapi-signature", "")):
        return jsonify({"error": "invalid_signature"}), 401
    event = json.loads(raw)
    if event.get("type") != "monitor.match":
        return jsonify({"status": "ignored"}), 200
    for match in event.get("data", {}).get("matches", []):
        print({"ticker": match.get("ticker"), "form": match.get("form"),
               "filingDate": match.get("filingDate"), "sourceUrl": match.get("htmlUrl")})
    return jsonify({"received": True}), 200

curl --fail-with-body -H "x-api-key: $SECAPI_API_KEY" \
  "https://api.secapi.ai/v1/monitors/MONITOR_ID/matches?limit=25"