appfolio webhooks events | sed 's/\b(.)/\u\1/g'

Overview

AppFolio Stack supports webhooks for lease, payment, and maintenance events.

Webhook Handler

import express from "express";
import crypto from "crypto";

const router = express.Router();

router.post("/webhooks/appfolio", express.raw({ type: "application/json" }), (req, res) => {
  const signature = req.headers["x-appfolio-signature"] as string;
  const expected = crypto.createHmac("sha256", process.env.APPFOLIO_WEBHOOK_SECRET!)
    .update(req.body).digest("hex");

  if (!crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected))) {
    return res.status(401).json({ error: "Invalid signature" });
  }

  const event = JSON.parse(req.body.toString());
  console.log(\`Event: \${event.type} — \${JSON.stringify(event.data)}\`);
  res.status(200).json({ received: true });
});

Event Types

Resources

• AppFolio Stack APIs
• AppFolio Engineering Blog