Documentation API REST & Webhooks

const express = require('express');
const crypto = require('crypto');

const app = express();
const WEBHOOK_SECRET = 'whsec_7b8e348d4c5217c3b0373b6bfc89d62a08fa24a071f346bc';

app.post('/webhooks/lexlo', express.raw({ type: 'application/json' }), (req, res) => {
  const signature = req.headers['x-lexlo-signature'];
  const event = req.headers['x-lexlo-event'];

  const hmac = crypto.createHmac('sha256', WEBHOOK_SECRET);
  hmac.update(req.body);
  const expectedSignature = `sha256=${hmac.digest('hex')}`;

  if (!signature || !crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expectedSignature))) {
    return res.status(401).json({ error: 'Signature HMAC invalide' });
  }

  const payload = JSON.parse(req.body.toString('utf-8'));
  console.log(`Événement reçu : ${event}`, payload.data);
  res.json({ received: true });
});

app.listen(3000);

<?php
$secret = "whsec_7b8e348d4c5217c3b0373b6bfc89d62a08fa24a071f346bc";
$signatureHeader = $_SERVER['HTTP_X_LEXLO_SIGNATURE'] ?? '';
$rawPayload = file_get_contents('php://input');

$expectedSignature = 'sha256=' . hash_hmac('sha256', $rawPayload, $secret);

if (!hash_equals($expectedSignature, $signatureHeader)) {
    http_response_code(401);
    echo json_encode(['error' => 'Signature invalide']);
    exit;
}

$data = json_decode($rawPayload, true);
http_response_code(200);
echo json_encode(['received' => true]);

import requests

API_KEY = "lx_live_votreCleSecreteLexlo"
BASE_URL = "https://api.lexlo.be/api/v1"

headers = {
    "X-API-Key": API_KEY,
    "Content-Type": "application/json; charset=utf-8",
    "Accept": "application/json",
}

# 1. Profil
me = requests.get(f"{BASE_URL}/me", headers=headers).json()
print(f"Cabinet: {me['data']['cabinet_id']} | Plan: {me['data']['plan']}")

# 2. Créer un client
client = requests.post(f"{BASE_URL}/clients", headers=headers, json={
    "first_name": "Sophie",
    "last_name": "Dubois",
    "email": "sophie.dubois@example.be",
}).json()

# 3. Créer un dossier
case = requests.post(f"{BASE_URL}/cases", headers=headers, json={
    "title": "Règlement succession Dubois",
    "client_id": client["data"]["id"],
}).json()
print(f"Numéro de dossier attribué : {case['data']['case_number']}")

const API_KEY = "lx_live_votreCleSecreteLexlo";
const BASE_URL = "https://api.lexlo.be/api/v1";

const headers = {
  "X-API-Key": API_KEY,
  "Content-Type": "application/json",
  "Accept": "application/json",
};

async function main() {
  const me = await fetch(`${BASE_URL}/me`, { headers }).then(r => r.json());
  console.log("Cabinet:", me.data.cabinet_id);

  const client = await fetch(`${BASE_URL}/clients`, {
    method: "POST", headers,
    body: JSON.stringify({ first_name: "Jean", last_name: "Dupont", email: "jean.dupont@example.com" }),
  }).then(r => r.json());

  const caseRes = await fetch(`${BASE_URL}/cases`, {
    method: "POST", headers,
    body: JSON.stringify({ title: "Affaire Dupont", client_id: client.data.id }),
  }).then(r => r.json());

  console.log("Dossier créé:", caseRes.data.case_number);
}

main();

# Vérifier le compte
curl -X GET "https://api.lexlo.be/api/v1/me" \
  -H "X-API-Key: lx_live_votreCleSecreteLexlo" \
  -H "Accept: application/json"

# Créer un client
curl -X POST "https://api.lexlo.be/api/v1/clients" \
  -H "X-API-Key: lx_live_votreCleSecreteLexlo" \
  -H "Content-Type: application/json" \
  -d '{"first_name":"Jean","last_name":"Dupont","email":"jean.dupont@example.com"}'

# Créer un dossier
curl -X POST "https://api.lexlo.be/api/v1/cases" \
  -H "X-API-Key: lx_live_votreCleSecreteLexlo" \
  -H "Content-Type: application/json" \
  -d '{"title":"Affaire Dupont c/ SA Immo"}'