dokploy/apps/dokploy/pages/api/stripe/webhook.ts

import { buffer } from "node:stream/consumers";
import { db } from "@/server/db";
import { admins, server } from "@/server/db/schema";
import { findAdminById } from "@dokploy/server";
import { asc, eq } from "drizzle-orm";
import type { NextApiRequest, NextApiResponse } from "next";
import Stripe from "stripe";

const endpointSecret = process.env.STRIPE_WEBHOOK_SECRET!;

export const config = {
	api: {
		bodyParser: false,
	},
};

export default async function handler(
	req: NextApiRequest,
	res: NextApiResponse,
) {
	if (!endpointSecret) {
		return res.status(400).send("Webhook Error: Missing Stripe Secret Key");
	}
	const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!, {
		apiVersion: "2024-09-30.acacia",
		maxNetworkRetries: 3,
	});

	const buf = await buffer(req);
	const sig = req.headers["stripe-signature"] as string;

	let event: Stripe.Event;

	try {
		event = stripe.webhooks.constructEvent(buf, sig, endpointSecret);
	} catch (err) {
		console.error(
			"Webhook signature verification failed.",
			err instanceof Error ? err.message : err,
		);
		return res.status(400).send("Webhook Error: ");
	}

	const webhooksAllowed = [
		"customer.subscription.created",
		"customer.subscription.deleted",
		"customer.subscription.updated",
		"invoice.payment_succeeded",
		"invoice.payment_failed",
		"customer.deleted",
		"checkout.session.completed",
	];

	if (!webhooksAllowed.includes(event.type)) {
		return res.status(400).send("Webhook Error: Invalid Event Type");
	}

	switch (event.type) {
		case "checkout.session.completed": {
			const session = event.data.object as Stripe.Checkout.Session;
			const adminId = session?.metadata?.adminId as string;

			const subscription = await stripe.subscriptions.retrieve(
				session.subscription as string,
			);
			await db
				.update(admins)
				.set({
					stripeCustomerId: session.customer as string,
					stripeSubscriptionId: session.subscription as string,
					serversQuantity: subscription?.items?.data?.[0]?.quantity ?? 0,
				})
				.where(eq(admins.adminId, adminId))
				.returning();

			const admin = await findAdminById(adminId);
			if (!admin) {
				return res.status(400).send("Webhook Error: Admin not found");
			}
			const newServersQuantity = admin.serversQuantity;
			await updateServersBasedOnQuantity(admin.adminId, newServersQuantity);
			break;
		}
		case "customer.subscription.created": {
			const newSubscription = event.data.object as Stripe.Subscription;

			await db
				.update(admins)
				.set({
					stripeSubscriptionId: newSubscription.id,
					serversQuantity: 0,
					stripeCustomerId: newSubscription.customer as string,
				})
				.where(eq(admins.stripeCustomerId, newSubscription.customer as string))
				.returning();

			break;
		}

		case "customer.subscription.deleted": {
			const newSubscription = event.data.object as Stripe.Subscription;

			await db
				.update(admins)
				.set({
					stripeSubscriptionId: null,
					serversQuantity: 0,
				})
				.where(eq(admins.stripeCustomerId, newSubscription.customer as string));

			const admin = await findAdminByStripeCustomerId(
				newSubscription.customer as string,
			);

			if (!admin) {
				return res.status(400).send("Webhook Error: Admin not found");
			}

			await disableServers(admin.adminId);
			break;
		}
		case "customer.subscription.updated": {
			const newSubscription = event.data.object as Stripe.Subscription;
			await db
				.update(admins)
				.set({
					serversQuantity: newSubscription?.items?.data?.[0]?.quantity ?? 0,
				})
				.where(eq(admins.stripeCustomerId, newSubscription.customer as string));

			const admin = await findAdminByStripeCustomerId(
				newSubscription.customer as string,
			);

			if (!admin) {
				return res.status(400).send("Webhook Error: Admin not found");
			}

			const newServersQuantity = admin.serversQuantity;
			await updateServersBasedOnQuantity(admin.adminId, newServersQuantity);

			break;
		}
		case "invoice.payment_succeeded": {
			const newInvoice = event.data.object as Stripe.Invoice;

			const suscription = await stripe.subscriptions.retrieve(
				newInvoice.subscription as string,
			);

			await db
				.update(admins)
				.set({
					serversQuantity: suscription?.items?.data?.[0]?.quantity ?? 0,
				})
				.where(eq(admins.stripeCustomerId, suscription.customer as string));

			const admin = await findAdminByStripeCustomerId(
				suscription.customer as string,
			);

			if (!admin) {
				return res.status(400).send("Webhook Error: Admin not found");
			}
			const newServersQuantity = admin.serversQuantity;
			await updateServersBasedOnQuantity(admin.adminId, newServersQuantity);
			break;
		}
		case "invoice.payment_failed": {
			const newInvoice = event.data.object as Stripe.Invoice;
			await db
				.update(admins)
				.set({
					serversQuantity: 0,
				})
				.where(eq(admins.stripeCustomerId, newInvoice.customer as string));

			const admin = await findAdminByStripeCustomerId(
				newInvoice.customer as string,
			);

			if (!admin) {
				return res.status(400).send("Webhook Error: Admin not found");
			}

			await disableServers(admin.adminId);
			break;
		}

		case "customer.deleted": {
			const customer = event.data.object as Stripe.Customer;

			const admin = await findAdminByStripeCustomerId(customer.id);
			if (!admin) {
				return res.status(400).send("Webhook Error: Admin not found");
			}

			await disableServers(admin.adminId);
			await db
				.update(admins)
				.set({
					stripeCustomerId: null,
					stripeSubscriptionId: null,
					serversQuantity: 0,
				})
				.where(eq(admins.stripeCustomerId, customer.id));

			break;
		}
		default:
			console.log(`Unhandled event type: ${event.type}`);
	}

	return res.status(200).json({ received: true });
}

const disableServers = async (adminId: string) => {
	await db
		.update(server)
		.set({
			serverStatus: "inactive",
		})
		.where(eq(server.adminId, adminId));
};

const findAdminByStripeCustomerId = async (stripeCustomerId: string) => {
	const admin = db.query.admins.findFirst({
		where: eq(admins.stripeCustomerId, stripeCustomerId),
	});
	return admin;
};

const activateServer = async (serverId: string) => {
	await db
		.update(server)
		.set({ serverStatus: "active" })
		.where(eq(server.serverId, serverId));
};

const deactivateServer = async (serverId: string) => {
	await db
		.update(server)
		.set({ serverStatus: "inactive" })
		.where(eq(server.serverId, serverId));
};

export const findServersByAdminIdSorted = async (adminId: string) => {
	const servers = await db.query.server.findMany({
		where: eq(server.adminId, adminId),
		orderBy: asc(server.createdAt),
	});

	return servers;
};
export const updateServersBasedOnQuantity = async (
	adminId: string,
	newServersQuantity: number,
) => {
	const servers = await findServersByAdminIdSorted(adminId);

	if (servers.length > newServersQuantity) {
		for (const [index, server] of servers.entries()) {
			if (index < newServersQuantity) {
				await activateServer(server.serverId);
			} else {
				await deactivateServer(server.serverId);
			}
		}
	} else {
		for (const server of servers) {
			await activateServer(server.serverId);
		}
	}
};