AXIS Audio Manager Center

AXIS Audio Manager Center is a secure and scalable solution for remote management and monitoring of large and complex audio systems.

• Organize your audio sites — You can organize your AXIS Audio Manager Edge audio sites in a structure that suits your organization.

Example

A location named “France” could contain a location called “Paris”, which in turn contains all the audio sites located in Paris.

Example

A location named “Sales region South” could contain all the cities belonging to that region, which in turn contains all the audio sites located in those cities.

• Monitor your system — The Dashboard and Audio sites views gives an overview of your system. Filtering functionality makes troubleshooting easy.

• Access your sites remotely — Access the user interface of your sites remotely in a secure way from the Sites view.

• Manage users — Invite users and add each user to one or several user groups. Each user group is given a certain access right, and assigned to a location or audio site in the audio sites structure.

Example

A single user can be part of a group with content manager rights for Europe, but also to a group with administrator rights for an audio site in Paris, France.

• Premium features

• • Scheduling — Schedule announcements, advertisements and music for multiples audio sites.

For the new features in each AXIS Audio Manager Center release, go to help.axis.com/whats-new-in-axis-audio-manager-center.

• You need to have set up and configured at least one AXIS Audio Manager Edge audio site. For more information, visit the AXIS Audio Manager Edge User Manual.

• To enable communication between AXIS Audio Manager Edge and AXIS Audio Manager Center, the following ports must be open for outbound traffic on the network where the leader device is located:

• DNS	Port	Information
  dispatchse1-st.axis.com ​dispatchse2-st.axis.com ​dispatcher-st.axis.com ​dispatchus1-st.axis.com dispatchjp1-st.axis.com	443, 80 Outbound, TCP	Proprietary device communication channel. One of these ports is required. Port 80 is only used if port 443 is not available.
  *.devices.audiomanager.axis.com	443 Outbound, TCP	Proprietary device communication channel.
  a1ecdk2dyb75d7-ats.iot.eu-west-1.amazonaws.com	8883 Outbound, TCP	MQTT channel used for sending and receiving data from a device to the cloud service.
  content.audiomanager.axis.com	443 Outbound, TCP	Necessary for content distribution in scheduling.

1. Go to audiomanager.axis.com in your web browser.

2. Log in using the credentials for your My Axis account. If you don’t have a My Axis account, you can create one from the login window.

3. At first login you have to create your organization.

When you are invited to an organization, you will receive an email with an invitation link from AXIS Audio Manager Center with the subject "User invitation to an organization".

1. To accept the invitation, click the included link or paste it in your browser.

2. Log in using the credentials for your MyAxis account. If you do not have a MyAxis account you can create one from the login window.

3. You will automatically be routed to the organization you were invited to.

Organize your audio sites in a structure that makes it easy to find a site or group of sites in your organization. You can assign groups of users to single audio sites or groups of audio sites by selecting locations in the structure. For more information, see Manage users.

1. Go to Audio sites.

2. To create a location:

3. 1. Go to a position in the structure.

   2. Click + Create.

   3. Name the location and click Create.

Example

Enable AXIS Audio Manager Center integration in the audio sites you want to add:

1. Log in locally to your AXIS Audio Manager Edge audio site.

2. Go to System settings > Connectivity.

3. Select the checkbox for AXIS Audio Manager Center integration.

4. If needed, select AXIS Audio Manager Center O3C proxy and enter your organization’s proxy details for the network where the audio site is located.

5. Click SAVE.

Add an audio site to a location:

1. In AXIS Audio Manager Center, go to Audio sites.

2. Select location in the structure.

3. Click + ADD AUDIO SITE.

4. Enter site name, S/N (MAC address) and OAK key (Owner Authentication Key) of the device used as leader in the audio site.

