@payloadcms/plugin-stripe 0.0.1

package/README.md

@@ -0,0 +1,136 @@
+# Payload Stripe Plugin
+
+[![NPM](https://img.shields.io/npm/v/@payloadcms/plugin-stripe)](https://www.npmjs.com/package/@payloadcms/plugin-stripe)
+
+A plugin for [Payload CMS](https://github.com/payloadcms/payload) to manage a [Stripe](https://stripe.com/) account through Payload.
+
+Core features:
+  - Layers your Stripe account with Payload access control
+  - Opens custom routes to interface with the Stripe REST API
+  - Handles Stripe webhooks to allow for a two-way data sync
+
+## Installation
+
+```bash
+  yarn add @payloadcms/plugin-stripe
+  # OR
+  npm i @payloadcms/plugin-stripe
+```
+
+## Basic Usage
+
+In the `plugins` array of your [Payload config](https://payloadcms.com/docs/configuration/overview), call the plugin with [options](#options):
+
+```js
+import { buildConfig } from 'payload/config';
+import stripe from '@payloadcms/plugin-stripe';
+
+const config = buildConfig({
+  plugins: [
+    stripe({
+      stripeSecretKey: process.env.STRIPE_SECRET_KEY,
+    })
+  ]
+});
+
+export default config;
+```
+
+### Options
+
+- `stripeSecretKey`
+
+  Required. Your Stripe secret key.
+
+- `stripeWebhookEndpointSecret`
+
+  Optional. Your Stripe webhook endpoint secret. This is needed only if you wish to sync data from Stripe to Payload.
+
+- `webhooks`
+
+  Optional. An object of Stripe webhook handlers, keyed to the name of the event. See [webhooks](#webhooks) for more details or for a list of all available webhooks, see [here](https://stripe.com/docs/cli/trigger#trigger-event).
+
+### Routes
+
+The following routes are automatically opened to allow you to interact with the Stripe API behind Payload access control. This allows you to read and make updates to your account.
+
+>NOTE: the `/api` part of these routes may be different based on the settings defined in your Payload config.
+
+- `POST /api/stripe/rest`
+
+  Calls the given [Stripe REST API](https://stripe.com/docs/api) method and returns the result.
+
+  ```
+    const res = await fetch(`/api/stripe/rest`, {
+      body: JSON.stringify({
+        stripeMethod: "stripe.subscriptions.list",
+        stripeMethodArgs: {
+          customer: "abc"
+        }
+      })
+    })
+  ```
+
+- `POST /api/stripe/webhooks`
+
+  Returns an http status code. This is where all Stripe webhook events are sent to be handled. See [webhooks](#webhooks).
+
+### Webhooks
+
+This plugin also allows for a two-way data sync from Stripe to Payload using [Stripe webhooks](https://stripe.com/docs/webhooks). Webhooks listen for events on your Stripe account so you can trigger reactions to them. To enable webhooks:
+
+1. Login and [create a new webhook](https://dashboard.stripe.com/test/webhooks/create) from the Stripe dashboard
+1. Paste `/api/stripe/webhooks` as the "Webhook Endpoint URL"
+1. Select which events to broadcast
+1. Then, handle these events using the `webhooks` portion of this plugin's config:
+
+```js
+import { buildConfig } from 'payload/config';
+import stripe from '@payloadcms/plugin-stripe';
+
+const config = buildConfig({
+  plugins: [
+    stripe({
+      stripeSecretKey: process.env.STRIPE_SECRET_KEY,
+      stripeWebhooksEndpointSecret: process.env.STRIPE_WEBHOOKS_ENDPOINT_SECRET,
+      webhooks: {
+        'customer.subscription.updated': () => {}
+      }
+    })
+  ]
+});
+
+export default config;
+```
+
+For a full list of available webhooks, see [here](https://stripe.com/docs/cli/trigger#trigger-event).
+
+## TypeScript
+
+All types can be directly imported:
+
+```js
+import {
+  StripeConfig,
+  WebhookHandler
+} from '@payloadcms/plugin-stripe/dist/types';
+```
+
+### Development
+
+This plugin can be developed locally using any Stripe account that you have access to. Then:
+
+```bash
+git clone git@github.com:payloadcms/plugin-stripe.git \
+  cd plugin-stripe && yarn \
+  cd demo && yarn \
+  cp .env.example .env \
+  vim .env \ # add your Stripe creds to this file
+  yarn dev
+```
+
+Now you have a running Payload server with this plugin installed, so you can authenticate and begin hitting the routes. To do this, open [Postman](https://www.postman.com/) and import [our config](https://github.com/payloadcms/plugin-stripe/blob/main/src/payload-stripe-plugin.postman_collection.json). First, login to retrieve your Payload access token. This token is automatically attached to the header of all other requests.
+
+## Screenshots
+
+  <!-- ![screenshot 1](https://github.com/@payloadcms/plugin-stripe/blob/main/images/screenshot-1.jpg?raw=true) -->

