Un'unica APIper il condominioe tutto il resto

curl https://amministra.pro/api/v1/condominiums \
  -H "Authorization: Bearer ap_live_xxx" \
  -H "X-Organization-Id: org_xxx"

import fetch from 'node-fetch';

const res = await fetch(
  'https://amministra.pro/api/v1/condominiums/cond_xxx/maintenance',
  {
    method: 'POST',
    headers: {
      'Content-Type': 'application/json',
      'Authorization': `Bearer ${process.env.AMP_API_KEY}`,
      'X-Organization-Id': process.env.AMP_ORG_ID,
    },
    body: JSON.stringify({
      titolo: 'Perdita acqua box 3',
      descrizione: 'Allagamento box auto interno 3',
      priorita: 'urgente',
      fornitoreId: 'forn_xxx',
    }),
  },
);

const ticket = await res.json();
console.log('Ticket creato:', ticket.id);

import express from 'express';
import crypto from 'crypto';

const app = express();
app.use(express.raw({ type: 'application/json' }));

app.post('/amp-webhook', (req, res) => {
  // 1. Verifica la firma
  const signature = req.header('X-Webhook-Signature');
  const expected = crypto
    .createHmac('sha256', process.env.AMP_WEBHOOK_SECRET)
    .update(req.body)
    .digest('hex');
  if (signature !== expected) return res.status(401).send('Invalid signature');

  // 2. Gestisci l'evento
  const payload = JSON.parse(req.body.toString());
  switch (payload.event) {
    case 'payment.overdue':
      console.log('Rata scaduta:', payload.data);
      break;
    case 'ticket.created':
      console.log('Nuovo ticket:', payload.data);
      break;
  }

  res.status(200).send('ok');
});

app.listen(3000);