   Format examples:
   - S/N: XXXXXXXXXXXX (12 digit hexadecimal)
   - OAK: XXXXXXXXXXXX (12 digit hexadecimal)

   To find the OAK key:

5. 1. Log in locally to your AXIS Audio Manager Edge audio site.

   2. Go to System settings > Leader device settings.

   3. Click Go to device settings.

   4. Go to System > Network.

   5. Under One-click cloud connection and Owner authentication key (OAK), click Get key.

   6. Note

      You find both the S/N (MAC address) and the OAK key (Owner Authentication Key) on a note that came with the product that is used as leader in the audio system.

      Contact Axis in case you lose your note. Proof of ownership is required for receiving a new key.

6. Set the geographic location of the audio site:

7. 1. Select Place audio site on map.

   2. Write an address in the search to zoom in on that location.

   3. Click on the map to add the location.

8. To change or remove the location later on, go to Audio sites, click the row of the audio site to show its details, and then scroll down to the map.

1. Go to Audio sites.

2. Click the row of an audio site to see its details.

   You can also click the audio site on the map.

3. View and edit the audio site details:

4. • Find information about the leader device, such as AXIS OS version, serial number and product name.

   • Edit or remove the geographical location on the map.

   • View or change the opening hours of the audio site.

   • Download a server report file for troubleshooting.

When you create a new organization, you become its owner and thereby assigned the highest access level as part of the Organization administrators group. Users belonging to this group will have full read-and-write access to the configurations in the organization, including all locations and sites. To transfer ownership, you have to elevate a user to the owner role. There must be at least one owner of an organization.

In order to use AXIS Audio Manager Center you have to be registered as a user in an organization. There are four pre-defined user roles:

• Administrator – Administrators have read/write access to the locations and audio sites that are assigned to their user group. If they are assigned a location in the audio sites structure, they can add new locations and audio sites below that location.

• Content manager – Content managers have access to upload and schedule content (music, advertisements and announcements) in all audio sites assigned to their user group. If they are assigned a location in the audio sites structure, they have access to all audio sites below this location. Content managers can also set the opening hours and set music volumes for their assigned audio sites.

• Playback operator – Playback operators have access to setting the music volumes in all audio sites assigned to their user group. If they are assigned a location in the audio sites structure, they have access to all audio sites below this location.

The total access rights for users are decided by what user groups they are members of. Each user group have a defined user role and have audio sites assigned to the group. A user can be a member of several user groups and the highest access rights for a particular audio site takes precedence for that user.

Example

Imagine a user that belongs to both of the following groups:

• Group: Content managers France

• • User role: Content manager

  • Location: France

• Group: Administrators Paris

• • User role: Administrator

  • Location: Paris (sub-location to France)

The user will have content management rights for all the audio sites in France, except for those in Paris, for which the user will have administrator rights. This is because the administrator rights are of a higher level than content management rights. When a user belongs to several groups, it is possible that multiple user roles applies to the same location. When this happens, only the user role with the highest level of access rights will be applied to the location.

1. Invite a user to your organization:

2. Go to User management.

3. Note

   Only available for owners and organization-level administrators.

4. Create a user group and assign it a user role and audio site access:

5. 1. Click CREATE.

   2. Name the user group.

   3. Select a user role.

   4. Click CREATE.

   5. Click Add next to Location.

   6. Select an audio site for access to a singular audio site or a location for access to all audio sites below that location.

6. Invite a new user to the user group:

7. 1. Click Add next to Members.

   2. Click INVITE USER.

   3. Enter the email address to the user you wish to invite.

      The user group is pre-selected.

   4. Write a message that will be included in the invitation mail.

   5. Click INVITE.

Invited users will receive an email with a link to your organization. When they follow the link, they will be prompted to login after which they will be automatically routed to the correct organization. A user can be part of several organizations.

1. Add existing users to a user group:

2. Go to User management.

3. Select the user group which the user should be added to.

4. Click Add next to Members.

5. Locate the user in the list and click ADD.

The status of your system can be monitored from the dashboard where you among other things can get information about your audio sites' connection state and the connection state of all devices in your organization. Most of this information is also available in the Audio sites view.

