dokploy/apps/dokploy/pages/api/stripe/webhook.ts

import { buffer } from "node:stream/consumers";
import { findUserById, type Server } from "@dokploy/server";
import { asc, eq } from "drizzle-orm";
import type { NextApiRequest, NextApiResponse } from "next";
import Stripe from "stripe";
import { db } from "@/server/db";
import { organization, server, user } from "@/server/db/schema";

const endpointSecret = process.env.STRIPE_WEBHOOK_SECRET!;

export const config = {
	api: {
		bodyParser: false,
	},
};

export default async function handler(
	req: NextApiRequest,
	res: NextApiResponse,
) {
	if (!endpointSecret) {
		return res.status(400).send("Webhook Error: Missing Stripe Secret Key");
	}
	const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!, {
		apiVersion: "2024-09-30.acacia",
		maxNetworkRetries: 3,
	});

	const buf = await buffer(req);
	const sig = req.headers["stripe-signature"] as string;

	let event: Stripe.Event;

	try {
		event = stripe.webhooks.constructEvent(buf, sig, endpointSecret);
	} catch (err) {
		console.error(
			"Webhook signature verification failed.",
			err instanceof Error ? err.message : err,
		);
		return res.status(400).send("Webhook Error: ");
	}

	const webhooksAllowed = [
		"customer.subscription.created",
		"customer.subscription.deleted",
		"customer.subscription.updated",
		"invoice.payment_succeeded",
		"invoice.payment_failed",
		"customer.deleted",
		"checkout.session.completed",
	];

	if (!webhooksAllowed.includes(event.type)) {
		return res.status(400).send("Webhook Error: Invalid Event Type");
	}

	switch (event.type) {
		case "checkout.session.completed": {
			const session = event.data.object as Stripe.Checkout.Session;
			const adminId = session?.metadata?.adminId as string;

			const subscription = await stripe.subscriptions.retrieve(
				session.subscription as string,
			);
			await db
				.update(user)
				.set({
					stripeCustomerId: session.customer as string,
					stripeSubscriptionId: session.subscription as string,
					serversQuantity: subscription?.items?.data?.[0]?.quantity ?? 0,
				})
				.where(eq(user.id, adminId))
				.returning();

			const admin = await findUserById(adminId);
			if (!admin) {
				return res.status(400).send("Webhook Error: Admin not found");
			}
			const newServersQuantity = admin.serversQuantity;
			await updateServersBasedOnQuantity(admin.id, newServersQuantity);
			break;
		}
		case "customer.subscription.created": {
			const newSubscription = event.data.object as Stripe.Subscription;

			await db
				.update(user)
				.set({
					stripeSubscriptionId: newSubscription.id,
					stripeCustomerId: newSubscription.customer as string,
				})
				.where(eq(user.stripeCustomerId, newSubscription.customer as string))
				.returning();

			break;
		}

		case "customer.subscription.deleted": {
			const newSubscription = event.data.object as Stripe.Subscription;

			await db
				.update(user)
				.set({
					stripeSubscriptionId: null,
					serversQuantity: 0,
				})
				.where(eq(user.stripeCustomerId, newSubscription.customer as string));

			const admin = await findUserByStripeCustomerId(
				newSubscription.customer as string,
			);

			if (!admin) {
				return res.status(400).send("Webhook Error: Admin not found");
			}

			await disableServers(admin.id);
			break;
		}
		case "customer.subscription.updated": {
			const newSubscription = event.data.object as Stripe.Subscription;

			const admin = await findUserByStripeCustomerId(
				newSubscription.customer as string,
			);

			if (!admin) {
				return res.status(400).send("Webhook Error: Admin not found");
			}

			if (newSubscription.status === "active") {
				await db
					.update(user)
					.set({
						serversQuantity: newSubscription?.items?.data?.[0]?.quantity ?? 0,
					})
					.where(eq(user.stripeCustomerId, newSubscription.customer as string));

				const newServersQuantity = admin.serversQuantity;
				await updateServersBasedOnQuantity(admin.id, newServersQuantity);
			} else {
				await disableServers(admin.id);
				await db
					.update(user)
					.set({ serversQuantity: 0 })
					.where(eq(user.stripeCustomerId, newSubscription.customer as string));
			}

