From 09c6f9263f75f4be0d39b8bd5af5b1843e700e76 Mon Sep 17 00:00:00 2001
From: bmc-msft <41130664+bmc-msft@users.noreply.github.com>
Date: Thu, 11 Mar 2021 17:08:13 -0500
Subject: [PATCH] sample webhook service (#666)

---
 .github/workflows/ci.yml                      |  18 ++++
 contrib/webhook-teams-service/.gitignore      |  43 +++++++++
 contrib/webhook-teams-service/README.md       |  85 ++++++++++++++++++
 .../webhook-teams-service/example-message.png | Bin 0 -> 14199 bytes
 contrib/webhook-teams-service/host.json       |  15 ++++
 .../webhook-teams-service/local.settings.json |   6 ++
 contrib/webhook-teams-service/mypy.ini        |  14 +++
 .../webhook-teams-service/requirements.txt    |   4 +
 .../webhook-teams-service/webhook/__init__.py |  75 ++++++++++++++++
 .../webhook/function.json                     |  19 ++++
 10 files changed, 279 insertions(+)
 create mode 100644 contrib/webhook-teams-service/.gitignore
 create mode 100644 contrib/webhook-teams-service/README.md
 create mode 100755 contrib/webhook-teams-service/example-message.png
 create mode 100644 contrib/webhook-teams-service/host.json
 create mode 100644 contrib/webhook-teams-service/local.settings.json
 create mode 100644 contrib/webhook-teams-service/mypy.ini
 create mode 100644 contrib/webhook-teams-service/requirements.txt
 create mode 100644 contrib/webhook-teams-service/webhook/__init__.py
 create mode 100644 contrib/webhook-teams-service/webhook/function.json

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4104e5566..358f9f314 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -113,6 +113,24 @@ jobs:
 
         # set a minimum confidence to ignore known false positives
         vulture --min-confidence 61 onefuzz
+  contrib-webhook-teams-service:
+    runs-on: ubuntu-18.04
+    steps:
+    - uses: actions/checkout@v2
+    - uses: actions/setup-python@v2
+      with:
+        python-version: 3.8
+    - name: lint
+      shell: bash
+      run: |
+        set -ex
+        cd contrib/webhook-teams-service
+        python -m pip install --upgrade pip isort black mypy flake8
+        pip install -r requirements.txt
+        mypy webhook
+        black webhook --check
+        isort --profile black webhook
+        flake8 webhook
   deploy-onefuzz-via-azure-devops:
     runs-on: ubuntu-18.04
     steps:
diff --git a/contrib/webhook-teams-service/.gitignore b/contrib/webhook-teams-service/.gitignore
new file mode 100644
index 000000000..fbbe2efac
--- /dev/null
+++ b/contrib/webhook-teams-service/.gitignore
@@ -0,0 +1,43 @@
+bin
+obj
+csx
+.vs
+edge
+Publish
+
+*.user
+*.suo
+*.cscfg
+*.Cache
+project.lock.json
+
+/packages
+/TestResults
+
+/tools/NuGet.exe
+/App_Data
+/secrets
+/data
+.secrets
+appsettings.json
+local.settings.json
+
+node_modules
+dist
+
+# Local python packages
+.python_packages/
+
+# Python Environments
+.env
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[cod]
+*$py.class
\ No newline at end of file
diff --git a/contrib/webhook-teams-service/README.md b/contrib/webhook-teams-service/README.md
new file mode 100644
index 000000000..70df90b74
--- /dev/null
+++ b/contrib/webhook-teams-service/README.md
@@ -0,0 +1,85 @@
+# Webhooks Endpoint Example
+
+This example endpoint takes any incoming [OneFuzz webhook](../../docs/webhooks.md) and submits it to Microsoft Teams.  
+
+Check out [Webhook Events Details](../../docs/webhook_events.md) for the schema of all supported events.
+
+## Creating an Azure Function
+
+1. Edit `local.settings.json` and add the following to the `Values` dictionary:
+    * Create a [Microsoft Teams incoming webhook URL](https://docs.microsoft.com/en-us/microsoftteams/platform/webhooks-and-connectors/how-to/connectors-using#setting-up-a-custom-incoming-webhook), and set this the value for `TEAMS_URL`.
+    * Create a random string that you generate, and set this value for `HMAC_TOKEN`.  This will be used to [help secure your webhook](https://github.com/microsoft/onefuzz/blob/main/docs/webhooks.md#securing-your-webhook)
+2. [Create Azure Resources for an Azure Function](https://docs.microsoft.com/en-us/azure/azure-functions/create-first-function-cli-python?tabs=azure-cli%2Cbash%2Cbrowser#5-create-supporting-azure-resources-for-your-function).
+3. Ensure your function is HTTPS only:
+    ```bash
+    az functionapp update --resource-group <RESOURCE_GROUP> --name <FUNCTION_APP_NAME> --set httpsOnly=true
+    ```
+4. Deploy your function
+    ```bash
+    func azure functionapp publish <FUNCTION_APP_NAME> --publish-local-settings
+    ```
+5. From the previous command, write down the URL for your webhook.  It should look something like this:
+    ```
+    webhook - [httpTrigger]
+        Invoke url: https://<FUNCTION_APP_NAME>.azurewebsites.net/api/webhook?code=<BASE64_ENCODED_STRING>
+    ```
+6. Register this new URL webhook to OneFuzz.  In this example, we're registering a webhook to tell our service any time a job is created and stopped:
+    ```bash
+    onefuzz webhooks create my-webhook "https://<FUNCTION_APP_NAME>.azurewebsites.net/api/webhook?code=<BASE64_ENCODED_STRING>" job_created job_stopped --secret_token <HMAC_TOKEN>
+    ```
+
+    > NOTE: Make sure `HMAC_TOKEN` is the value we added to `local.settings.json` earlier.
+
+    This will respond with something akin to:
+    ```json
+    {
+        "event_types": [
+            "job_created",
+            "job_stopped"
+        ],
+        "name": "my-webhook",
+        "webhook_id": "9db7a8bb-0680-42a9-b336-655d3654fd6c"
+    }
+    ```
+7. Using the `webhook_id` we got in response, we can test our webhook using:
+    ```bash
+    onefuzz webhooks ping 9db7a8bb-0680-42a9-b336-655d3654fd6c
+    ```
+8. Using `webhook_id` we got in response, we can test if OneFuzz was able to send our service webhooks:
+    ```
+    onefuzz webhooks logs 9db7a8bb-0680-42a9-b336-655d3654fd6c
+    ```
+
+    If our webhook is successful, we'll see something akin to:
+    ```json
+    [
+        {
+            "event": {
+                "ping_id": "0770679d-67a0-4a6e-a5d7-751c7f80ebab"
+            },
+            "event_id": "0c12ca77-bff8-4f8b-ae0d-f38f64cf0247",
+            "event_type": "ping",
+            "instance_id": "833bd437-775c-4b80-be62-599a9907f0f9",
+            "instance_name": "YOUR-ONEFUZZ-INSTANCE-NAME",
+            "state": "succeeded",
+            "try_count": 1,
+            "webhook_id": "9db7a8bb-0680-42a9-b336-655d3654fd6c"
+        }
+    ]
+    ```
+   
+    OneFuzz will attempt to send each event up to 5 times before giving up.  Instead of `succeeded` as above, you might see `retrying` if OneFuzz is still working to send the event, or `failed` if OneFuzz has given up sending the event.