1. Go to Dashboard.

2. Check the state of your audio sites and schedules.

3. Investigate your audio sites:

4. 1. Go to Audio sites.

   2. Click the filter icon above the audio site list and select the issues you want to investigate.

      For information about each type of issue, see Troubleshooting.

   3. To investigate an audio site, click > Open AXIS Audio Manager Edge.

5. Investigate your schedules:

6. 1. Go to Scheduling.

   2. Click the filter icon above the schedules list and select the issues you want to investigate.

      For information about each type of issue, see Troubleshooting.

   3. To investigate a schedule, click the row in the list.

AXIS Audio Manager Center can send email and webhook notifications for different types of events that occur on the audio site.

Only administrators can set up notifications.

You must be an organization-level administrator to set up email notifications.

1. Go to Notifications.

2. Click + Create.

3. Name your notification.

4. Select Email.

5. Click Next.

6. Enter the email for the recipient.

7. Select a notification trigger.

8. Click Create.

9. The recipient will receive en email with a confirmation request. After clicking Confirm in the email, the recipient will start receiving notifications.

10. Refresh your browser to check that the status of the notification has changed from Pending to OK, which indicates that the recipient has confirmed the notification.

1. Go to Notifications.

2. Click + Create.

3. Name your notification.

4. Select Webhook.

5. Click Next.

6. Enter the details for the recipient.

7. Select notification triggers.

8. To select locations, click + Select.

9. Click Create.

AXIS Audio Manager Center provides secure remote access to added audio sites. This enables remote audio site configuration of the local AXIS Audio Manager Edge system. When accessing an audio site, the rights of your user role or user group will decide what you will be able to do remotely. Administrators have full access to all settings on the audio site, while content managers and playback operators have limited access.

1. To open AXIS Audio Manager Edge:

2. Go to Audio sites and find your audio site.

3. Click > Open AXIS Audio Manager Edge.

When you have setup AXIS Audio Manager Center and assigned users as well as permissions to your users, then the users will also have access to the audio system through the AXIS Audio Manager mobile app for iOS and Android.

By selecting Connect remotely in the mobile app, your users can log in to AXIS Audio Manager Center and select an audio site to control.

The event log contains events that have occurred in the part of the organization where you are administrator.

1. Go to Event log.

2. Click Data selection.

3. Select a time frame.

4. • Relative: Select how far back in time from the present that you want to retrieve data.

   • Absolute: Select a time interval that you want to retrieve data from.

5. To add a filter, click + Filter and select conditions.

6. Under Order, select how to present the retrieved data.

7. To export the retrieved data to a CSV file, click Export.

AXIS Audio Manager Center have features that are only available if your organization is licensed. These features are typically advanced features that perform operations on several audio sites at once, such as content distribution or batch scheduling of music.

AXIS Audio Manager Center supports distribution of content files to your audio sites for local scheduling. For each audio site, the content will be stored on the leader device and added to the library of the corresponding content type. The files will not be added automatically to any schedule.

Supported file formats: mp3, mpeg, ogg, opus, wave

Maximum allowed file size: 20 MB

1. Go to Distribute audio files and select a content type (Announcement, Advertisement or Music).

2. Click + Add next to Files.

3. Select the files to distribute and click Open.

4. Click + Add next to Audio sites.

5. Select locations in the audio sites structure.

   The content will be distributed to all the sites in the location, including audio sites in sub-locations.

6. Click Distribute audio files.

With AXIS Audio Manager Center you can schedule announcements, advertisements and music to multiple audio sites at once. When you create a schedule, you target audio sites by selecting a location. All the audio sites in that location and in all its sub-locations are included. You can also select a label to further filter the selection.

