AFFiNE-Mirror/packages/backend/server/src/modules/payment/webhook.ts

import type { RawBodyRequest } from '@nestjs/common';
import {
  Controller,
  Get,
  Logger,
  NotAcceptableException,
  Post,
  Req,
} from '@nestjs/common';
import { EventEmitter2 } from '@nestjs/event-emitter';
import type { User } from '@prisma/client';
import type { Request } from 'express';
import Stripe from 'stripe';

import { Config } from '../../config';
import { PrismaService } from '../../prisma';
import { Auth, CurrentUser } from '../auth';

@Controller('/api/stripe')
export class StripeWebhook {
  private readonly config: Config['payment'];
  private readonly logger = new Logger(StripeWebhook.name);

  constructor(
    config: Config,
    private readonly stripe: Stripe,
    private readonly event: EventEmitter2,
    private readonly db: PrismaService
  ) {
    this.config = config.payment;
  }

  // just for test
  @Auth()
  @Get('/success')
  async handleSuccess(@CurrentUser() user: User) {
    return this.db.userSubscription.findUnique({
      where: {
        userId: user.id,
      },
    });
  }

  @Post('/webhook')
  async handleWebhook(@Req() req: RawBodyRequest<Request>) {
    // Check if webhook signing is configured.
    if (!this.config.stripe.keys.webhookKey) {
      this.logger.error(
        'Stripe Webhook key is not set, but a webhook was received.'
      );
      throw new NotAcceptableException();
    }

    // Retrieve the event by verifying the signature using the raw body and secret.
    const signature = req.headers['stripe-signature'];
    try {
      const event = this.stripe.webhooks.constructEvent(
        req.rawBody ?? '',
        signature ?? '',
        this.config.stripe.keys.webhookKey
      );

      this.logger.debug(
        `[${event.id}] Stripe Webhook {${event.type}} received.`
      );

      // handle duplicated events?
      // see https://stripe.com/docs/webhooks#handle-duplicate-events
      await this.event.emitAsync(event.type, event.data.object);
    } catch (err) {
      this.logger.error('Stripe Webhook error', err);
      throw new NotAcceptableException();
    }
  }
}