DashCaddy.net all files

src/app/api/webhooks/stripe/route.ts

@@ -0,0 +1,99 @@
+import { NextRequest, NextResponse } from "next/server";
+import Stripe from "stripe";
+
+const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!, {
+  apiVersion: "2026-03-25.dahlia",
+});
+
+const webhookSecret = process.env.STRIPE_WEBHOOK_SECRET!;
+
+export async function POST(request: NextRequest) {
+  const body = await request.text();
+  const signature = request.headers.get("stripe-signature");
+
+  if (!signature) {
+    return NextResponse.json(
+      { error: "Missing stripe-signature header" },
+      { status: 400 }
+    );
+  }
+
+  let event: Stripe.Event;
+
+  try {
+    event = stripe.webhooks.constructEvent(body, signature, webhookSecret);
+  } catch (err) {
+    const message = err instanceof Error ? err.message : "Unknown error";
+    console.error(`Webhook signature verification failed: ${message}`);
+    return NextResponse.json({ error: message }, { status: 400 });
+  }
+
+  try {
+    switch (event.type) {
+      case "checkout.session.completed": {
+        const session = event.data.object as Stripe.Checkout.Session;
+        console.log("Checkout completed:", {
+          sessionId: session.id,
+          customerEmail: session.customer_email,
+          plan: session.metadata?.plan,
+          subscriptionId: session.subscription,
+        });
+
+        // TODO: Generate and deliver license key to customer
+        // This is where you'd:
+        // 1. Generate a DC-XXXXX-XXXXX-XXXXX-XXXXX-XXXXX license code
+        // 2. Store it in your database
+        // 3. Email it to the customer
+        // 4. Associate it with the Stripe subscription ID
+
+        break;
+      }
+
+      case "customer.subscription.updated": {
+        const subscription = event.data.object as Stripe.Subscription;
+        console.log("Subscription updated:", {
+          subscriptionId: subscription.id,
+          status: subscription.status,
+        });
+
+        // TODO: Update license expiration based on subscription status
+        break;
+      }
+
+      case "customer.subscription.deleted": {
+        const subscription = event.data.object as Stripe.Subscription;
+        console.log("Subscription cancelled:", {
+          subscriptionId: subscription.id,
+          status: subscription.status,
+        });
+
+        // TODO: Deactivate/expire the license key
+        // The DashCaddy instance will gracefully downgrade to free tier
+        break;
+      }
+
+      case "invoice.payment_failed": {
+        const invoice = event.data.object as Stripe.Invoice;
+        console.log("Payment failed:", {
+          invoiceId: invoice.id,
+          customerEmail: invoice.customer_email,
+        });
+
+        // TODO: Notify customer about failed payment
+        // Consider a grace period before deactivating license
+        break;
+      }
+
+      default:
+        console.log(`Unhandled event type: ${event.type}`);
+    }
+
+    return NextResponse.json({ received: true });
+  } catch (error) {
+    console.error("Webhook handler error:", error);
+    return NextResponse.json(
+      { error: "Webhook handler failed" },
+      { status: 500 }
+    );
+  }
+}