When you enable a schedule, it is automatically applied to the audio sites included in the schedule, as long as the audio site is connected. If an audio site is not connected, then the schedule will be applied as soon as it becomes connected.

If the schedule is enabled, it will automatically include new audio sites that are added to the selected locations or its sub-locations, or if more audio sites have the selected label applied to them.

AXIS Audio Manager Center also distributes the media content necessary for executing a schedule, to all targeted audio sites. The exception is music schedules that were created with a local library or source tag.

When you schedule relative to opening hours, there is a risk that the event is set to play outside the day (0–24). This audio will not play. For instance, if you schedule an announcement to play 5 hours after closing time, and the closing time is 9pm, the event will be schedule for 2am the next day, and hence will not play.

Learn more:

• Labels

• Source tags

• Locations

1. Create a schedule:

2. 1. Go to SCHEDULING > Scheduling.

   2. Click + CREATE SCHEDULE.

   3. Name the schedule.

   4. Under Type of schedule, select Announcement.

   5. Select a location.

      For more information, see Locations.

   6. Click CREATE.

3. To see a list of your audio sites, go to AUDIO SITES.

4. To upload audio files and create playlists, go to CONTENT.

5. Configure the schedule:

6. 1. Go to SCHEDULE.

   2. Click + EVENT and select Single event or Interval event.

   3. Fill in the details and click SAVE.

   4. To enable the schedule, select Enabled under Schedule status.

7. Preview the schedule:

8. 1. Under Preview schedule, select opening hours or an audio site.

      The event will become gray if it will not be played at all during the selected opening hours.

9. To save the changes you made to the schedule, click SAVE.

Advertisement scheduling can be used for any content that should play repeatedly during a certain time period.

1. Create a schedule:

2. 1. Go to SCHEDULING > Scheduling.

   2. Click + CREATE SCHEDULE.

   3. Name the schedule.

   4. Under Type of schedule, select Advertisement.

   5. Select a location.

      For more information, see Locations.

   6. Click CREATE.

3. To see a list of your audio sites, go to AUDIO SITES.

4. To upload audio files and create playlists, go to CONTENT.

5. Configure the schedule:

6. 1. Go to SCHEDULE.

   2. Click + EVENT and select Single event or Interval event.

   3. Fill in the details and click SAVE.

   4. To enable the schedule, select Enabled under Schedule status.

7. Preview the schedule:

8. 1. Under Preview schedule, select opening hours or an audio site.

      The event will become gray if it will not be played at all during the selected opening hours.

9. To save the changes you made to the schedule, click SAVE.

You can create background music schedules that start and end with an offset relative to the opening hours of an audio site.

For more information, see Opening and closing offset.

• Supported music sources:

• The local library of each audio site.

• A web stream distributed from AXIS Audio Manager Center.

  For more information, see Audio Manager Center Source.

• A source tag that targets local audio site sources, such as line-in and on-board applications.

  For more information, see Source tags.

• Prerequisites:

• The music schedule is applied relative to the opening hours at the local audio site.

  To set the opening hours for a local audio site, see Set the opening hours in the AXIS Audio Manager Edge user manual.

1. To use a web stream source:

2. 1. Go to SCHEDULING > Sources and click + CREATE SOURCE.

   2. Name the source.

   3. The type is currently limited to web stream, which is pre-selected.

   4. Enter the URL for the web stream.

   5. If the URL requires authentication, activate Use authentication and enter username and password.

   6. Click CREATE.

3. Create a schedule:

4. 1. Go to SCHEDULING > Scheduling and click + CREATE SCHEDULE.

   2. Name the schedule.

   3. Under Type of schedule, select Music.

   4. Select a location.

      For more information, see Locations.

   5. Click CREATE.

5. To see all targeted audio sites, go to AUDIO SITES.

6. Configure the schedule:

7. 1. Go to SCHEDULE.

