Baue produktive Integrationen auf CrewIO

curl -X GET 'https://crewio.co/api/developer/v1/events?status=active&limit=20' \
  -H 'Authorization: Bearer crw_live_...'

const res = await fetch('https://crewio.co/api/developer/v1/events', {
  method: 'GET',
  headers: {
    'Authorization': 'Bearer crw_live_...'
  }
})

if (!res.ok) {
  const err = await res.json()
  throw new Error(err.error || 'API request failed')
}

const data = await res.json()
console.log(data.events)

import requests

url = 'https://crewio.co/api/developer/v1/events'
headers = {'Authorization': 'Bearer crw_live_...'}
params = {'status': 'active', 'limit': 20}

resp = requests.get(url, headers=headers, params=params, timeout=15)
resp.raise_for_status()

payload = resp.json()
print(payload['events'])

# 1) Event anlegen
curl -X POST 'https://crewio.co/api/developer/v1/events' \
  -H 'Authorization: Bearer crw_live_...' \
  -H 'Content-Type: application/json' \
  -d '{
    "name": "Sommerfest 2026",
    "start_date": "2026-07-12",
    "end_date": "2026-07-13",
    "status": "active",
    "location": "Stadtpark Mainz"
  }'

# Response: { "event": { "id": "event_uuid", ... } }

# 2) Rolle anlegen
curl -X POST 'https://crewio.co/api/developer/v1/events/event_uuid/roles' \
  -H 'Authorization: Bearer crw_live_...' \
  -H 'Content-Type: application/json' \
  -d '{ "name": "Getränkestand", "color": "#2563EB" }'

# 3) Schicht anlegen
curl -X POST 'https://crewio.co/api/developer/v1/events/event_uuid/shifts' \
  -H 'Authorization: Bearer crw_live_...' \
  -H 'Content-Type: application/json' \
  -d '{
    "role_id": "role_uuid",
    "start_time": "2026-07-12T14:00:00.000Z",
    "end_time": "2026-07-12T18:00:00.000Z",
    "required_count": 3
  }'

# Assignment upsert (erstellt neu oder aktualisiert bestehenden Datensatz)
curl -X POST 'https://crewio.co/api/developer/v1/events/event_uuid/assignments' \
  -H 'Authorization: Bearer crw_live_...' \
  -H 'Content-Type: application/json' \
  -d '{
    "shift_id": "shift_uuid",
    "user_id": "user_uuid",
    "state": "confirmed",
    "notes": "Von externer Einsatzplanung übernommen"
  }'

# Beispiel-Response:
# {
#   "assignment": {
#     "id": "assignment_uuid",
#     "shift_id": "shift_uuid",
#     "user_id": "user_uuid",
#     "state": "confirmed"
#   }
# }

# 1) Anfrage mit Zeitfenstern erstellen
curl -X POST 'https://crewio.co/api/developer/v1/events/event_uuid/availability/requests' \
  -H 'Authorization: Bearer crw_live_...' \
  -H 'Content-Type: application/json' \
  -d '{
    "time_slots": [
      { "id": "slot_a", "label": "Sa 10:00-12:00" },
      { "id": "slot_b", "label": "Sa 12:00-14:00" }
    ]
  }'

# 2) Antworten eines Helfers upserten
curl -X POST 'https://crewio.co/api/developer/v1/events/event_uuid/availability/responses' \
  -H 'Authorization: Bearer crw_live_...' \
  -H 'Content-Type: application/json' \
  -d '{
    "request_id": "request_uuid",
    "user_id": "user_uuid",
    "responses": [
      { "time_slot_id": "slot_a", "available": true },
      { "time_slot_id": "slot_b", "available": false }
    ]
  }'

{
  "id": "evt_123...",
  "type": "assignment.updated",
  "occurred_at": "2026-03-13T15:35:10.000Z",
  "data": {
    "integration_id": "...",
    "event_id": "...",
    "assignment": {
      "id": "...",
      "shift_id": "...",
      "user_id": "...",
      "state": "checked_in"
    }
  }
}

import crypto from 'crypto'

export function verifyCrewioSignature(rawBody, signatureHeader, signingSecret) {
  const provided = (signatureHeader || '').trim().replace(/^sha256=/i, '')
  if (!/^[0-9a-f]{64}$/i.test(provided)) return false

  const expected = crypto
    .createHmac('sha256', signingSecret)
    .update(rawBody, 'utf8')
    .digest('hex')

  const a = Buffer.from(provided, 'hex')
  const b = Buffer.from(expected, 'hex')
  if (a.length !== b.length) return false

  return crypto.timingSafeEqual(a, b)
}

import hmac
import hashlib


def verify_crewio_signature(raw_body: bytes, signature_header: str, signing_secret: str) -> bool:
    provided = (signature_header or '').replace('sha256=', '').strip().lower()
    if len(provided) != 64:
        return False

    expected = hmac.new(
        signing_secret.encode('utf-8'),
        raw_body,
        hashlib.sha256,
    ).hexdigest()

    return hmac.compare_digest(provided, expected)