+9. Check your Teams channel.  If all is successful, we should see something like the following:
+    ![Teams message Screenshot](example-message.png)
+
+## Troubleshooting
+
+*  If your function isn't working as expected, check out the logs for your Azure Functions via:
+    ```
+    func azure functionapp logstream <FUNCTION_APP_NAME> --browser
+    ```
+* If you see exceptions that say `missing HMAC_TOKEN` or `missing TEAMS_URL`, you forgot to add those settings above. 
+* If you see exceptions saying `missing X-Onefuzz-Digest`, you forgot to set the `--secret_token` when you during `onefuzz webhooks create` above.  This can be addressed via:
+    ```
+    onefuzz webhooks update --secret_token <HMAC_TOKEN> <webhook_id>
+    ```
diff --git a/contrib/webhook-teams-service/example-message.png b/contrib/webhook-teams-service/example-message.png
new file mode 100755
index 0000000000000000000000000000000000000000..c202b0bc36005702d738eb7a27536599dcb77b3a
GIT binary patch
literal 14199
zcmd732UL^W+Aa#Zz=D)z0cm2RNfQL=ASxgrqJTuYC`b*V_qJ4E2@<4>lpsy1k(SUw
zSyB=pgcc!zfRq3sbciGb?ibhj_jdn#-#hL(<DPLYV~{WT%KYB>&Ue1$dFFg||DHbQ
zae?D3EG(P`cW#@qupCwazJET-4tyToJ<|^ySba_PZ?aVO3oQaaesk6_)?s0(O61sc
zU;}<1^SWc{%fiCd!Te|Kf_!vjVNpI|a9hVb$c{2`B>T+BSl7CY-{PIs$ElBd1nrk!
zz1t|2_+9A&R+-oIsz6HKMO~f?SK_K3|91L}&STe$EquQl{r2_wMTzIpPk0t}<5EdE
z&Rb*DtJxDdmNDIxZH%y1Sg3P<<~34w(~4%~vlXQRhmM#-fFvwmSy_(&hZ|Ko?X1A@
zz6XyN^Ym%K--MXQuX<HnDx6EWj1YhFoe8x%<~^q$G#2CPS|EKQ4?PY;@7;J2vR!Cd
z^K65$8Yu!?zVUmJdx$N*>zL}->r*bMON5{8yr`u3C#+i2o8p|>T?g`Xf+W$(^2{r7
zVzx76D`E!giN6I&TFW`1qW1U@7jW(V-lO&&x!Kd`D6_VR@V`&>E(qA;Xn#wmdycj1
zn&jWD9D+In0|7{9{F@M_koisG-BFcXgP*-pEIQ{Upy+YAPB6mW?Yf4go05j4dCl}I
z(;BSubB0n!xP3<ST!No96?Re!$*6li<EHGvTRZkGwDQZvDP~(=%}QB6+~d(RJV)i|
z*`GX<9Bv~hIaZtCsJvU`c%2dLs0fziH<nH6)vFM#`CODdG4-U!#qYhNBG-~~<84Ew
zfv!Byg7_lG7kQpTup=0`q?4Sose`PXYOTJ!>_0m$k!#AS(kHi@mOW03oZCXf-_%5m
z8TPw{m+Vbd6Yp$};!xfh41*<G@08&^V|~?~C3@kwQlddLA`vA|VMkTrw9aeq`HSy5
z+_xy2C@`(GwJ#Ycjx}#+PE3Vt2TDe+Q%o00k?XlNSC2BS^~QRtRr})Lii#zTV6gG|
z+kCahO*2ca_lPi+%Eo5x;y<MMv9~7$ChzVml{fUB4XA!C;P*~r`-kcv{J^9zbk*J<
zgRa(H4muEp%h*e1XsO+bpbiW1%hQz_K4MNw;#O@Xha!toDF-FyEsY<j1cTq1h86W)
zGA(MT(DkXS{{)-Q?luVxhy0LhSfO&xrn^g_Q*y}N^O8<Z)aB&rNQ+{jw@EVe;<TiR
zAw%>^rl=z()x%P~?zwd4X6V?DIj*tVh>9%{HJjFNpB@HKCS>Kpsvo#<J(9NUP&S<Z
zh`H>(rdAU9#b8qFa#BFM>qu!@Z<ex2>)wVD7B<loh%SS-UIEz!7a=2THc1$6d<_iV
zN;5ncx-1Ww=oo46bsnpF+NJDFqd9+#J2Tm+pS9WFc9W)EWjVgTKYa_O=J!s5TWjN0
zcEEUWY-*;9@WeSqbFO>}IXJ(ow7DOSH_>P@s{AnmK0*OCu2zX7gV2Bi?gy3pmTi%d
zdx4waoqczicw;`%LqY^vafvK8nrduz1=T;6d2#64i>MS)`g0QfS$gWkHB|Q!NuV2l
zO91U$Ac%^~j7+vw4?y#g+um53eL(+}nc|qZoIxFBSVyc4tD8Rg#@i#*YEb>6>$tE_
zbNHQ$eNjXCx*V3xLEdMz=6f?QX@>5kx(*fhRN6MpzTnn6+L5?gucA2R;<AKCLeAb$
z3s??%M49V4)Sm@u<<|l!6TDs^SEdJ|5D|=!MI0Q4)F^3M3BPuNPvAZw>iuV(4&Buw
zlia(9?q#bP9!}gylhlO6IVTP<`>@c&mKu_j13%Ni&)dcdd-ZG9ypqoKN^aiucp7|x