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+import { Config } from 'payload/config';
+import { StripeConfig } from './types';
+declare const stripe: (stripeConfig: StripeConfig) => (config: Config) => Config;
+export default stripe;

package/dist/index.js

@@ -0,0 +1,44 @@
+"use strict";
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
+    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+        if (ar || !(i in from)) {
+            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+            ar[i] = from[i];
+        }
+    }
+    return to.concat(ar || Array.prototype.slice.call(from));
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var rest_1 = require("./routes/rest");
+var webhooks_1 = require("./routes/webhooks");
+var stripe = function (stripeConfig) { return function (config) {
+    return (__assign(__assign({}, config), { endpoints: __spreadArray(__spreadArray([], (config === null || config === void 0 ? void 0 : config.endpoints) || [], true), [
+            {
+                path: '/stripe/webhooks',
+                method: 'post',
+                handler: function (req, res, next) {
+                    (0, webhooks_1.stripeWebhooks)(req, res, next, stripeConfig);
+                }
+            },
+            {
+                path: '/stripe/rest',
+                method: 'post',
+                handler: function (req, res, next) {
+                    (0, rest_1.stripeREST)(req, res, next, stripeConfig);
+                }
+            },
+        ], false) }));
+}; };
+exports.default = stripe;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AACA,sCAA2C;AAC3C,8CAAmD;AAGnD,IAAM,MAAM,GAAG,UAAC,YAA0B,IAAK,OAAA,UAAC,MAAc;IAC5D,OAAO,uBACF,MAAM,KACT,SAAS,kCACJ,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,KAAI,EAAE;YAC1B;gBACE,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,UAAC,GAAG,EAAE,GAAG,EAAE,IAAI;oBACtB,IAAA,yBAAc,EAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,CAAC,CAAA;gBAC9C,CAAC;aACF;YACD;gBACE,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,UAAC,GAAG,EAAE,GAAG,EAAE,IAAI;oBACtB,IAAA,iBAAU,EAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,CAAC,CAAA;gBAC1C,CAAC;aACF;qBAEH,CAAA;AACJ,CAAC,EArB8C,CAqB9C,CAAC;AAEF,kBAAe,MAAM,CAAC"}

package/dist/routes/getAllProducts.d.ts

@@ -0,0 +1,3 @@
+import { PayloadRequest } from 'payload/dist/types';
+import { StripeConfig } from '../types';
+export declare const getAllProducts: (req: PayloadRequest, res: any, next: any, stripeConfig: StripeConfig) => Promise<any>;

package/dist/routes/getAllProducts.js

@@ -0,0 +1,78 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAllProducts = void 0;
+var errors_1 = require("payload/errors");
+var stripe_1 = __importDefault(require("stripe"));
+var getAllProducts = function (req, res, next, stripeConfig) { return __awaiter(void 0, void 0, void 0, function () {
+    var stripeSecretKey, stripe, id, user, products, err_1;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                stripeSecretKey = stripeConfig.stripeSecretKey;
+                stripe = new stripe_1.default(stripeSecretKey, { apiVersion: '2022-08-01' });
+                _a.label = 1;
+            case 1:
+                _a.trys.push([1, 3, , 4]);
+                id = req.params.id, user = req.user;
+                if (!user) {
+                    throw new errors_1.Forbidden();
+                }
+                return [4 /*yield*/, stripe.products.list(({
+                        limit: 20,
+                    }))];
+            case 2:
+                products = _a.sent();
+                if (!(products === null || products === void 0 ? void 0 : products.data)) {
+                    return [2 /*return*/, res.status(404)];
+                }
+                return [2 /*return*/, res.json({
+                        products: products
+                    })];
+            case 3:
+                err_1 = _a.sent();
+                return [2 /*return*/, next(err_1)];
+            case 4: return [2 /*return*/];
+        }
+    });
+}); };
+exports.getAllProducts = getAllProducts;
+//# sourceMappingURL=getAllProducts.js.map

