Update dependencies. Replace global variable with environment variable.

javascript/webhooks-nodejs/index.js

@@ -1,27 +1,26 @@
 const express = require("express");
 const crypto = require("crypto");
+require("dotenv").config();
 
 // Initializes Express app.
 const app = express();
 
 // Parses JSON bodies.
 app.use(express.json());
 
-// Global variable to store the x-hook-secret
-// Read more about the webhook "handshake" here: https://developers.asana.com/docs/webhooks-guide#the-webhook-handshake
-let secret = "";
-
 // Local endpoint for receiving events
 app.post("/receiveWebhook", (req, res) => {
   if (req.headers["x-hook-secret"]) {
     console.log("This is a new webhook");
-    secret = req.headers["x-hook-secret"];
+    // Environment variable to store the X-Hook-Secret
+    // Read more about the webhook "handshake" here: https://developers.asana.com/docs/webhooks-guide#the-webhook-handshake
+    process.env.X_HOOK_SECRET = req.headers["x-hook-secret"];
 
-    res.setHeader("X-Hook-Secret", secret);
+    res.setHeader("X-Hook-Secret", process.env.X_HOOK_SECRET);
     res.sendStatus(200);
   } else if (req.headers["x-hook-signature"]) {
     const computedSignature = crypto
-      .createHmac("SHA256", secret)
+      .createHmac("SHA256", process.env.X_HOOK_SECRET)
       .update(JSON.stringify(req.body))
       .digest("hex");
 
@@ -45,5 +44,5 @@ app.post("/receiveWebhook", (req, res) => {
 });
 
 app.listen(8080, () => {
-  console.log(`Server started on port 8080`);
+  console.log("Server started on port 8080");
 });

javascript/webhooks-nodejs/package.json

@@ -11,6 +11,7 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
+    "dotenv": "^16.4.5",
     "express": "^4.18.1",
     "nodemon": "^2.0.16"
   }