zL|0f`e5Me51039H?;lKAZ`@dwPn#{XEOLtE@o)?=7?ZDi-K?|`mZ`P;yXBA0HpfYV
z5dTh)elTS_!;yhHqd*>uM9o*&cTd8vqn3-xifA*d20ibsFT4LG)`J=odYQv%O7G=p
z4u2&DDB*(%>}v1bT#em4MuA>JGN6WTGZRh!f&I%s=NAS(O-q@iunB2?fNRKLG^vE&
z8%`GKh=;K0x<+-&HGkY&S{UKyGzqqCc_3g>Nuv-ut`pkx8Q7-<U1VPh{HL2JB!4>G
z-xK+xY%i}vb8s1=j5bj_Fs>v=)DeP7+@hpaCC8P+b&ewgZq=*19%JfKMmr`lk`Qi>
z^G3Y)lBs-hN!x<gd(vgB9apv_H+rYE6lhpP_2VhY>Y&LE1-I!?pT#%G!rmd6QICW5
z<<K9USEoK!2VypML@N~!L+vWYTEm<CDC66CjF37fJOZo`xI*xfhsV>9lOa;g7k#JN
zSuJZ_9;}SKy>Kh0d$hv31OH{qyFH3^I>Nr)6_2P0+utQMAQKz#yru-$!!nDWrqxz@
z-zZL-zC%fQe=Bw#QL=GdWjvCyX&X3k#?$@r(2Wm?IcomNCfW=|p+u+&WJvvBZ?mJ-
z<J%`4E!slCr@JH__&1k&@5n8iiAH}8I($2o{T6l4`zxnP>(vzdcI@@drjVx&x`_#P
zi`b_!-Sy!^YDl6y{mqTv0B_L|_=xqxexh93sYb1fxGfLymeu{F6OpsO1xI*wod0V$
zo%;wVqpt?lJ;^WXw3;nFru?C>9A;|y>~+1BmL(&pnYxnvSpGnl$Ll&e)QA_I9LR@~
z8lt1f9hfB5MCGJLDkiP^Fvw`<6Gi9a*yYR)<vSKUehM)V?p#Q!0AJnqjwBS&tn8rw
zAC)>C6Ohlh&@xjC&kxeAJ(KwC!{qm}p_3syYaQIN@1ISz|KXq##Ms7lczFSzv0aVY
z<C6?35hmzD*u1SRcg^9;Z(|L<Bpu{)*DNa#B*%TMdQN9MeEQDeSL}il+D@p{Pm_X>
z<_oa!olL*gNzD@`9K6y;>6$JBd23+;VYPB<t=Iy6G+>&SvaW-ZozUsgUHb5;g?%OW
z(QZg29ZzUI-I;V$rP22OQSV#EwZa@KD-lI>E4#heLwF!Hx#1JdrIL{7ekIZ^GO2de
zr>eH8s$s8WCVCJNZnQ{v-*7kVV{VvYZSiuZ-2*KlTYbH4u-GLLO<P_rO<lX(3D9+q
z2??V~8|l!1<z!=PM0b->`fu?EXEv~<iA5bz`m?2>l}RUW;S647gOlZNcJ$$3pMhC;
zaxltl9xG~k@bVP*B1p)UU8v>DdyvFdTtXAEa%$nsIS!S^dYr<<XxaIWSndqKBhO{2
ztRH9xjOZPP()qJ@D0p;&^5mn(?bw0Bt_Eb^m~%8>x_s=yc!=~=J?t~!%Z$&y)Y|{?
z)Uq|Kq1GKItC3+>g4J4-3Brm97wqVgEf<Esobuy#ic<@u^sTt$n6}t+Ari|U@bLQY
z>_V{SrG<zVM(+e^kmh;km8W&PH<iBA00#1-skPH;Q`tU~4L%m6(4zI0OGS&|7qcIb
z41;s@u9A((KSQeh{EUNF*5?QJMKXH04|e|?jtt4Q*$)!oXCw~IEo!wm_KBnC5|EQ`
zTGY9_J1g9s*6H!HGbSL^cqBX-9V44+Xd;`^d;VMMxsxxmekXTGDGT^0Ja0F1`$lqT
zmsItuF>lyexkWpp|Bh83{%GN*HjO`feWok+f}VE442KG$f>j?f)U-RF#jR%N+FteP
zDP8fh%cE|osd|trLGJP=DK!&~_1i028GvhZuDuHp9Qt%UVENHlbFgpFL;b_h=vtR>
z`}Qh|OFQ;P!Dl`AtjhqleFkv`2Ut>wQzxz%JF{hUJfB$q4CE)>TaQt?y6DZ!zM?J_
z+-Lm|kup<cnvrC>C~|E!wQW-Dp!q{X^R>p36RWl+5mcma;nxb}ofn~EcM>M$4APqH
zQkMda)7*2HWi$^S>6U^jB>dfnlX;zUL|?>mCW)@fq$h%;lO9SP$iNt(6*h{qwvtMF
zGv|kwk3R3MyxN_5wipDtZW!Z9D(~Y|DWb_`gml5e?i0V?xds>#7w4%)7bN6CmS$)`
zP<*<bJeDmif>r-;vKG#|Me&VGP|$QV-<Ocqr~<_k3t;<}P%0OMbI8~A&jH`XGj9_F
zl~MKwG#r7}60&_9zHk?&#mEb=;q@X&sf2vJgC8z?AmE``xR53^@j=HBQZy7UtmgNI
zT-hYs{I1A<lS5^c=yH|TA+paiT4g<!94F`%=Fo|hyT{@UF}Y@SfZd11!uq@qLp|}x
z7FWFYI1mzn33*&)<lcTmHi4Gm143>(P8DdU+f(Z;psUyKT-nLKR2QNt=f6tJ7+%?K
z99~c|DV<c-Um|GhH)_z_7dP5Qip*b~OwP=_z@O<PdhL=mDpgKOTZ<|_NN)|D%Tea-
zPRtFqH{`Sx&%A^%8goYcrt|F9Sr-Lggu%|I3VZDXv8mLskP36!80V2~8K$EfJRm0Q
zM?(CjE467KLC=<t8v+XKcy7nQmR+C~=r{uDgF{R6A*kJ%K@4Rfb^`>r6SiX=<auu|
zln2rwh;XWhSX*s%(VhSkQ`_^7Wwqn0Wn$Ywo*e4{=I|m&%Uye`*(gJnlT70CQarop
z9JHlRx|3KXcXmLHR&;nY;-u>lA<oOY;h|P`th!XP_c)*Olms>IzFpU0=48CgrQ$EB
zoFc-QwQ<ESTB$P9vkFJ;&n1`I78?}dVJUHc7}|;(rmb8n`kqr$G}wYMs*9aWKSeW1
