Тест жыйынтыктары — түз эле сиздин системаңызга

Authorization: Bearer sk_inst_3f9a1c7e…

https://synak.app/api/v1

{
  "id": "e2b7c1a4-9d3f-4a8e-b6c5-7f1d0a2e3b94",
  "type": "test.result.created",
  "created_at": "2026-10-10T09:41:07.733Z",
  "institution_id": "198d4ee3-6258-4488-b5bc-ea9bbe2d1af3",
  "data": {
    "result": {
      "attempt_id": "8d1f0c52-6a3e-4c1b-9f2a-1e7d5b3c9a40",
      "institution_id": "198d4ee3-6258-4488-b5bc-ea9bbe2d1af3",
      "test_id": "5b2e7a90-1c4d-4e8f-a6b3-0d9c2f1e7a55",
      "test_title": "Информатика, 1-модуль",
      "session_id": "c4a7e1d2-3f5b-4a6c-8e9d-2b1a0f3c5d7e",
      "group_name": "ИСТ-21",
      "student_name": "Айпери Асанова",
      "student_id": null,
      "student_fields": [{ "label": "№ зачетки", "value": "2021-0417" }],
      "score": 34,
      "max_score": 40,
      "correct_answers": 17,
      "total_questions": 20,
      "percentage": 85,
      "submitted_at": "2026-10-10T09:41:07.512Z",
      "duration_seconds": 1284,
      "status": "submitted"
    }
  }
}

POST /synak/webhook HTTP/1.1
Content-Type: application/json
User-Agent: Synak-Webhooks/1
Synak-Event-Id: e2b7c1a4-9d3f-4a8e-b6c5-7f1d0a2e3b94
Synak-Event-Type: test.result.created
Synak-Signature: t=1791625268,v1=5f2c8e1a9b…

import crypto from "node:crypto"
import express from "express"

const SECRET = process.env.SYNAK_WEBHOOK_SECRET   // whsec_…
const app = express()

// express.raw — кол тамга чийки body'ге коюлат.
app.post("/synak/webhook", express.raw({ type: "application/json" }), (req, res) => {
  const parts = Object.fromEntries(
    (req.get("Synak-Signature") ?? "").split(",").map(p => p.split("="))
  )
  const expected = crypto.createHmac("sha256", SECRET)
    .update(`${parts.t}.${req.body}`).digest("hex")

  const fresh = Math.abs(Date.now() / 1000 - Number(parts.t)) < 300
  const valid = typeof parts.v1 === "string" && parts.v1.length === expected.length &&
    crypto.timingSafeEqual(Buffer.from(parts.v1), Buffer.from(expected))
  if (!fresh || !valid) return res.sendStatus(400)

  const event = JSON.parse(req.body)
  if (event.type === "test.result.created") saveOnce(event.id, event.data.result)
  res.sendStatus(200)
})

import hashlib, hmac, json, os, time
from flask import Flask, abort, request

SECRET = os.environ["SYNAK_WEBHOOK_SECRET"].encode()   # whsec_…
app = Flask(__name__)

@app.post("/synak/webhook")
def synak_webhook():
    body = request.get_data()                            # чийки body
    header = request.headers.get("Synak-Signature", "")
    parts = dict(p.split("=", 1) for p in header.split(",") if "=" in p)
    t, v1 = parts.get("t", ""), parts.get("v1", "")
    expected = hmac.new(SECRET, t.encode() + b"." + body, hashlib.sha256).hexdigest()

    if not t.isdigit() or abs(time.time() - int(t)) > 300 or not hmac.compare_digest(v1, expected):
        abort(400)

    event = json.loads(body)
    if event["type"] == "test.result.created":
        save_once(event["id"], event["data"]["result"])
    return "", 200

// Жаңы жыйынтыктарды гана алуу (мисалы, ар бир саатта).
const H = { Authorization: `Bearer ${process.env.SYNAK_KEY}` }
let cursor = loadSavedCursor()           // мурунку жолу сакталган next_cursor

while (true) {
  const url = new URL("https://synak.app/api/v1/results")
  url.searchParams.set("limit", "500")
  if (cursor) url.searchParams.set("cursor", cursor)

  const res = await fetch(url, { headers: H })
  if (res.status === 429) { await sleep(60_000); continue }
  if (!res.ok) throw new Error((await res.json()).error.type)

  const { results, next_cursor, has_more } = await res.json()
  for (const r of results) upsertByAttemptId(r)   // attempt_id боюнча — кайталанбайт
  if (next_cursor) saveCursor((cursor = next_cursor))
  if (!has_more) break
}

{
  "error": {
    "code": 401,
    "type": "INVALID_API_KEY",
    "message": "The API key is missing, invalid or revoked."
  }
}