@alantiller/directus-extension-stripe 1.0.0

package/dist/api.js

@@ -0,0 +1 @@
+import e from"node:crypto";const t=[{name:"stripe-hook",config:({init:e})=>{global.__stripeRawBodies||(global.__stripeRawBodies=new Map),e("middlewares.before",({app:e})=>{e.use((e,t,r)=>{const o=e.headers["stripe-signature"];if(!o)return r();const i=[];e.on("data",e=>i.push(e)),e.on("end",()=>{const t=Buffer.concat(i);global.__stripeRawBodies.set(o,{body:t,timestamp:Date.now()});const s=Date.now()-3e5;for(const[e,t]of global.__stripeRawBodies)t.timestamp<s&&global.__stripeRawBodies.delete(e);try{e.body=JSON.parse(t.toString("utf8"))}catch(t){e.body={}}e._body=!0,r()})})})}}],r=[],o=[{name:"stripe-operation",config:{id:"stripe-verify-signature",handler:({webhook_secret:t},{data:r,logger:o})=>{const i=r.$trigger,s=i?.headers?.["stripe-signature"];if(!s)throw new Error("Missing stripe-signature header on the incoming request.");if(!t)throw new Error("Webhook signing secret is required.");const n=global.__stripeRawBodies?.get(s);if(!n)throw new Error("Raw request body not found. Make sure the stripe-hook is enabled and running in this bundle.");const a=n.body.toString("utf8");global.__stripeRawBodies.delete(s);const d=s.split(","),p=d.find(e=>e.startsWith("t="))?.split("=")[1],f=d.filter(e=>e.startsWith("v1=")).map(e=>e.split("=").slice(1).join("="));if(!p||0===f.length)throw new Error("Invalid stripe-signature header format.");const l=`${p}.${a}`,h=e.createHmac("sha256",t).update(l,"utf8").digest("hex");if(!f.some(t=>{try{return e.timingSafeEqual(Buffer.from(h,"hex"),Buffer.from(t,"hex"))}catch{return!1}}))throw new Error("Stripe signature verification failed.");const c=Math.floor(Date.now()/1e3);if(Math.abs(c-parseInt(p,10))>300)throw new Error("Stripe webhook timestamp is outside the tolerance zone.");return o.info("Stripe webhook signature verified successfully."),JSON.parse(a)}}}];export{r as endpoints,t as hooks,o as operations};

package/dist/app.js

@@ -0,0 +1 @@
+const e=[],i=[],t=[],o=[],n=[],r=[],s=[{id:"stripe-verify-signature",name:"Verify Stripe Signature",icon:"verified_user",description:"Verifies the Stripe webhook signature using the raw request body and your endpoint signing secret.",overview:({webhook_secret:e})=>[{label:"Webhook Secret",text:e?"••••••••":"Not configured"}],options:[{field:"webhook_secret",name:"Webhook Signing Secret",type:"string",meta:{width:"full",interface:"input",note:"Your Stripe webhook endpoint signing secret (whsec_…). Supports dynamic values like {{$env.STRIPE_WEBHOOK_SECRET}}.",options:{masked:!0}}}]}];export{i as displays,e as interfaces,t as layouts,o as modules,s as operations,n as panels,r as themes};

package/package.json

@@ -0,0 +1,49 @@
+{
+	"name": "@alantiller/directus-extension-stripe",
+	"description": "A simple Directus extension that adds an operation to verify the Stripe webhook signature.",
+	"icon": "extension",
+	"version": "1.0.0",
+	"keywords": [
+		"directus",
+		"directus-extension",
+		"directus-extension-bundle"
+	],
+	"type": "module",
+	"files": [
+		"dist"
+	],
+	"directus:extension": {
+		"type": "bundle",
+		"path": {
+			"app": "dist/app.js",
+			"api": "dist/api.js"
+		},
+		"entries": [
+			{
+				"type": "hook",
+				"name": "stripe-hook",
+				"source": "src/stripe-hook/index.js"
+			},
+			{
+				"type": "operation",
+				"name": "stripe-operation",
+				"source": {
+					"app": "src/stripe-operation/app.js",
+					"api": "src/stripe-operation/api.js"
+				}
+			}
+		],
+		"host": "^10.10.0"
+	},
+	"scripts": {
+		"build": "directus-extension build",
+		"dev": "directus-extension build -w --no-minify",
+		"link": "directus-extension link",
+		"validate": "directus-extension validate",
+		"add": "directus-extension add"
+	},
+	"devDependencies": {
+		"@directus/extensions-sdk": "17.0.10",
+		"vue": "^3.5.29"
+	}
+}