zpJrsC6EZ+az2(WtNjWm2*Ay;GT{2UsxmI*r?^wyhy61bdrS^u~`gUoiw4y_ow&MDL
zB&tEFIV2^gMyL7<W;#sRM|vu?dE-IJ*wry-??EnR4$T7P>N(th%-IMK$+Waq<YL#P
zCa9DeWKc@j%{O0>zgIdTZw#d<7+nd>J)hS2I^{~>>x_-?bhPE++*D+&`5U6GsZO<m
z5&H%4qt`RXl5;YD*GND5<=(Mfy9q;|0J>liYKr>{kD1RmF-awloYV-n1V`?nGL_E(
zJZ=gxA_889$~4#uH5;D4OCt?Yz?=kfuN0AO#pX;}tV;LS<x7TLYt6}9*~1G84@><s
zFDiM$#Oj**lHD|)8O}AqxDO2&`Se~R&z438q>o%e_tf#FaUL?3>_MTDmtPNl-jwb^
zb#o~}9@*V%+P09?4s!b8bf_rSGY!Q6-HFy(jXm(i^k!2&&)|r8yqqeT39_8@`2aQT
zpY>T@P@FKc?7BFX5P6|Uz(zK$zty1BA13`!<el6@kw+3E=Yk$W8C{1;cGlVomo7mJ
z6SU$BpTVL(Z+<lm9{8|9)#5`hkx-}+zO)omoliae(ibu<$C8tZKoAAdOW(9gdgOgZ
zD{Kq*+LfjszFW>t@VR@yUHE-Q>NzP()VibZ&xGXdK9W~Ht9X-xdx^-F{CKd)|4`Le
zE|rn2Y#E?tOL^VNXRv#1+>nyRj;;#Sk{W3;PDcgaOL^L4l5|D0*eER*V?;TJF&dew
z8jLz)8rtrz@N|tjTa)B8i{!I-Q|`e?{=<}&k^je_=|wXLNb16YzYUuz8L?s-Fo3$+
z?&$t!a7d>40@9|sb@u>>Kwb*Ity}Eby)mFWb;Zu1M|gC9mfmq6zOjDzzRvgC^t?ik
z+c(22x$F8R`x)}4Eo7S#EEqAopapUxs@l2{<ZoRG$hkPDo|q9QEM`=M7c-bS0!xcD
zDLr2no1P?vkrL+@y;fKou_LB#rl4SGWU*!gdEo9H_E43v(^NP-kl1lPMbjh8e7WgS
z=_J*H$7QRuk4sYiZksXKH<u}cOv~Xv|EunO9yO$JRHfp@RqyCjRgzdq(B_?zfu}J-
zL*X&0tJlq-i)zMK{BmWBn);JUKW|={_+U_BCuc~WME=<;ErpIvO|c-EpMVowKK69?
za^1WaliKrxw#zS`o_4Ki=}h)Wvi!xP@&%&?4Hxi*TT@Cpd6s-DXn{tf>X^uN<MuI{
zar>_L-@t%GKzqsPR{8m<+T_=I8AfBic%!efr;47eMjGtW=Z)$@b2CuXdl_z#FtLZL
z*}znke^Bao><~tqm_nyziywKGmQH0)OMxLJ#Q800eXjhbH`~OlZruxNvO;7>JkeF1
z>!%m~HRYe2RwMe!z>s?cVv6T|nF+SHZ^6Dfl{$CEt6rBAnDak8<AuGJl-({`8e17!
zblBekY{y_bD>umsX_EdfM~uDmNT)#s*QugT@Y5n6oV;nx)3v=7zS*=3N{*}9rW=#(
z)jpp~Xq;~RI^9@^2|BrVxqK=(fXC0Ud#ta_FkXEn$rKZIWh~_Dvmf*4hZhd0&z#R6
zRnf`AVx||g?Av=h|H?SQbUsA?s>9II(X}>Uh^$aB-={o|dgv-mXTy<mtPH(6^<u+q
zyffQ-=TdWuh6R)&ulsKM?0Lari_{5URCnwPL$qAK#Hk3~+6Z?mJw2WP1)yS_3g+>-
zr(W`|b|C<n8WK{MdbawOLM+>RJ?;3E8quQ~g3lk<s0Ov#RmY5FoDdT7`ti<%Daort
zP_^RegFDeR`_f9D;TCQ?VRml&;dW~()}^lB8USm-2UnY~su*0^pRwOShpP3oj?Fn@
z%1x_%Zd>kdV@iLUE-rLr|6J_H<K{M8F6z9$VAJp;->5LWiHNFT(9!&f7{CF%l{_<<
zjIdMC^EiG^X<=a`>oH7xD%Evs=vNoWrBWwwJ>%&;h}1(!h-qnn;H9*t*GX!&&kXB4
z%{nkd^A`7X^OnF|q0Mhi8~0(O7l({c`<7$X5vIYe2U!9>HYuGxeM-2VZ`ezY%k|z0
zk<;Yrscqcc2#B{EAJ1n%t&%g$e1HcmrO$Nn{jTZ$x~NY5nAlhc!syxBTlwz;n5p3t
zwAr1i^Z&yK8VY%tkEF<^x+!y|zSH?wG6HTiU)*m_Z3u*#FKjoPukI!b;eB(>BfMIB
z`2+I1hX<=60mU9LORIF_y@c|x1Et`(ZKPw@ie|MFMbEPJNl`hCDqcOypgMi+a(5hF
zW*gk=?<$(PrJbG;D=bcd(F#%pKS>`|wJy5d-+2C;&>nxbp*DR;Cp`WVC2FYF)oeAG
zIcR?sxVsUp)Jtx%WrrjrX1v2`NY{A^ijF{pFO8@rBwOW(vEftZzTtff^{6F-3za(6
z&%St9M}`zH=j6y7DNf5s6wj7~MONRi%Q<)#)<BZlb;H>OlP3b5`kdY87}N~Z^Nh}(
z`c@E1e@3t;W7Du(zoWEgS2HBWUhV#qzw{)}ynHu!3&-Z*d<!Vgj28FNg_G;zBEv|P
z!4oPk1px`q3%kC|zR4!^a3<T{pstNG$&Gf<vH14Vh$r^bX8G{4iec$w+x>{~rY4VE
zTT90fOVz6dFNNOP=~*OJNS6_VOnK!Z^aDI6uQavMOece8lq_r9N}8|kI|REglvMk=
z1&^th)h_2e&>MxqW!qK*n;a7d?iV0Gf-_z}uzpUW?Pd#`&W(q1{av-VZ~mA`q^1Lj
z2unAtvIuNTkuu32VAUVl_l+#UI@As~_ydtvMQ@3)Q$D<?U~z>SVXLM!t`}e|d4c{c
z<MgpZ(B9ru%^{=i&>6XO9PhnU(Rf~TjNE89VG+}vU!vUIRUp7Nr}OF9lJMIcNxE~|
