@goweekdays/core 2.4.2 → 2.6.0

package/dist/index.mjs

@@ -906,9 +906,11 @@ var SPACES_BUCKET = process.env.SPACES_BUCKET;
 var PAYPAL_CLIENT_ID = process.env.PAYPAL_CLIENT_ID ?? "";
 var PAYPAL_CLIENT_SECRET = process.env.PAYPAL_CLIENT_SECRET ?? "";
 var PAYPAL_API_URL = process.env.PAYPAL_API_URL ?? "https://api-m.sandbox.paypal.com";
+var PAYPAL_WEBHOOK_ID = process.env.PAYPAL_WEBHOOK_ID ?? "";
 var XENDIT_SECRET_KEY = process.env.XENDIT_SECRET_KEY ?? "";
 var XENDIT_BASE_URL = process.env.XENDIT_BASE_URL ?? "https://api.xendit.co";
 var DOMAIN = process.env.DOMAIN || "localhost";
+var APP_ORG = process.env.APP_ORG || "http://localhost/organizations/create";
 
 // src/resources/user/user.service.ts
 import {
@@ -3502,6 +3504,11 @@ function useAppService() {
         code: "ride",
         name: "Ride",
         description: "Transportation and ride services."
+      },
+      {
+        code: "job",
+        name: "jobs",
+        description: "Job listings and recruitment services."
       }
     ];
     const session = useAtlas9.getClient()?.startSession();
@@ -6340,6 +6347,102 @@ function usePlanController() {
   };
 }
 