   2. Select Require manual source selection locally before playback start if you don’t want scheduled music to start playing automatically, but instead wait for someone to start the music locally from the dashboard in AXIS Audio Manager Edge, with the AXIS Remote mobile app, or by using an AXIS C8310 Volume Controller.

   3. Under Schedule time, set the offset time relative to the opening and closing hours.

      For more information, see Opening and closing offset.

   4. Add music sources.

   5. 1. Click ADD MUSIC SOURCE

      2. Select a source type:

      3. • Audio Manager Center Source

           For more information, see Audio Manager Center Source.

         • Source tag

           For more information, see Source tags.

         • Local library

      4. Click ADD.

   6. Note

      You can add multiple sources to a music schedule. Users can switch sources locally from the dashboard in AXIS Audio Manager Edge if they are using a host device with AXIS OS 11.6 or later. For earlier AXIS OS versions, only the first source in the list will be played.

   7. Save the schedule:

   8. • If you want to save your schedule without activating it, clear the Enabled checkbox and click SAVE.

        The schedule is now saved and available in your Music schedules list but is not yet enabled.

      • If you want to save your schedule and activate it, select the Enabled checkbox and click SAVE AND PUBLISH.

        The schedule is now available in your Music schedules list and is enabled, which means that it will be distributed to all targeted audio sites.

      • Note

        Note that this overrides any local music schedules.

By using AXIS Audio Manager mobile app, you can page remotely from a smartphone to one or more devices on an audio site.

To use the mobile app for remote paging, you first need to create a paging recipient and a user group with paging operator rights in AXIS Audio Manager Center.

• Two types of SIP paging can be configured from AXIS Audio Manager Center:

• One-way paging: for sending, but not receiving, audio messages to one or more devices on an audio site. One-way paging recipients will appear on the Callout tab in the mobile app. You can send both live and pre-recorded audio messages.

• Two-way paging: for live two-way communication through a single device on an audio site. Two-way paging will appear on the Call tab in the mobile app.

1. Create a paging recipient:

2. 1. Under Location, select the audio site on which you want to create the paging recipient.

   2. Click + Create.

   3. Name your recipient.

   4. Under Type, select One-way or Two-way.

   5. Note

      We recommend that you create your two-way recipients first, before you create your one-way recipients.

   6. Click Create.

   7. For one-way paging, add the physical zones and devices you want to target.

      For two-way paging, select the device you want to communicate through.

   8. Click Create.

   9. Wait until it says OK under Status.

      If you receive Error instead, click > Verify configuration to investigate.

   10. Click > Ports to make sure you are using the correct SIP ports.

   11. Click > Volume to make sure the volume level is normalized.

3. Give paging rights to users:

4. 1. Go to User management.

   2. Click + Create user group.

   3. Name the user group.

   4. Under User role, select Paging operator.

   5. Click Create.

   6. Add locations and members.

   7. Click Close.

A location is a node in the audio sites structure. For more information, see Create a structure for your audio sites.

When scheduling content in AXIS Audio Manager Center, you must first select a location where the schedule shall be distributed. All audio sites at the location and in its sub-locations will be available for the schedule.

Labels are used to add an identifier to an audio site that can be filtered on or searched for in AXIS Audio Manager Center.

• You can filter and search on a label in the Audio sites view to easier find sites.

• You can include a label in an AXIS Audio Manager Center schedule to further filter the selection to only include the sites which have that label as an attribute.

The schedules are created relative to each local audio site's opening hours. This solves the problem when audio sites that are targeted by a batch schedule configuration have different opening hours. The opening offset determines when the music starts playing and the closing offset when the music stops playing.

The Audio Manager Center Source is a source created under SCHEDULING > Music > Sources. It is automatically distributed to all audio sites in the organization. The source is managed centrally through AXIS Audio Manager Center. Currently, only web stream sources are supported.