zn+h|do)<47MCV|SE*5=($4*L*bs%FgXbsx?VeRSLkhbGKmk&YVOmA>Q!?mJ}TWV@p
zef4<B@TO=9-v7Dzq8boxLo7-swRE7tk1J1v&)?m3b2AvzR#!i&tka#DCUfLjYBEOL
zJmu@D$P1hLHd3pY-IiwMy%Uzot>w!cOUtmNGs7H*`pc86l|ME)>+xs4^^H+%)YeCF
z(##FHi07SRz$xWP<f2a9w#^+$uAjlx%g?~wHvAEwnPx<W`I3rNX`s+0B~N~thfQq~
zb?4q)luL9KJ5ro}^iX_E`uW-4c8+{@I@nUE_BB=AeG;ZRruE+Dlda@87=Og?pC`vG
zb?PNA9VvD~=RPLJct4zt?po?eIUI2jq(yjG${A*j(%62L+TsjF%6b2dFcuhDk(WBS
zRJKi2ukFDiMprbfmi*31r5&sn?@<pYqVs#UXWO^#j%kzJL!6#P@;u(boVaPs6A;iZ
zDXDPn8&~csM_PJ|Z?z+pU|Q{YlYiIIku8{lrB!>H23x8(BsXt4`Yx_DUEk=EI*{-;
zG1)n2dG&X&)X%6L9RX0Tn;8Lb)FSz1)1K$~E{DsZmBJfQrLP{&m8m-2e&!g>`s|?B
z)IK)*{Iby7v<rYDPM~ULqb6IgUs5j@zXna>rdgy1(s0RC_Td!1bLFyGxn;7D3449J
zhSHKSAIqn~^Ud$}wJzWInKeLVfpIrGrostz7gK_qyI7~5kQPUkd*gW+p4yj!LjB<y
zz$PxWC*9v_DS9YG(5m=PyS`(noxVXSRh_Zk!RjzCPD`z3XqakKtw*-GKCkBB{o+8l
z%qe(@oXCE4W_e3(W%h7k5|Z2CCovH9Q@ehZQ@^>{4O^7@!6dsT)y;Cd8*U>o(t>vH
zlQKijkh0|X-&TMi=AZ1fA*bwGB!Aa<hTiEBb=tjFH#d{rKDD$lX=d!?gBI8rjV7jy
zRG7RG&bXd(?!cB9x>EQPoNmX8R`~n70VYH<({>$nuYVo6V>6~Yb9PLvA-`N0^uPit
zEiUDArTfUOD?N0KIhQ$Si*k8$*jwM%(t-~j%x_m*z)(wMUW_ZHVv&l;N!sogA-04^
z7PdAf7Ir?_8V8%Fnn}_p{%Ni`ZtW#>hFQ^Pr^xiI@f^uOqStf6Afmx0a71#0jJ}sX
z%6EXY3H!|NgFVQW<g@j9XX7_r;)B(dDcp{BW_NP#j{dw4%Ly;tTR!put=a{X1?^3F
z>=IM@lilxWnT_vFDXLcWQ2*_v4>$#`r#Et%ycy@rGOCE_E3|lVs%>=ba!DrnFSrtI
z|6tX9SR<_b%<{oOqc}T7kz-tA4>M8!i;|XDKS-RP0z3fAPxE7vAD11#G!*m9Un!%F
z@1kZhQ!ker+w%h_qJjpkK&QMkQj%ZRElM$68IOq-*^SAaB!9Xd?!<iPJ1~2V+t=?J
zo*XUyr)xO|P$>pq#<$W$y#a6wjY^Z6tHar)@XA;Pk@H+K)%@MMK^8(b{v!_+BKN}@
zC<uJ>9MG6SVO^!zRFIhHG4~-*`fa4=gd=&hV&n4>kvr&gnHK-=A-i)KP7K=iAb__+
zRO6rps<)YjcH`Zzg3=M?kE(74EPvB!mt<%5eX8kVg})M${4scx)mnX7@wJNt)+-;M
zsJZhtY<mQ>F`orNRXd?)+y6LR4FE#?njwCVBIeRSC_JQ11^_cpF~$(!tk(ichFSn#
z>4lG|)oi(_7`S4yyMdPL2oHIE4qy7P?2`<~?Q73^kCGP}m|*4_LRAK5J@4b=;|K`v
zka<qqcfR*ix!H$%8$IH%m-N(70#X;kA*kTkeSy9lAaDCt&Zho;x~#3hAgK|9%8%cn
zuQZw1g{|v0Og-ngNwXo*asnrNCLsQ{<4363<110Dhri6^lO9^(XoZxWr4cD)C1uE0
zm%h65nO4fE@gcv!Ry9z@ZN|QBsL5XGf14kkkSnE@Xg~)v9hV3=pMQ*gG5`QAPqwI^
zICm?Si}Tj&nAZT9uX;k7PF>C5vkTG**;$s1=aoqo&kedcj)cg;B51B>&1pLnDJI-s
z3&vaU%GpW3IKs_Eb~}pAQvh_oW)pI6!miHkVbE(?6@P2Y`#CF<4)i-EcSivEREXFM
z%G3z<IqRr+-?eRv@U-*wF?tz^c3oS4mi^=eBD!978T^^Tem>lDd!n&*$AfhR0m}d|
zr%gS4)rJc!bZg;vElim<3XDT+V>wUqJ}b9D*0t7s=+fTkzSO{Y#m=MN{~=Famp%{u
zx-?#8<w;N80;s*yB7pn*r)?&I+Oc0tqodh4cwf?MdpT9W<F&`g*^&FZ4w_9DQ*bhF
zqX^mS{?=sotBU|1P+tK%G8k1zuLE;l7gY8<(UF3O+8GZ{6&xIg(9@+YPqODih1JiQ
zQ?(@<ua4?l-)X{Bv^K2;z^ofW?<VU8Do)MfDz$J|^R~-1;4}GKLcGVrW_-~TBw4UM
zW+vAjU%gNNi{GqPF2r*#tLw}EjlgWM5iE(<tFmdOan116gg`OKYYU-N!N;j05GHo_
zEsq@-fQ_Al{PiNsDK6niIRSIUPmkJcLYh~_+q|}6`SC8+XUPRJg%gZUTMxck7mT~Z
z%H)O<rHORqqb+`PrcS1eq~1?^Ofn0Rwa+r7zX5%`8n7baZiN37KHB!YvykM6R~S!+
z%du^LUSefZbpJB9lG%muA9VD!KNNs`i|=NhT#0Aroq%7s(`IW7?>`}+xbQ|wC73N6
zVAIr2=m}o;P?@b!3Se_4)O%0M7X#MU07_|<X<QgxceVHX!vn-dV5=V)A=NzVi>q^?
