feat(core): payment backend

packages/backend/server/src/modules/payment/webhook.ts

@@ -0,0 +1,75 @@
+import type { RawBodyRequest } from '@nestjs/common';
+import {
+  Controller,
+  Get,
+  Logger,
+  NotAcceptableException,
+  Post,
+  Req,
+} from '@nestjs/common';
+import { EventEmitter2 } from '@nestjs/event-emitter';
+import type { User } from '@prisma/client';
+import type { Request } from 'express';
+import Stripe from 'stripe';
+
+import { Config } from '../../config';
+import { PrismaService } from '../../prisma';
+import { Auth, CurrentUser } from '../auth';
+
+@Controller('/api/stripe')
+export class StripeWebhook {
+  private readonly config: Config['payment'];
+  private readonly logger = new Logger(StripeWebhook.name);
+
+  constructor(
+    config: Config,
+    private readonly stripe: Stripe,
+    private readonly event: EventEmitter2,
+    private readonly db: PrismaService
+  ) {
+    this.config = config.payment;
+  }
+
+  // just for test
+  @Auth()
+  @Get('/success')
+  async handleSuccess(@CurrentUser() user: User) {
+    return this.db.userSubscription.findUnique({
+      where: {
+        userId: user.id,
+      },
+    });
+  }
+
+  @Post('/webhook')
+  async handleWebhook(@Req() req: RawBodyRequest<Request>) {
+    // Check if webhook signing is configured.
+    if (!this.config.stripe.keys.webhookKey) {
+      this.logger.error(
+        'Stripe Webhook key is not set, but a webhook was received.'
+      );
+      throw new NotAcceptableException();
+    }
+
+    // Retrieve the event by verifying the signature using the raw body and secret.
+    const signature = req.headers['stripe-signature'];
+    try {
+      const event = this.stripe.webhooks.constructEvent(
+        req.rawBody ?? '',
+        signature ?? '',
+        this.config.stripe.keys.webhookKey
+      );
+
+      this.logger.debug(
+        `[${event.id}] Stripe Webhook {${event.type}} received.`
+      );
+
+      // handle duplicated events?
+      // see https://stripe.com/docs/webhooks#handle-duplicate-events
+      await this.event.emitAsync(event.type, event.data.object);
+    } catch (err) {
+      this.logger.error('Stripe Webhook error', err);
+      throw new NotAcceptableException();
+    }
+  }
+}