If you plan to use sources local to your Axis Audio Manager Edge audio sites in your AXIS Audio Manager Center schedules, then you will have to assign a source tag to these sources in each of your AXIS Audio Manager Edge audio sites. Source tags are created in AXIS Audio Manager Center and are distributed to all connected audio sites in the organization. To configure a source in a local audio site with a source tag, go to AXIS Audio Manager Edge > SCHEDULING > Music > SOURCES, select the correct source and assign a source tag. This source can then be used in a schedule distributed by AXIS Audio Manager Center.

• Examples of sources that must be defined locally:

• Line-in

• Playlist

• ACAP

• Unique web stream URLs (i.e. where the URL is unique to each audio site)

Example: An organization have bought an online streaming music service that uses an installed ACAP to deliver the service. They create a source tag "ACAP streaming" in Axis Audio Manager Center. Each audio site that has the ACAP music source must then assign it the source tag "ACAP streaming" to allow this source to be scheduled from Axis Audio Manager Center. When creating the schedule, they ensure that the correct audio sites are targeted using location and the label, then they set the wanted opening/closing offset and finally select the music source "Source tag" with the tag "ACAP streaming". The targeted audio sites now have a music schedule playing music via the streaming music service.

You can receive system events via webhook from AXIS Audio Manager Center. Events are delivered as HTTP POST requests.

A validation handshake must be completed before events can be sent to a consumer. When a webhook is configured, the sender issues a preflight request to validate the target endpoint. If the consumer does not respond appropriately to this request, the subscription will not be established.

To accept all issuers of webhook events, respond to the OPTIONS request with a 200 OK status and include the header: Webhook-Allowed-Origin: '*'

To accept only us as the issuer, respond with a 200 OK and include the exact origin from the Webhook-Request-Origin header.

To comply with the CloudEvents specification, webhook receivers must respond with a successful HTTP status such as 200 OK, 201 Created, 202 Accepted, or 204 No Content. Redirect responses (3xx) are not allowed and will not be followed.

If the receiver is temporarily overloaded, it should return 429 Too Many Requests. If the endpoint has been permanently retired, it should return 410 Gone, which disables the subscription and stops event delivery.

All webhook events follow this structure:

{
  "specversion": "1.0",
  "id": "<event-id>",
  "source": "com.axis.audiomanager",
  "type": "<event-type>",
  "time": "<timestamp>",
  "eventversion": "1",
  "eventcorrelationid": "<correlation-id>",
  "datacontenttype": "application/json",
  "dataschema": "com/axis/one/notification-service/webhook/@v/1.0.0",
  "data": {
    "data": { <event-specific data> },
    "datacontenttype": "application/json",
    "dataschema": "<event-specific schema>"
  }
}

1. There are three types of webhook events:

2. Audio site events — Changes in audio site status.

3. • Type: com.axis.audiomanager.status.site

   • Schema: com/axis/audiomanager/status/site/@v/1.0.0

   • Fields in data.data:

   • • siteName – The name of the audio site.

     • siteId – The id of the audio site.

     • siteLocationNames – The location path of the audio site.

     • statusSeverity – High level audio site status.

     • statusType – Audio site status subcategory.

     • organizationName – The name of the organization.

     • organizationId – id of the organization.

     • aamcUrl – Link to the event log in AXIS Audio Manager Center.

4. Scheduled events — Status changes for schedules in the organization.

5. • Type: com.axis.audiomanager.status.schedule

   • Schema: com/axis/audiomanager/status/schedule/@v/1.0.0

   • Fields in data.data:

   • • scheduleName – The name of the schedule.

     • scheduleId – The id of the schedule.

     • statusSeverity – High level schedule status.

     • statusType – Schedule status subcategory.

     • siteName – The name of the site which triggered the event.

     • siteId – The id of the audio site.

     • siteLocationNames – The location path for the audio site.

     • organizationName – the name of the organization.

     • organizationId – id of the organization.

     • aamcUrl – Link to the event log in AXIS Audio Manager Center.