z%Jgm~D^8uQc#2HYP29{O9(t`sty@fQ!q|?t_UqKj?Mk}br4c$s<^=T}X#Z~IUbmt>
z`A&QJT~KiyEL>A*F*be?!zRQqJyf9#jQrJ?%^N7G24v0l%7pr!DGQ?t0pN6vU}VRl
zvmXI7^$lbV8LySx3rqAQXK;Vx;|at2c~?C3<J)SKz^zTK43Q8L$Y^AmHN&N$=_)23
z;lQ!?{7Y2CeIkm`h@A<;uLKbQV`_M>hb{p983z0O>e4vhTrQC|pCv`q;4S86VafY(
z=NE4({i+baBV!^w^&+<(+<F}@Wz`nJ_<~1mStz!A)ql~|=uiFvW_Toor+1CZN=z+`
zyjAs`pN-(i$~D2jov6gfNKZUKu|>?hOAp8A#|J;<SZ((FV~`er&Kw<DbMO!2*lfOh
zOoc|E6%cmngpn{rg>;yugcrVcW+LjT|8kHMDXu@>dfsf{tsg$e$O*1*xB0gA-^4sY
ztXz1)Ou+TwzxtFlN|hAr9$6dk&e%7<29{Rg5To?T@!83AHXy_lSpQE(6edIer}!^6
zrvRK_S^qV1Fc(&w&;3;x<}Lp_!rQ+KBh*rSFGpY_4Y)F;E%%F<)%i~VBd>NH68p)D
z+I%fx2Gr9Qzjj~u>)!6>956SMyUvC7T33D_X1?IK)UVAHs`)QnhJ|gsTE-*gwy^pl
zJ=-{YIVKmvpi|L=247$Dl2*kvC)8<IY<@IAU|Rm<utma!m{H9HV2@IiiD6~{Z76nx
zOX!VlQ@~t0{880Kjm`)lxcLIS9(W}<%zqSaFXxV{OslX)8g@a2JJiNwi;Oa2=z35g
zN%er`qjYV^Wb@kIIPPmaAKD*hn_;aD*Al7ZkgdPL3|YamN%~*(DH)9bBj`gu!LM+c
z%BwU1-_}bINV8TBp}!lgQYb^qcmmy9{56A+KE|maAd3Lw#Q+}S<!k<HdI77G!ZFX=
z7!*jgLkBysawMS^&|!I-V^1<6O5Wki%d0nB{%j!ShJJbc{=)optVlnn%J?Yoq~pTC
z`)O5#$Jj-nzcmD}4$f(BEBzM+Ks@hQo8IXI>Ej1|mu}jV0S@#b0z#C9G_S|_tq@dC
zsDx5i(sbi_4G#7h9o{bWgHk$H+HG1*B-s-jDyz+#P(lD6JgpUOQ}5-l5&+P_Uf6I8
zP-5MU!o-l}hag-3`>H=VY|Vd(Ht#`lg!Vkezg*5@c?v!|kot2R&JH}zXVvAKqm0*a
zyudoc!o>hS%PEKe@a$(}qJi(C%2O`39I{Mik2*$q7Tut0OfO_bj|-~@cm(xph0|u)
zg^(tZ`<pPQna%_UdqCSOVRR3Yv^0kb@BP>8CpqL>0YV}hUP&j^|BZ?l{hDIEWIsww
zWM|_%At1DMr58}_7yQu9^4KL4&24kfw`&ZSEMBi=)T<n_7l8H;6kX7#e+t{(AhbUT
zAGF4oS5EE}zt_{;olV)@8G}le15kg=NscR?H+tlNP{;cpbl?C4D?Cc^{97(zweDRK
zOoaUiCyz+vURBuI=OYac-<QhZT(@3Kwg!-L0?+xC$HZOY_fqs*e8|V}c*D-i(0H?g
z^Cj;9>0}YWXHIK1eSga6g=0n|9EyV3y2h(#2tLdt{YJ>I>7Y@*HPX|8WdQ!<oJNpW
zy(W-_y&1ulDTmDIX}^JsOd=T}))_IETJi^LoJ|&iMGZg3_&CpaAA+8P+do+Y61-R)
zqgyE>O08<N;Paf40zO;ms+zFTx~PKiLHzXA&NWV_kml&TJ=$_E@~U)d{d?V8uj#7q
z>RG#%Hu!&1U;jFPSK1CDERmkJKODk}{tyTLkb6KdKi-irNJ6v$EV{$v0qbvD`amUr
zU2Nry5T_Zf&xKawHgW~h-ctr;=cSa<`9(NXtT3$&#+VQ9@51$5bM|O|k2x(^jPv4n
zB|ZA^6@&IFFj(Ib|C4>&`qe$|*j^2%ZC!0%ApPM1V-uoYQ#ml;^~y(nERqz60w$!_
zzoh+A{ac3UAL}z6=W9Z?mk5wsW?wa@T$->_H-TGKm^i{e5~?%K0(M)YHB5GYPb9U`
z>8s3?i+VulyVU??;9jBD|1%yLc=i8(!o&YAVGNYO<6C(Vhgj}EqUC-Mg|kK#q%jy9
zX`(v+Rhvm4`@+d`9{f^>MfVkh@~>Brkt{5QU#Yo=S@a8P_dS3AuaeK`3k6uC=epiP
zVrj=pRJ2+Dvtsa~^NqBIhXw-^^(Kw5qs`bFs`i?`*|4{PcG{TjQGiTps8R{O+-ldg
zL$c4ow(1rC(nLb3BOrTDG8rNK;VCk>0jO`dRV%MT9r0{f-zE12sav!yf5!EQ)rSO}
z6}{eXaq#|D8>0Y=+*U7#zi&-<WgrC@St+*%TZQ_GLh2Tg+Q-#8|D)6}^yJlT&Z}0%
z^exVN#D$|O`!gvLAHh;cUFR(&$&WVnm!#sM)?_iuE!vWsVC&BI17w9XeDmAelzpvw
z(#SgAz3BM66qOADkWH)VP&iv%8nHe#q2lW1!vS|Nm>z)yYb?1O*J4XRN3@l%Vyn&s
z*zC|LS!G`aHX9>-{qBy+*|*tZTW=>OAROQ|{W*OmgWk94<e5+mFfb3SB9Y9shJP2x
z(>s_Vh!t&qF0=-xeAC+ItEJ)@U92)BkTr=&IIR}}w$ALY@pNx!Vo69Rd#^mv6`^cb
