Developer Documentation

import requests

API_TOKEN = "YOUR_TOKEN_HERE"
BASE_URL = "https://www.blik360.com/api/v1"

headers = {
    "Authorization": f"Bearer {API_TOKEN}",
    "Accept": "application/json"
}

response = requests.get(f"{BASE_URL}/reviewees/", headers=headers)
reviewees = response.json()
print(reviewees)

const API_TOKEN = 'YOUR_TOKEN_HERE';
const BASE_URL = 'https://www.blik360.com/api/v1';

const headers = {
  'Authorization': `Bearer ${API_TOKEN}`,
  'Accept': 'application/json'
};

fetch(`${BASE_URL}/reviewees/`, { headers })
  .then(res => res.json())
  .then(data => console.log(data));

payload = {
    "reviewee": "7a44880e-2f99-4593-b3a7-58109af8a468",
    "questionnaire": "f3d7c2a1-8b9e-4f5a-9c1d-2e3f4a5b6c7d",
    "reviewer_emails": {
        "self": ["[email protected]"],
        "peer": ["[email protected]", "[email protected]"],
        "manager": ["[email protected]"]
    },
    "send_invitations": True
}

response = requests.post(
    f"{BASE_URL}/cycles/",
    headers=headers,
    json=payload
)
cycle = response.json()
print(f"Created cycle {cycle['uuid']}")

const payload = {
  reviewee: '7a44880e-2f99-4593-b3a7-58109af8a468',
  questionnaire: 'f3d7c2a1-8b9e-4f5a-9c1d-2e3f4a5b6c7d',
  reviewer_emails: {
    self: ['[email protected]'],
    peer: ['[email protected]', '[email protected]'],
    manager: ['[email protected]']
  },
  send_invitations: true
};

fetch(`${BASE_URL}/cycles/`, {
  method: 'POST',
  headers: { ...headers, 'Content-Type': 'application/json' },
  body: JSON.stringify(payload)
})
  .then(res => res.json())
  .then(data => console.log(`Created cycle ${data.uuid}`));

const crypto = require('crypto');

function verifyWebhook(payload, signatureHeader, secret) {
  if (!signatureHeader || !signatureHeader.startsWith('sha256=')) {
    return false;
  }

  const expectedSig = signatureHeader.slice(7); // Remove 'sha256=' prefix
  const computedSig = crypto
    .createHmac('sha256', secret)
    .update(payload)
    .digest('hex');

  return crypto.timingSafeEqual(
    Buffer.from(expectedSig),
    Buffer.from(computedSig)
  );
}

// Usage in Express
app.post('/webhook', (req, res) => {
  const payload = JSON.stringify(req.body);
  const signature = req.headers['x-blik-signature'];
  const secret = 'your_webhook_secret';

  if (verifyWebhook(payload, signature, secret)) {
    console.log(`Received ${req.body.event} event`);
    res.status(200).send('OK');
  } else {
    res.status(401).send('Invalid signature');
  }
});