json(['error' => 'Webhook não configurado'], 500); } $receivedToken = $request->header('asaas-access-token'); if ($receivedToken !== $expectedToken) { Log::warning('Asaas Webhook: token inválido recebido', [ 'received' => substr($receivedToken ?? '', 0, 10) . '...', 'ip' => $request->ip(), ]); return response()->json(['error' => 'Unauthorized'], 401); } $payload = $request->all(); Log::info('Asaas Webhook recebido', [ 'event' => $payload['event'] ?? 'unknown', 'payment_id' => $payload['payment']['id'] ?? null, ]); ProcessAsaasWebhookJob::dispatch($payload); return response()->json(['status' => 'received'], 200); } }