UiPath

Blu Pantheon ──webhook firmato──► Listener (Azure Function / IIS / Nginx+app)
                                        │ verifica HMAC + risposta 202
                                        ▼
                                Orchestrator Queue "BluPantheonEvents"
                                        │ Queue Trigger
                                        ▼
                                   Robot UiPath
                                        │
                                        ├──► Gestionale (UI automation)
                                        └──► API Blu Pantheon (HTTP Request)

headers = New Dictionary(Of String, String) From {
    {"Authorization", "Bearer " & apiKey},
    {"X-BP-Project", projectId},
    {"Content-Type", "application/json"},
    {"Accept", "application/json"},
    {"Idempotency-Key", deliveryId}
}

requestBody = New Newtonsoft.Json.Linq.JObject(
    New Newtonsoft.Json.Linq.JProperty("body", "Pratica aperta nel gestionale: " & numeroPratica),
    New Newtonsoft.Json.Linq.JProperty("visibility", "internal"),
    New Newtonsoft.Json.Linq.JProperty("author", "rpa-uipath")
).ToString(Newtonsoft.Json.Formatting.None)

noteId = responseJson("data")("id").ToString()
createdAt = DateTime.Parse(responseJson("data")("createdAt").ToString())

For Each item As Newtonsoft.Json.Linq.JToken In responseJson("data")
    Log Message: "Cliente: " & item("displayName").ToString()
Next

statusCode >= 200 AndAlso statusCode < 300

retryAfterSeconds = If(
    response.Headers.ContainsKey("Retry-After"),
    Convert.ToInt32(response.Headers("Retry-After")),
    30
)

using System.Net.Http.Json;
using System.Security.Cryptography;
using System.Text;

public sealed class OrchestratorQueueClient
{
    private readonly HttpClient _http;

    public OrchestratorQueueClient(HttpClient http) => _http = http;

    public async Task AddQueueItemAsync(string rawBody, string deliveryId, string eventType)
    {
        var request = new
        {
            itemData = new
            {
                Name = "BluPantheonEvents",
                Priority = eventType.Contains("handover") ? "High" : "Normal",
                Reference = deliveryId,
                SpecificContent = new Dictionary<string, object>
                {
                    ["EventType"] = eventType,
                    ["DeliveryId"] = deliveryId,
                    ["Payload"] = rawBody
                }
            }
        };

        using var response = await _http.PostAsJsonAsync(
            "/odata/Queues/UiPathODataSvc.AddQueueItem", request);
        response.EnsureSuccessStatusCode();
    }
}

Dim toleranceSeconds As Integer = 300
Dim timestamp As Long = -1
Dim signatures As New List(Of String)

out_IsValid = False
out_Reason = "firma-non-corrispondente"

If String.IsNullOrWhiteSpace(in_SignatureHeader) Then
    out_Reason = "header-mancante"
    Exit Sub
End If

For Each segment As String In in_SignatureHeader.Split(","c)
    Dim separatorIndex As Integer = segment.IndexOf("="c)
    If separatorIndex < 0 Then Continue For

    Dim key As String = segment.Substring(0, separatorIndex).Trim()
    Dim value As String = segment.Substring(separatorIndex + 1).Trim()

    If key = "t" Then
        Long.TryParse(value, timestamp)
    ElseIf key = "v1" Then
        signatures.Add(value)
    End If
Next

If timestamp < 0 Then
    out_Reason = "timestamp-non-valido"
    Exit Sub
End If

Dim nowSeconds As Long = DateTimeOffset.UtcNow.ToUnixTimeSeconds()
If Math.Abs(nowSeconds - timestamp) > toleranceSeconds Then
    out_Reason = "timestamp-fuori-tolleranza"
    Exit Sub
End If

If signatures.Count = 0 Then
    out_Reason = "firma-assente"
    Exit Sub
End If

Dim signedPayload As Byte() = System.Text.Encoding.UTF8.GetBytes(
    timestamp.ToString() & "." & in_RawBody)

Using hmac As New System.Security.Cryptography.HMACSHA256(
        System.Text.Encoding.UTF8.GetBytes(in_Secret))

    Dim hash As Byte() = hmac.ComputeHash(signedPayload)
    Dim builder As New System.Text.StringBuilder(hash.Length * 2)
    For Each b As Byte In hash
        builder.Append(b.ToString("x2"))
    Next
    Dim expected As String = builder.ToString()
    Dim expectedBytes As Byte() = System.Text.Encoding.UTF8.GetBytes(expected)

    For Each candidate As String In signatures
        Dim candidateBytes As Byte() = System.Text.Encoding.UTF8.GetBytes(candidate)
        If candidateBytes.Length = expectedBytes.Length Then
            If System.Security.Cryptography.CryptographicOperations.FixedTimeEquals(
                    candidateBytes, expectedBytes) Then
                out_IsValid = True
                out_Reason = "ok"
                Exit For
            End If
        End If
    Next
End Using

eventType = in_TransactionItem.SpecificContent("EventType").ToString()
deliveryId = in_TransactionItem.SpecificContent("DeliveryId").ToString()
payloadJson = Newtonsoft.Json.Linq.JObject.Parse(
    in_TransactionItem.SpecificContent("Payload").ToString())

sessionId = payloadJson("data")("sessionId").ToString()
clientName = payloadJson("data")("client")("displayName").ToString()