canva-webhooks-events

# Canva Webhooks & Events ## Overview Receive real-time notifications from Canva via webhooks when users comment on designs, request folder access, share designs, or interact with your integration. Canva sends signed JWT payloads verified with public JWK keys. ## Prerequisites - Canva integration with `collaboration:event` scope enabled - HTTPS endpoint accessible from the internet - JWK verification library (`jose` recommended) - Webhook URL configured in your integration settings ## Setup ### Step 1: Configure Webhooks in Canva 1. Go to your integration settings at [canva.dev](https://www.canva.dev) 2. Under **Notifications**, enable **collaboration:event** 3. Enter your webhook URL: `https://your-app.com/webhooks/canva` 4. Save the configuration ### Step 2: Implement JWK Signature Verification ```typescript // src/canva/webhooks.ts import { createRemoteJWKSet, jwtVerify, JWTPayload } from 'jose'; // Canva publishes public keys at this endpoint // GET https://api.canva.com/rest/v1/connect/keys const CANVA_JWKS = createRemoteJWKSet( new URL('https://api.canva.com/rest/v1/connect/keys') ); interface CanvaWebhookPayload extends JWTPayload { notification_type: string; notification: Record<string, any>; timestamp: string; user_id: string; team_id: string; } export async function verifyCanvaWebhook( rawBody: string ): Promise<CanvaWebhookPayload | null> { try { const { payload } = await jwtVerify(rawBody, CANVA_JWKS, { issuer: 'canva', })...