Webhooks и интеграции

// app/api/webhooks/stripe/route.ts
import Stripe from 'stripe';

const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!);

export async function POST(request: Request) {
    const body = await request.text();
    const signature = request.headers.get('stripe-signature')!;

    let event: Stripe.Event;

    try {
        event = stripe.webhooks.constructEvent(
            body,
            signature,
            process.env.STRIPE_WEBHOOK_SECRET!
        );
    } catch (error) {
        return Response.json({ error: 'Invalid signature' }, { status: 401 });
    }

    switch (event.type) {
        case 'payment_intent.succeeded':
            await handlePaymentSuccess(event.data.object);
            break;
        case 'payment_intent.failed':
            await handlePaymentFailure(event.data.object);
            break;
    }

    return Response.json({ received: true });
}

import crypto from 'crypto';

export async function POST(request: Request) {
    const body = await request.text();
    const signature = request.headers.get('x-signature');

    const expected = crypto
        .createHmac('sha256', process.env.WEBHOOK_SECRET!)
        .update(body)
        .digest('hex');

    if (signature !== expected) {
        return Response.json({ error: 'Invalid signature' }, { status: 401 });
    }

    const event = JSON.parse(body);
    await handleEvent(event);

    return Response.json({ received: true });
}

const expected = crypto
    .createHmac('sha256', process.env.WEBHOOK_SECRET!)
    .update(body)
    .digest('hex');

const isValid =
    signature &&
    signature.length === expected.length &&
    crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected));

if (!isValid) {
    return Response.json({ error: 'Invalid signature' }, { status: 401 });
}

export async function POST(request: Request) {
    const body = await request.text();
    const signature = request.headers.get('x-signature');

    if (!verifySignature(body, signature)) {
        return Response.json({ error: 'Invalid signature' }, { status: 401 });
    }

    const event = JSON.parse(body);

    const exists = await db.webhookEvent.findUnique({
        where: { eventId: event.id },
    });

    if (exists) {
        return Response.json({ received: true, duplicate: true });
    }

    await db.webhookEvent.create({
        data: { eventId: event.id, type: event.type, payload: event },
    });

    await handleEvent(event);

    return Response.json({ received: true });
}

export async function POST(request: Request) {
    const body = await request.text();

    if (!verifySignature(body, request.headers.get('x-signature'))) {
        return Response.json({ error: 'Invalid signature' }, { status: 401 });
    }

    const event = JSON.parse(body);

    await queue.enqueue('process-webhook', event);

    return Response.json({ received: true });
}

async function processWebhook(event: WebhookEvent) {
    switch (event.type) {
        case 'user.created':
            await createUser(event.data);
            break;
        // ...
    }
}

await db.webhookLog.create({
    data: {
        provider: 'stripe',
        eventId: event.id,
        type: event.type,
        payload: event,
        receivedAt: new Date(),
    },
});

export async function POST(request: Request) {
    const update = await request.json();

    if (update.message) {
        const chatId = update.message.chat.id;
        const text = update.message.text;

        await sendTelegramMessage(chatId, `Вы сказали: ${text}`);
    }

    return Response.json({ ok: true });
}

import crypto from 'crypto';

export async function POST(request: Request) {
    const body = await request.text();
    const signature = request.headers.get('x-hub-signature-256');

    const expected = 'sha256=' + crypto
        .createHmac('sha256', process.env.GITHUB_WEBHOOK_SECRET!)
        .update(body)
        .digest('hex');

    if (signature !== expected) {
        return Response.json({ error: 'Invalid signature' }, { status: 401 });
    }

    const event = JSON.parse(body);
    const eventType = request.headers.get('x-github-event');

    if (eventType === 'push') {
        await deployLatest();
    }

    return Response.json({ ok: true });
}

npx ngrok http 3000

stripe listen --forward-to localhost:3000/api/webhooks/stripe