Receba e-mails no seu app.

import express from 'express';
import { verifyWebhook } from 'postal-so';

const app = express();
const api = { Authorization: `Bearer ${process.env.POSTAL_API_KEY}` };

// O corpo precisa chegar cru para a assinatura bater
app.post('/webhooks/postal', express.raw({ type: 'application/json' }), async (req, res) => {
  let event;
  try {
    event = verifyWebhook(req.body, req.headers, process.env.POSTAL_WEBHOOK_SECRET);
  } catch {
    return res.sendStatus(400);
  }

  if (event.type === 'email.received') {
    const { email_id, from, subject } = event.data;
    const email = await fetch(`https://api.postal.so/emails/receiving/${email_id}`, { headers: api })
      .then((response) => response.json());

    // email.text, email.html e email.attachments[].download_url
    await abrirChamado({ from, subject, texto: email.text, anexos: email.attachments });
  }

  res.sendStatus(200);
});

use Postal\Exceptions\WebhookVerificationException;
use Postal\Webhook;

try {
    $event = Webhook::verify(file_get_contents('php://input'), getallheaders(), getenv('POSTAL_WEBHOOK_SECRET'));
} catch (WebhookVerificationException $e) {
    http_response_code(400);
    exit;
}

if ($event['type'] === 'email.received') {
    $id = $event['data']['email_id'];
    $api = stream_context_create(['http' => ['header' => 'Authorization: Bearer ' . getenv('POSTAL_API_KEY')]]);
    $email = json_decode(file_get_contents("https://api.postal.so/emails/receiving/{$id}", false, $api), true);

    // $email['text'], $email['html'] e os anexos, com o link de download
    foreach ($email['attachments'] as $anexo) {
        $nome = basename($anexo['filename'] ?? $anexo['id']);
        file_put_contents("/var/anexos/{$nome}", file_get_contents($anexo['download_url']));
    }
}

http_response_code(200);

# A mensagem completa: texto, HTML, cabeçalhos e anexos
curl https://api.postal.so/emails/receiving/019a1c00-3e4f-7a5b-9c6d-7e8f9a0b1c2d \
  -H "Authorization: Bearer $POSTAL_API_KEY"

# Um anexo: o download_url é assinado e vale 1 hora (não precisa da chave)
curl -o nota-fiscal-10475.pdf "$DOWNLOAD_URL"

# A mensagem original, como chegou ao servidor
curl https://api.postal.so/emails/receiving/019a1c00-3e4f-7a5b-9c6d-7e8f9a0b1c2d/raw \
  -H "Authorization: Bearer $POSTAL_API_KEY"