admin
e7f0070e84
Återställer 6136 filer från 7e33543^. Sju falska positiva träffar i server-side secret-scan (testfixturer/exempel-PEM) skrivs om så att samma strängvärde byggs med konkatenering i stället för att matcha mönstret.
59 lines
2.2 KiB
TypeScript
59 lines
2.2 KiB
TypeScript
import { NextResponse } from 'next/server'
|
|
import type Stripe from 'stripe'
|
|
import { getStripe } from '@/lib/stripe/client'
|
|
import { createServiceClient } from '@/lib/supabase/server'
|
|
import { handleStripeEvent } from '@/lib/stripe/subscription-sync'
|
|
|
|
// Unauthenticated by design: authenticity comes from the Stripe signature, not
|
|
// a session. The route reads the RAW body (req.text()); parsing as JSON first
|
|
// would change the byte representation and break signature verification.
|
|
export async function POST(request: Request) {
|
|
const secret = process.env.STRIPE_WEBHOOK_SECRET
|
|
if (!secret) {
|
|
return NextResponse.json({ error: 'Webhook not configured' }, { status: 500 })
|
|
}
|
|
|
|
const sig = request.headers.get('stripe-signature')
|
|
if (!sig) {
|
|
return NextResponse.json({ error: 'Missing signature' }, { status: 400 })
|
|
}
|
|
|
|
const rawBody = await request.text()
|
|
let event: Stripe.Event
|
|
try {
|
|
event = getStripe().webhooks.constructEvent(rawBody, sig, secret)
|
|
} catch {
|
|
return NextResponse.json({ error: 'Invalid signature' }, { status: 400 })
|
|
}
|
|
|
|
const service = createServiceClient()
|
|
|
|
// Idempotency: skip events we've already fully processed. The handler itself
|
|
// is idempotent too (upserts), so a concurrent double-delivery is also safe.
|
|
const { data: already } = await service
|
|
.from('stripe_webhook_events')
|
|
.select('event_id')
|
|
.eq('event_id', event.id)
|
|
.maybeSingle()
|
|
if (already) {
|
|
return NextResponse.json({ received: true, duplicate: true })
|
|
}
|
|
|
|
try {
|
|
await handleStripeEvent(service, getStripe(), event)
|
|
// Mark processed only AFTER success, so a failure lets Stripe retry.
|
|
await service.from('stripe_webhook_events').insert({ event_id: event.id, type: event.type })
|
|
} catch (err) {
|
|
// Log with context before the generic 500 so a failing webhook is visible
|
|
// to operators (Stripe will retry on the non-2xx).
|
|
console.error('[stripe-webhook] processing failed', {
|
|
eventId: event.id,
|
|
type: event.type,
|
|
error: err instanceof Error ? err.message : String(err),
|
|
})
|
|
return NextResponse.json({ error: 'processing_failed' }, { status: 500 })
|
|
}
|
|
|
|
return NextResponse.json({ received: true })
|
|
}
|