6. Paging recipient events — Status updates for individual paging recipients on audio sites.

7. • Type: com.axis.audiomanager.status.paging

   • Schema: com/axis/audiomanager/status/paging/@v/1.0.0

   • Fields in data.data:

   • • pagingRecipientName – Name of the paging recipient.

     • pagingRecipientId – id of the paging recipient.

     • statusSeverity – High level paging recipient status.

     • statusType – Paging recipient subcategory

     • siteName – Name of the site where the paging recipient is located.

     • siteId – id of the site where the paging recipient is located.

     • siteLocationNames – Location path to the audio site.

     • organizationName – Name of the organization.

     • organizationId – id of the organization.

     • aamcUrl – Link to the event log in AXIS Audio Manager Center.

When configuring a webhook, you can enter a webhook secret together with the destination URL. This secret is used to verify that incoming webhook requests are genuine and untampered.

1. How it works:

2. The sender creates an HMAC-SHA256 signature of the event payload using your configured secret signing key.

3. The signature is included in the webhook-signature-sha256 header of the request.

4. On the server, recompute the HMAC using the received payload and your secret signing key.

5. Compare it to the signature provided.

6. If they match, the request is verified.

Requirements for the webhook secret signing key:

• The secret signing key must be entered when you configure the webhook URL in AXIS Audio Manager Center.

• The secret signing key must be a hexadecimal string with up to 1024 characters.

• The secret signing key must have an even number of characters.

• The same secret must be used on your server to verify incoming requests.

• A regular expression for a valid secret signing key: ^([0-9a-fA-F]{2}){0,512}$

This example demonstrates the basic principles of webhook receiver implementation and is for educational purposes only. Production implementations must include proper security hardening, validation, and error handling.

1. Create a new AWS Lambda function:

2. 1. Runtime: Node.js 22 or greater

   2. Architecture: X86_64

   3. Function URL: Enabled (auth type NONE)

3. Insert and deploy the code.

4. Setup a new webhook in AXIS Audio Manager Center:

5. 1. With your public lambda function URL.

   2. With your secret signing key (from example code: 4d79207365637265742070617373706872617365).

   3. Select which trigger to use (e.g. audio site events) and a location (e.g. organization level).

6. Trigger a test event (e.g., restart an audio site leader to generate a disconnect event).

7. Check your lambda logs.

import { createHmac, timingSafeEqual } from "crypto";

const passphrase = "My secret passphrase";
// Resulting secret signing key (hex): 4d79207365637265742070617373706872617365
const secretSigningKey = Buffer.from(passphrase, "utf-8").toString("hex");

const verifySignature = (event) => {
  try {
    const signature = event.headers["webhook-signature-sha256"];
    const signatureBuffer = Buffer.from(signature, "hex");
    const signingKeyBuffer = Buffer.from(secretSigningKey, "hex");
    const bodyBuffer = Buffer.from(event.body, "utf-8");
    const hmacDigest = createHmac("sha256", signingKeyBuffer).update(bodyBuffer).digest();

    return timingSafeEqual(hmacDigest, signatureBuffer);
  } catch (error) {
    console.error("Failed to verify signature:", error);
    return false;
  }
};

const innerHandler = (event) => {
  // Handle the preflight request (required to verify receiver existence during setup)
  if (event.requestContext.http.method === "OPTIONS") {
    return {
      statusCode: 200,
      headers: { "Webhook-Allowed-Origin": event.headers["webhook-request-origin"] }
    };
  }

  if (!verifySignature(event)) {
    return { statusCode: 401, body: "Invalid signature" };
  }

  // Do business logic, e.g., store the event, send it to another service, etc.

  return { statusCode: 200, body: "Success" };
};

export const handler = async (event) => {
  console.log("Event:", event);
  const response = innerHandler(event);
  console.log("Response:", response);

  return response;
};

If you need more help, go to axis.com/support.