zHLj4)khW{I`m$9w-!wK>fZg!G;tjAq9gOd!nAuT&EY#O(f<efMnTo!J2JpS_cgA5K
zo9FM+-`F?pCZJ^^R~kqssdD}9!i*N>#tKpmV>}&?ftW?i4DMoa?fapFyS}$xYb~jG
zsQ1*@f^$+Xw}Ezh+*c}kDbD6P;jhlEj^Z{OB7MKd^;aaWY93*M>bWu|F8-r*e~H%y
zIS{wDIL-J38}EOLR2n8(tgIx;8g6Cp6uTdMFU8aJmejT20UOE0hO}H9Sb6c#J@S&g
zH~m!Xj^sGEaBNNosM0BTTPM+<G(2v4-4i^d*@>Fiyuz3mV1v?Wvt8rfRLjV7K-{=x
zM{afzt|;po*P_JBOdWrBEf7Wz!Ploi(OsPan(*9Pbgi%-YlO{lmE!^#P$24uSc$KM
z@ss1@pkqJg`@1L^l$w2OfMl1qG9lxuR<b228ELxk>c99isx}`r2xovA26w_qi1nRS
zqBe3BE3e-**NQ+1XRHPl(DNe`3&3T~onYTtDJf}TZPp_<ypu+WGXDTc4C)!ayOZ~4
zJ}G;IUK^R&HdYyju5#igKT(V)5fo$f@$_>rzoZXgBq*XHF__`*W>?<kDtp;)87tpN
z&wq*q=NvT8>!K$V%HWB>K;!rHk>R94HYmcGL)yJdKhZxikVH`KZ+5XK5RJ0}HQNv~
z?oy2=^hM}UnxD;s-M-9p*H8o|=f(3*C$I!q8R)rYr?62i?7Bq;J}?6hnHY_5iQFi)
zf0Lb^O~8EtcqnKtnu7EsDa%d-G=QyP6b%FgQA8SMdD=ye$O<f5jX5XW*7rx6wKZFU
zk;o=3tDx&!u)q2^0&I<!1;ejKqB-(Om#0`HWCv+Yy8rY)$jHjQNsrAGoS^qs0*Lsw
zApQbTuxhkQ**nntJ%0R|9Y^NgkA6z7{+WP1*P+d(_=|W%@TV%52H9S}NL;0DOE^w`
z@kwvEOup}Qt{iP#m%QW~=uL7bE@&YueMmOw3EXw<aeZMJ)GQI}O<o_h)A8k%Ni<Zb
z{P=wSF12Z<mNvS&$JD|^0G?TV5j7TkCq6hK<WMvrVUSLj=rq()WMZ99v1_-b)e1A;
z2iB)re|m)=4HDVt5UFwQx&9ZU33kW)@T2;HHlFxKFvY!XIq>t+lCNN_HLl|6h9G7-
z4tfFgpM6sG*FWg<nYZmA%~)j}Vpe6YHE{~;P(o0?560UDxmh|))`yb<Fa`PX36K;h
zo>!GNzR)INeNcyKB<5@`xaTeV`*(fJ_jQ10AbyvL_tYmz!^71wuu(je0yw4-(@BA1
zJM-z~#z-Qt&d|4*fel|-%`D6F9&0EMM~Yxo<2>D47E~%IDl-aJ+T+kc1R=r_MmdX=
zYej4~>|AIghJr7JtTfY}E(f;L&S=Kw;wZ@KR{bu=a-w&q(>7t#N)wFkFRGQn2awOY
zcLbiJuEs#_qG(IG;vwafYXP!la4<k*2cip}jv{K?ungBh@A}9L+g7R&i;6(ec3}K}
zp^KI$Jr8VlTgK+aR|Mg$51Qgn7LibLz~Zz$UIXvl{v5}ub?{JxmA$`R!6uI|EZsF{
z;cXhc658a9$(<(8%l5vOd6wUGg{a{c9ta!RtgAR~^;(xN6h))#uhiF8jwG5P^SpN-
zwS_&cRz<J2C0?ExRP$8#zTGwFj;GRR2WP_Pu->BYNw{5a`@q0fj(2nw;Eo-EZ(2oN
z4PA}!*tDjZ!I?U+rhYA8S?}{yUqR7ee1$W?TMxgp{T12+=Z?Ju_iYSYRb}x~G$gO`
z{u5m!>^FqPzf{SGG}GA0);tZ6(aykofxq+E@|;dzB{X7a6^sEb5^`X(Y9=52p@;Ip
zQy&9VT?-N)O|T7rB39!@M{ovs1P+a)a42hGiCNEGvR0ng<wfYD{e*%?s0ket_b#eA
zW4)IU2ymOTcUKxQX!9f`9-iP5X%pgM=d=@A4Aw&*Kbd1sc@cBd-3S>z{nu$l*@=E~
zka~vJI6_?yj2j=_skN0tg4IV66-2haS9p^$axUI!E}(KD+f`)3`v=q@YbOiypC++v
zxUaNFdsSqe#fl(8hK1nc#Br3UTGz{aw9%gL%1TwR%+dVgYDnu!(t!6uKsF*_bY%Zg
zmg}E8cpM@Jw^Yv|kfV-YtyaVOXlCRNK?7YU7Ir6a>WzO6H+te*)jH?Z;lA|x@W8}`
zYtC23wF4(N1VJaUs=oM#twdt|%*IHMNj8ukkjN>kZJKjX8CvLqySUtn`+LS<bj=P9
zwV8$7>pVkAfkW{DwHUw=Ac<oSd5Prd9n0N*IB7_M8l)M!f}=E#BW7N!dxlr~E{tNq
zf!VG@0moEW;^O~X0t7Q6Iu6x8PZ106fXbftgZWTdS)kH~xT3ya{%;8psX9{U^?sRy
z4%EE8Y9Gk|_x%+GLI7MOon5f$-JBHYKhJ~w<(=1;kqbgSQYxb&R0Jo7a>$vkiPgBt
zfI}=2LiAWs2Ht8wTXuKSmu1Q&^}mId!z|}z{!_EYS=Ti`CIU&fY&hia^sRe8U>B8q
z{vRRw^o1iVZ+O3OM&)<zNBnx_|0H_y|3!Knytm#Jie>^QvnIGfMCDGJ_}@t|pp$JN
z#Rcj^g+|0qMMKI@Wk}v+?i~SYo}<cffO|U46hZgY|J$7+%v71VGbYc4cJD|wu<eEU
zLqcx}S4N#^eeO%}?qUieA=bKy{J1Ly0A2tZb{hzZ%-ujy`LF)hUg%Sp9k$WqGw%8!
