Insurance technology, built in-house.

const res = await fetch(
  'https://weinsurethings.com/wp-json/wit/v1/classify',
  {
    method: 'POST',
    headers: {
      'Content-Type': 'application/json',
      'X-WIT-Key': process.env.WIT_KEY, // optional: 300/min vs 30/min
    },
    body: JSON.stringify({ text: 'mobile axe-throwing trailer' }),
  }
);
const data = await res.json();
console.log(data.coverages, data.risk, data.route);

$ch = curl_init('https://weinsurethings.com/wp-json/wit/v1/classify');
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => [
        'Content-Type: application/json',
        'X-WIT-Key: ' . getenv('WIT_KEY'), // optional
    ],
    CURLOPT_POSTFIELDS => json_encode(['text' => 'mobile axe-throwing trailer']),
]);
$data = json_decode(curl_exec($ch), true);

import crypto from 'crypto';

// Use the raw request body (do not re-serialize it).
app.post('/webhooks/wit', express.raw({ type: 'application/json' }), (req, res) => {
  const expected =
    'sha256=' +
    crypto.createHmac('sha256', process.env.WIT_WEBHOOK_SECRET)
      .update(req.body)
      .digest('hex');

  const sig = req.get('X-WIT-Signature') || '';
  const ok =
    sig.length === expected.length &&
    crypto.timingSafeEqual(Buffer.from(sig), Buffer.from(expected));
  if (!ok) return res.status(401).end();

  const event = JSON.parse(req.body); // { event, created, data }
  // handle event.event and event.data ...
  res.status(200).end();
});

$secret = getenv('WIT_WEBHOOK_SECRET');
$body   = file_get_contents('php://input');
$sig    = $_SERVER['HTTP_X_WIT_SIGNATURE'] ?? '';

$expected = 'sha256=' . hash_hmac('sha256', $body, $secret);
if (! hash_equals($expected, $sig)) {
    http_response_code(401);
    exit;
}

$event = json_decode($body, true); // ['event' => ..., 'data' => ...]
// handle $event['event'] and $event['data'] ...
http_response_code(200);