package/dist/routes/getAllProducts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAllProducts.js","sourceRoot":"","sources":["../../src/routes/getAllProducts.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,yCAA2C;AAC3C,kDAA4B;AAGrB,IAAM,cAAc,GAAG,UAC5B,GAAmB,EACnB,GAAQ,EACR,IAAS,EACT,YAA0B;;;;;gBAElB,eAAe,GAAK,YAAY,gBAAjB,CAAkB;gBAEnC,MAAM,GAAG,IAAI,gBAAM,CAAC,eAAe,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;;;;gBAGrD,EAAE,GAAa,GAAG,UAAhB,EAAI,IAAI,GAAK,GAAG,KAAR,CAAS;gBAErC,IAAI,CAAC,IAAI,EAAE;oBACT,MAAM,IAAI,kBAAS,EAAE,CAAC;iBACvB;gBAEgB,qBAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;wBAC3C,KAAK,EAAE,EAAE;qBACV,CAAC,CAAC,EAAA;;gBAFG,QAAQ,GAAG,SAEd;gBAEH,IAAI,CAAC,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,IAAI,CAAA,EAAE;oBACnB,sBAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAC;iBACxB;gBAED,sBAAO,GAAG,CAAC,IAAI,CAAC;wBACd,QAAQ,UAAA;qBACT,CAAC,EAAC;;;gBAEH,sBAAO,IAAI,CAAC,KAAG,CAAC,EAAC;;;;KAEpB,CAAC;AA/BW,QAAA,cAAc,kBA+BzB"}

package/dist/routes/getSubscriptions.d.ts

@@ -0,0 +1,3 @@
+import { PayloadRequest } from 'payload/dist/types';
+import { StripeConfig } from '../types';
+export declare const getStripeSubscriptions: (req: PayloadRequest, res: any, next: any, stripeConfig: StripeConfig) => Promise<any>;

package/dist/routes/getSubscriptions.js

@@ -0,0 +1,115 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getStripeSubscriptions = void 0;
+var payload_1 = __importDefault(require("payload"));
+var errors_1 = require("payload/errors");
+var stripe_1 = __importDefault(require("stripe"));
+var getStripeSubscriptions = function (req, res, next, stripeConfig) { return __awaiter(void 0, void 0, void 0, function () {
+    var stripeSecretKey, stripe, id, user, matchingCustomers, customer, subscription, paymentMethod, invoices, err_1;
+    var _a, _b, _c, _d, _e, _f;
+    return __generator(this, function (_g) {
+        switch (_g.label) {
+            case 0:
+                stripeSecretKey = stripeConfig.stripeSecretKey;
+                stripe = new stripe_1.default(stripeSecretKey, { apiVersion: '2022-08-01' });
+                _g.label = 1;
+            case 1:
+                _g.trys.push([1, 6, , 7]);
+                id = req.params.id, user = req.user;
+                if (!user) {
+                    throw new errors_1.Forbidden();
+                }
+                return [4 /*yield*/, payload_1.default.find({
+                        collection: 'customers',
+                        where: {
+                            and: [
+                                {
+                                    stripeSubscriptionID: {
+                                        equals: id,
+                                    },
+                                },
+                            ],
+                        },
+                    })];
+            case 2:
+                matchingCustomers = _g.sent();
+                if (matchingCustomers.docs.length !== 1) {
+                    throw new errors_1.Forbidden();
+                }
+                customer = matchingCustomers.docs[0];
+                return [4 /*yield*/, stripe.subscriptions.retrieve(id)];
+            case 3:
+                subscription = _g.sent();
+                if (!((_d = (_c = (_b = (_a = subscription === null || subscription === void 0 ? void 0 : subscription.items) === null || _a === void 0 ? void 0 : _a.data) === null || _b === void 0 ? void 0 : _b[0]) === null || _c === void 0 ? void 0 : _c.plan) === null || _d === void 0 ? void 0 : _d.id)) {
+                    return [2 /*return*/, res.status(404)];
+                }
+                return [4 /*yield*/, stripe.paymentMethods.retrieve(subscription.default_payment_method)];
+            case 4:
+                paymentMethod = _g.sent();
+                return [4 /*yield*/, stripe.invoices.list({
+                        subscription: id,
+                        limit: 20,
+                    })];
+            case 5:
+                invoices = _g.sent();
+                return [2 /*return*/, res.json({
+                        paymentMethod: {
+                            brand: (_e = paymentMethod === null || paymentMethod === void 0 ? void 0 : paymentMethod.card) === null || _e === void 0 ? void 0 : _e.brand,
+                            last4: (_f = paymentMethod === null || paymentMethod === void 0 ? void 0 : paymentMethod.card) === null || _f === void 0 ? void 0 : _f.last4,
+                        },
+                        invoices: invoices.data.map(function (_a) {
+                            var amount = _a.amount_due, created = _a.created;
+                            return ({
+                                amount: amount,
+                                created: created,
+                            });
+                        }),
+                    })];
+            case 6:
+                err_1 = _g.sent();
+                return [2 /*return*/, next(err_1)];
+            case 7: return [2 /*return*/];
+        }
+    });
+}); };
+exports.getStripeSubscriptions = getStripeSubscriptions;
+//# sourceMappingURL=getSubscriptions.js.map

