Number Masking Node.js Example

// Node.js 18+: plain HTTP with the built-in fetch. No SDK to install.
import crypto from "node:crypto";
import express from "express";

const API = "https://voice-api.edesy.in/v1";
const headers = {
  Authorization: `Bearer ${process.env.EDESY_API_KEY}`, // vp_... from masking.edesy.in
  "Content-Type": "application/json",
};

// 1. Create a two-way masked session
const res = await fetch(`${API}/masking/sessions`, {
  method: "POST",
  headers,
  body: JSON.stringify({
    party_a: "9876543210",
    party_b: "9123456789",
    reference: "ORD-4821",   // your order / ride / ticket id
    expiry_minutes: 60,
  }),
});
const { data } = await res.json();
console.log(data.virtual_number); // share this number with both parties

// 2. Receive and verify event webhooks (X-Edesy-Signature: sha256=<hex>)
const app = express();
app.post("/edesy/events", express.raw({ type: "application/json" }), (req, res) => {
  const expected = "sha256=" + crypto
    .createHmac("sha256", process.env.EDESY_WEBHOOK_SECRET)
    .update(req.body)
    .digest("hex");
  const got = req.get("X-Edesy-Signature") || "";
  if (got.length !== expected.length ||
      !crypto.timingSafeEqual(Buffer.from(got), Buffer.from(expected))) {
    return res.sendStatus(401);
  }
  const event = JSON.parse(req.body.toString());
  console.log(event.event, event.reference, event.duration_sec);
  res.sendStatus(200);
});
app.listen(3000);