			break;
		}
		case "invoice.payment_succeeded": {
			const newInvoice = event.data.object as Stripe.Invoice;

			const suscription = await stripe.subscriptions.retrieve(
				newInvoice.subscription as string,
			);

			if (suscription.status !== "active") {
				console.log(
					`Skipping invoice.payment_succeeded for subscription ${suscription.id} with status ${suscription.status}`,
				);
				break;
			}

			await db
				.update(user)
				.set({
					serversQuantity: suscription?.items?.data?.[0]?.quantity ?? 0,
				})
				.where(eq(user.stripeCustomerId, suscription.customer as string));

			const admin = await findUserByStripeCustomerId(
				suscription.customer as string,
			);

			if (!admin) {
				return res.status(400).send("Webhook Error: Admin not found");
			}
			const newServersQuantity = admin.serversQuantity;
			await updateServersBasedOnQuantity(admin.id, newServersQuantity);
			break;
		}
		case "invoice.payment_failed": {
			const newInvoice = event.data.object as Stripe.Invoice;

			const subscription = await stripe.subscriptions.retrieve(
				newInvoice.subscription as string,
			);

			if (subscription.status !== "active") {
				const admin = await findUserByStripeCustomerId(
					newInvoice.customer as string,
				);

				if (!admin) {
					return res.status(400).send("Webhook Error: Admin not found");
				}
				await db
					.update(user)
					.set({
						serversQuantity: 0,
					})
					.where(eq(user.stripeCustomerId, newInvoice.customer as string));

				await disableServers(admin.id);
			}

			break;
		}

		case "customer.deleted": {
			const customer = event.data.object as Stripe.Customer;

			const admin = await findUserByStripeCustomerId(customer.id);
			if (!admin) {
				return res.status(400).send("Webhook Error: Admin not found");
			}

			await disableServers(admin.id);
			await db
				.update(user)
				.set({
					stripeCustomerId: null,
					stripeSubscriptionId: null,
					serversQuantity: 0,
				})
				.where(eq(user.stripeCustomerId, customer.id));

			break;
		}
		default:
			console.log(`Unhandled event type: ${event.type}`);
	}

	return res.status(200).json({ received: true });
}

const disableServers = async (userId: string) => {
	const organizations = await db.query.organization.findMany({
		where: eq(organization.ownerId, userId),
	});

	for (const org of organizations) {
		await db
			.update(server)
			.set({
				serverStatus: "inactive",
			})
			.where(eq(server.organizationId, org.id));
	}
};

const findUserByStripeCustomerId = async (stripeCustomerId: string) => {
	const userResult = await db.query.user.findFirst({
		where: eq(user.stripeCustomerId, stripeCustomerId),
	});
	return userResult;
};

const activateServer = async (serverId: string) => {
	await db
		.update(server)
		.set({ serverStatus: "active" })
		.where(eq(server.serverId, serverId));
};

const deactivateServer = async (serverId: string) => {
	await db
		.update(server)
		.set({ serverStatus: "inactive" })
		.where(eq(server.serverId, serverId));
};

export const findServersByUserIdSorted = async (userId: string) => {
	const organizations = await db.query.organization.findMany({
		where: eq(organization.ownerId, userId),
	});

	const servers: Server[] = [];
	for (const org of organizations) {
		const serversByOrg = await db.query.server.findMany({
			where: eq(server.organizationId, org.id),
			orderBy: asc(server.createdAt),
		});
		servers.push(...serversByOrg);
	}

	return servers;
};
export const updateServersBasedOnQuantity = async (
	userId: string,
	newServersQuantity: number,
) => {
	const servers = await findServersByUserIdSorted(userId);

	if (servers.length > newServersQuantity) {
		for (const [index, server] of servers.entries()) {
			if (index < newServersQuantity) {
				await activateServer(server.serverId);
			} else {
				await deactivateServer(server.serverId);
			}
		}
	} else {
		for (const server of servers) {
			await activateServer(server.serverId);
		}
	}
};