z7~N|UNi)k-hU7}yHYx%O>{^=rXWl6|p&XFR7oTQhX6!<e0E&|iEEdLEKU19QeWzsP
z*)W&xWi4VKzWoqb58HRaf9B#8aQjr#bEb#Bq}yQ(z(6fdVgdk568&?pPkSI6Qzy~u
zS;RfDS*dG>k8r*AkGI-74)r8QOpN9|K~^qScr@C>R~9zAL?Shi9&1yd8^CVu%!>L^
z7pIz)KH7tc5=t!n%zX`C7&FmK%(ow?G`ohy@wzf(Z_yuL87H98XJv-GzO$d?lrTKp
z|0SBk7wu;aaj$vf2=XG#6zDKDC&Bfzjf?l{Uzv5)f4&4@+`W(1<OLorABSpLsq;o`
zHLwXG?Y2-nz|HrCcz{7VnZcd`Bsgp6!?N{L&u_Wx9_H5Ii96+KzJ-bl9r?;BQwdDi
z9kOp|EfYAt;eCUdx7dU{)YAq%y&$$UY7I&A#c1L}J?!#X^^r==E@vNvNWBwuOa;2n
zA>Bx6(lv&WwI(dE0l?!?`B0`F>$gf@vu74w5Yxs+6%Za5fb0m?!?ky*?ng~mBGe~2
zRe0YnFa6xPl+6?|`LCp-ss@(ruY7eo`SO^}eE&Hdg{_n~DVL{!wWJkgI$a><1E-ys
z<9a$KMu_o*)qX6ASA6PQg=;Hj4Y<bg_2)=2zr~6DKksw;H|xCvERJqD#hfE~F4(%3
z%JsGsfK@HC1}z;qstTOFfh}h4)*=fKN9nE7d2zPw4;<P{KyukE#=#+y96#?Ubf<ZN
zMatJVIh0Gkv1hMcuX}uGiT#wr((q5jGw)9?+(sipZed69p)`Oh{UMlh6nKtBH>C+d
ztzg&!+rZ8S{={@o8@JZAnpAQBTszsS{*%RIiR1i9!$v)M5%p8dw=NO~M+mr+t{k$@
RteNc?=-#_sdGqn}{|lOu8_ECx

literal 0
HcmV?d00001

diff --git a/contrib/webhook-teams-service/host.json b/contrib/webhook-teams-service/host.json
new file mode 100644
index 000000000..05291ed43
--- /dev/null
+++ b/contrib/webhook-teams-service/host.json
@@ -0,0 +1,15 @@
+{
+  "version": "2.0",
+  "logging": {
+    "applicationInsights": {
+      "samplingSettings": {
+        "isEnabled": true,
+        "excludedTypes": "Request"
+      }
+    }
+  },
+  "extensionBundle": {
+    "id": "Microsoft.Azure.Functions.ExtensionBundle",
+    "version": "[1.*, 2.0.0)"
+  }
+}
\ No newline at end of file
diff --git a/contrib/webhook-teams-service/local.settings.json b/contrib/webhook-teams-service/local.settings.json
new file mode 100644
index 000000000..daacb2832
--- /dev/null
+++ b/contrib/webhook-teams-service/local.settings.json
@@ -0,0 +1,6 @@
+{
+  "IsEncrypted": false,
+  "Values": {
+    "FUNCTIONS_WORKER_RUNTIME": "python"
+  }
+}
diff --git a/contrib/webhook-teams-service/mypy.ini b/contrib/webhook-teams-service/mypy.ini
new file mode 100644
index 000000000..b4a77a9d8
--- /dev/null
+++ b/contrib/webhook-teams-service/mypy.ini
@@ -0,0 +1,14 @@
+[mypy]
+disallow_untyped_defs = True
+follow_imports = silent
+check_untyped_defs = True
+disallow_any_generics = True
+no_implicit_reexport = True
+strict_optional = True
+warn_redundant_casts = True
+warn_return_any = True
+warn_unused_configs = True
+warn_unused_ignores = True
+
+[mypy-azure.*]
+ignore_missing_imports = True
diff --git a/contrib/webhook-teams-service/requirements.txt b/contrib/webhook-teams-service/requirements.txt
new file mode 100644
index 000000000..4309123a6
--- /dev/null
+++ b/contrib/webhook-teams-service/requirements.txt
@@ -0,0 +1,4 @@
+# Do not include azure-functions-worker as it may conflict with the Azure Functions platform
+
+azure-functions
+aiohttp
\ No newline at end of file
diff --git a/contrib/webhook-teams-service/webhook/__init__.py b/contrib/webhook-teams-service/webhook/__init__.py
new file mode 100644
index 000000000..0dced4afe
--- /dev/null
+++ b/contrib/webhook-teams-service/webhook/__init__.py
@@ -0,0 +1,75 @@
+#!/usr/bin/env python
+#
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+#
+
+
+import hmac
+import json
+import logging
+import os
+from hashlib import sha512
+from typing import Any, Dict
+
+import aiohttp
+import azure.functions as func
+
+
+def code_block(data: str) -> str:
+    data = data.replace("`", "``")
+    return "\n```\n%s\n```\n" % data
+
+
+async def send_message(req: func.HttpRequest) -> bool:
+    data = req.get_json()
+    teams_url = os.environ.get("TEAMS_URL")
+    if teams_url is None:
+        raise Exception("missing TEAMS_URL")
+
+    message: Dict[str, Any] = {
+        "@type": "MessageCard",
+        "@context": "https://schema.org/extensions",
+        "summary": data["instance_name"],
+        "sections": [
+            {
+                "facts": [
+                    {"name": "instance", "value": data["instance_name"]},
+                    {"name": "event type", "value": data["event_type"]},
+                ]
+            },
+            {"text": code_block(json.dumps(data["event"], sort_keys=True))},
+        ],
+    }
+    async with aiohttp.ClientSession() as client:
+        async with client.post(teams_url, json=message) as response:
+            return response.ok
+
+
+def verify(req: func.HttpRequest) -> bool:
+    request_hmac = req.headers.get("X-Onefuzz-Digest")
+    if request_hmac is None:
+        raise Exception("missing X-Onefuzz-Digest")
+
+    hmac_token = os.environ.get("HMAC_TOKEN")
+    if hmac_token is None:
+        raise Exception("missing HMAC_TOKEN")
+
+    digest = hmac.new(
+        hmac_token.encode(), msg=req.get_body(), digestmod=sha512
+    ).hexdigest()
+    if digest != request_hmac:
+        logging.error("invalid hmac")
+        return False
+
+    return True
+
+
+async def main(req: func.HttpRequest) -> func.HttpResponse:
+    if not verify(req):
+        return func.HttpResponse("no thanks")
+
+    if await send_message(req):
+        return func.HttpResponse("unable to send message")
+
+    return func.HttpResponse("thanks")
diff --git a/contrib/webhook-teams-service/webhook/function.json b/contrib/webhook-teams-service/webhook/function.json
new file mode 100644
index 000000000..ad312dfe1
--- /dev/null
+++ b/contrib/webhook-teams-service/webhook/function.json
@@ -0,0 +1,19 @@
+{
+  "scriptFile": "__init__.py",
+  "bindings": [
+    {
+      "authLevel": "function",
+      "type": "httpTrigger",
+      "direction": "in",
+      "name": "req",
+      "methods": [
+        "post"
+      ]
+    },
+    {
+      "type": "http",
+      "direction": "out",
+      "name": "$return"
+    }
+  ]
+}
\ No newline at end of file