AI videos from your own systems

Verify the signature

Each notice carries X-AIVS-Timestamp and X-AIVS-Signature = hex(HMAC-SHA256(secret, timestamp + "." + body)). Verify over the raw body, in constant time, and reject timestamps older than 5 minutes. While you rotate the secret, the previous one signs in X-AIVS-Signature-Previous.

# Without the SDK (Python standard library)
import hashlib, hmac, time

def valid(body: bytes, ts: str, signature: str, secret: str) -> bool:
    if abs(time.time() - int(ts)) > 300:
        return False
    good = hmac.new(secret.encode(), ts.encode() + b"." + body, hashlib.sha256).hexdigest()
    return hmac.compare_digest(good, signature)

Deliveries and retries

• Answer 2xx within 10 s; process in the background if it takes longer.
• On failure we retry with growing waits (10 s … 1 h) up to 8 times, for about a day.
• X-AIVS-Delivery carries the event id (the same on every retry): use it to ignore duplicates.
• If you answer 410 Gone, we pause the webhook. See every delivery and its response, and redeliver, in Integraciones or through the API.

import { CreaVideos, verifyWebhook, WebhookError } from "creavideosconia";

const api = new CreaVideos({ apiKey: process.env.AIVS_API_KEY! });
const job = await api.jobs.create({ kind: "idea", idea: "3 errores al elegir zapatillas", channels: ["tiktok"] });

// Next.js route handler (any Fetch-API runtime)
export async function POST(req: Request) {
  const raw = await req.text();                     // RAW body, before JSON.parse
  try {
    const event = await verifyWebhook(raw, req.headers, process.env.AIVS_WEBHOOK_SECRET!);
    if (event.type === "job.succeeded") { /* event.data.videos … */ }
    return new Response("ok");
  } catch (e) {
    if (e instanceof WebhookError) return new Response("bad signature", { status: 400 });
    throw e;
  }
}

from creavideosconia import Client, verify_webhook, WebhookError

api = Client("https://api.creavideosconia.com", "aivs_…")
job = api.create_job({"kind": "idea", "idea": "3 errores al elegir zapatillas", "channels": ["tiktok"]})

# Flask / FastAPI / Django: pass the RAW body and the headers
def webhook(body: bytes, headers) -> int:
    try:
        event = verify_webhook(body, headers, "whsec_…")
    except WebhookError:
        return 400
    if event["type"] == "job.succeeded":
        ...
    return 200