+// src/resources/utils/paypal.service.ts
+import {
+  Client,
+  Environment,
+  OrdersController,
+  CheckoutPaymentIntent,
+  OrderApplicationContextUserAction
+} from "@paypal/paypal-server-sdk";
+import crypto3 from "crypto";
+import crc32 from "buffer-crc32";
+var certCache = /* @__PURE__ */ new Map();
+function usePaypalService() {
+  const paypalClient = new Client({
+    clientCredentialsAuthCredentials: {
+      oAuthClientId: PAYPAL_CLIENT_ID,
+      oAuthClientSecret: PAYPAL_CLIENT_SECRET
+    },
+    timeout: 0,
+    environment: isDev ? Environment.Sandbox : Environment.Production
+  });
+  function addOrder({
+    amount = 0,
+    currency = "PHP",
+    customId = "",
+    returnUrl = "",
+    cancelUrl = "",
+    action = "pay"
+  } = {}) {
+    return new OrdersController(paypalClient).createOrder({
+      body: {
+        intent: CheckoutPaymentIntent.Capture,
+        purchaseUnits: [
+          {
+            amount: {
+              currencyCode: currency,
+              value: amount.toFixed(2)
+            },
+            customId
+          }
+        ],
+        applicationContext: {
+          returnUrl,
+          cancelUrl,
+          userAction: action === "pay" ? OrderApplicationContextUserAction.PayNow : action === "continue" ? OrderApplicationContextUserAction.Continue : void 0
+        }
+      },
+      prefer: "return=minimal"
+    });
+  }
+  function captureOrder(id) {
+    return new OrdersController(paypalClient).captureOrder({ id });
+  }
+  async function downloadAndCacheCert(url) {
+    const cachedCert = certCache.get(url);
+    if (cachedCert) {
+      return cachedCert;
+    }
+    const response = await fetch(url);
+    if (!response.ok) {
+      throw new Error(
+        `Failed to download PayPal certificate: ${response.statusText}`
+      );
+    }
+    const certPem = await response.text();
+    certCache.set(url, certPem);
+    return certPem;
+  }
+  async function verifyWebhook(rawBody, headers, webhookId = PAYPAL_WEBHOOK_ID) {
+    const transmissionId = headers["paypal-transmission-id"];
+    const timeStamp = headers["paypal-transmission-time"];
+    const certUrl = headers["paypal-cert-url"];
+    const transmissionSig = headers["paypal-transmission-sig"];
+    if (!transmissionId || !timeStamp || !certUrl || !transmissionSig) {
+      return false;
+    }
+    const eventBuffer = Buffer.isBuffer(rawBody) ? rawBody : Buffer.from(rawBody);
+    const crcValue = parseInt("0x" + crc32(eventBuffer).toString("hex"));
+    const message = `${transmissionId}|${timeStamp}|${webhookId}|${crcValue}`;
+    try {
+      const certPem = await downloadAndCacheCert(certUrl);
+      const signatureBuffer = Buffer.from(transmissionSig, "base64");
+      const verifier = crypto3.createVerify("SHA256");
+      verifier.update(message);
+      return verifier.verify(certPem, signatureBuffer);
+    } catch (error) {
+      console.error("PayPal webhook verification error:", error);
+      throw new Error("Failed to verify PayPal webhook signature.");
+    }
+  }
+  return {
+    addOrder,
+    captureOrder,
+    verifyWebhook
+  };
+}
+
 // src/resources/organization/organization.service.ts
 function useOrgService() {
   const { add: addOrg } = useOrgRepo();
@@ -6350,6 +6453,7 @@ function useOrgService() {
   const { getDefault } = usePlanRepo();
   const { add: addSubscription } = useSubscriptionRepo();
   const { add: addSubscriptionTransaction } = useSubscriptionTransactionRepo();
+  const { addOrder: addPaypalOrder } = usePaypalService();
   async function add(value) {
     const { error } = schemaOrgAdd.validate(value);
     if (error) {
@@ -6444,8 +6548,22 @@ function useOrgService() {
         },
         session
       );
+      const order = await addPaypalOrder({
+        amount,
+        currency: plan.currency,
+        customId: subscriptionId,
+        returnUrl: `${APP_ORG}/organizations/success`,
+        cancelUrl: `${APP_ORG}/organizations/cancel`,
+        action: "pay"
+      });
       await session?.commitTransaction();
-      return String(org);
+      const paypalOrderLink = JSON.parse(order.body.toString()).links.find(
+        (link) => link.rel === "approve"
+      );
+      return {
+        org: String(org),
+        paypalOrderLink: paypalOrderLink ? paypalOrderLink.href : ""
+      };
     } catch (error2) {
       await session?.abortTransaction();
       throw error2;
@@ -6478,10 +6596,10 @@ function useOrgController() {
       return;
     }
     try {
-      const org = await _add(value);
+      const data = await _add(value);
       res.json({
         message: "Organization created successfully.",
-        data: { org }
+        data
       });
       return;
     } catch (error2) {
@@ -9739,9 +9857,26 @@ function useUtilController() {
       }
     }
   }
+  const { verifyWebhook } = usePaypalService();
+  async function paypalWebhook(req, res, next) {
+    console.log(req);
+    try {
+      await verifyWebhook(req.body, req.headers, PAYPAL_WEBHOOK_ID);
+      res.status(200).send("OK");
+      return;
+    } catch (error) {
+      logger28.log({
+        level: "error",
+        message: "PayPal webhook verification failed"
+      });
+      res.status(400).send("Invalid webhook");
+      return;
+    }
+  }
   return {
     healthCheck,
-    setGitHubVariables
+    setGitHubVariables,
+    paypalWebhook
   };
 }
 
@@ -10007,6 +10142,7 @@ export {
   ACCESS_TOKEN_SECRET,
   APP_ACCOUNT,
   APP_MAIN,
+  APP_ORG,
   DEFAULT_USER_EMAIL,
   DEFAULT_USER_FIRST_NAME,
   DEFAULT_USER_LAST_NAME,
@@ -10025,6 +10161,7 @@ export {
   PAYPAL_API_URL,
   PAYPAL_CLIENT_ID,
   PAYPAL_CLIENT_SECRET,
+  PAYPAL_WEBHOOK_ID,
   PORT,
   REDIS_HOST,
   REDIS_PASSWORD,