Documentation

<script
  async
  src="https://cdn.featurebot.com/widget.js"
  data-key="YOUR_PUBLIC_KEY"
></script>

<script
  async
  src="https://cdn.featurebot.com/widget.js"
  data-key="YOUR_PUBLIC_KEY"
  data-user-id="USER_ID"
  data-email="USER_EMAIL"
  data-name="USER_NAME"
  data-plan="PLAN_NAME"
  data-mrr="MRR_IN_CENTS"
  data-company="COMPANY_NAME"
  data-role="USER_ROLE"
  data-company-size="COMPANY_SIZE"
  data-attributes='{"key": "value"}'
></script>

// After user logs in
window.FeatureBot.identify({
  userId: user.id,
  email: user.email,
  name: user.name,
  plan: user.subscription.plan,
  mrr: user.subscription.mrr,
  company: user.company.name,
  role: user.role,
  companySize: user.company.size,
  attributes: {
    team: user.team,
    signupSource: user.signupSource,
    betaFeatures: user.betaFeatures
  }
});

// When user logs out
window.FeatureBot.reset();

<script
  async
  src="https://cdn.featurebot.com/widget.js"
  data-key="YOUR_PUBLIC_KEY"
  data-css-vars='{
    "--fb-primary-color": "#0066cc",
    "--fb-user-message-bg": "#0066cc",
    "--fb-input-bg": "#f0f0f0"
  }'
></script>

{
  "event": "feedback.created",
  "timestamp": "2024-01-15T10:30:00.000Z",
  "feedback": {
    "id": "fb_abc123",
    "title": "Add dark mode support",
    "description": "It would be great to have a dark mode option",
    "category": "FEATURE_REQUEST",
    "status": "OPEN",
    "priority": "MEDIUM",
    "voiceCount": 1,
    "totalMrr": 9900,
    "avgSentiment": 0.8,
    "aiSummary": null,
    "aiTags": ["ui", "accessibility"],
    "createdAt": "2024-01-15T10:30:00.000Z",
    "updatedAt": "2024-01-15T10:30:00.000Z"
  },
  "workspace": {
    "id": "ws_xyz789",
    "name": "Acme Corp",
    "slug": "acme-corp"
  },
  "triggeredBy": "widget"
}

import crypto from 'crypto';

function verifyWebhookSignature(
  payload: string,
  signature: string,
  secret: string
): boolean {
  // Parse signature: t=<timestamp>,v1=<signature>
  const parts = signature.split(',');
  const timestamp = parts.find(p => p.startsWith('t='))?.slice(2);
  const sig = parts.find(p => p.startsWith('v1='))?.slice(3);

  if (!timestamp || !sig) return false;

  // Check timestamp (within 5 minutes)
  const now = Math.floor(Date.now() / 1000);
  if (Math.abs(now - parseInt(timestamp)) > 300) return false;

  // Verify signature
  const signedPayload = `${timestamp}.${payload}`;
  const expectedSig = crypto
    .createHmac('sha256', secret)
    .update(signedPayload)
    .digest('hex');

  return crypto.timingSafeEqual(
    Buffer.from(sig),
    Buffer.from(expectedSig)
  );
}

// In your webhook handler
app.post('/webhooks/featurebot', (req, res) => {
  const signature = req.headers['x-webhook-signature'];
  const isValid = verifyWebhookSignature(
    JSON.stringify(req.body),
    signature,
    process.env.FEATUREBOT_WEBHOOK_SECRET
  );

  if (!isValid) {
    return res.status(401).json({ error: 'Invalid signature' });
  }

  // Process the webhook...
  res.status(200).json({ received: true });
});