package/dist/routes/getSubscriptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getSubscriptions.js","sourceRoot":"","sources":["../../src/routes/getSubscriptions.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oDAA8B;AAE9B,yCAA2C;AAC3C,kDAA4B;AAGrB,IAAM,sBAAsB,GAAG,UACpC,GAAmB,EACnB,GAAQ,EACR,IAAS,EACT,YAA0B;;;;;;gBAElB,eAAe,GAAK,YAAY,gBAAjB,CAAkB;gBAEnC,MAAM,GAAG,IAAI,gBAAM,CAAC,eAAe,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;;;;gBAGrD,EAAE,GAAa,GAAG,UAAhB,EAAI,IAAI,GAAK,GAAG,KAAR,CAAS;gBAErC,IAAI,CAAC,IAAI,EAAE;oBACT,MAAM,IAAI,kBAAS,EAAE,CAAC;iBACvB;gBAEyB,qBAAM,iBAAO,CAAC,IAAI,CAAC;wBAC3C,UAAU,EAAE,WAAW;wBACvB,KAAK,EAAE;4BACL,GAAG,EAAE;gCACH;oCACE,oBAAoB,EAAE;wCACpB,MAAM,EAAE,EAAE;qCACX;iCACF;6BACF;yBACF;qBACF,CAAC,EAAA;;gBAXI,iBAAiB,GAAG,SAWxB;gBAEF,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE;oBACvC,MAAM,IAAI,kBAAS,EAAE,CAAC;iBACvB;gBAEK,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC;gBAE7B,qBAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;gBAAtD,YAAY,GAAG,SAAuC;gBAE5D,IAAI,CAAC,CAAA,MAAA,MAAA,MAAA,MAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,KAAK,0CAAE,IAAI,0CAAG,CAAC,CAAC,0CAAE,IAAI,0CAAE,EAAE,CAAA,EAAE;oBAC7C,sBAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAC;iBACxB;gBAEqB,qBAAM,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC,sBAAgC,CAAC,EAAA;;gBAAnG,aAAa,GAAG,SAAmF;gBAExF,qBAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;wBAC1C,YAAY,EAAE,EAAE;wBAChB,KAAK,EAAE,EAAE;qBACV,CAAC,EAAA;;gBAHI,QAAQ,GAAG,SAGf;gBAEF,sBAAO,GAAG,CAAC,IAAI,CAAC;wBACd,aAAa,EAAE;4BACb,KAAK,EAAE,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,IAAI,0CAAE,KAAK;4BACjC,KAAK,EAAE,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,IAAI,0CAAE,KAAK;yBAClC;wBACD,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,UAAC,EAA+B;gCAAjB,MAAM,gBAAA,EAAE,OAAO,aAAA;4BAAO,OAAA,CAAC;gCAChE,MAAM,QAAA;gCACN,OAAO,SAAA;6BACR,CAAC;wBAH+D,CAG/D,CAAC;qBACJ,CAAC,EAAC;;;gBAEH,sBAAO,IAAI,CAAC,KAAG,CAAC,EAAC;;;;KAEpB,CAAC;AA9DW,QAAA,sBAAsB,0BA8DjC"}

package/dist/routes/rest.d.ts

@@ -0,0 +1,4 @@
+import { PayloadRequest } from 'payload/types';
+import { StripeConfig } from '../types';
+import { Response } from 'express';
+export declare const stripeREST: (req: PayloadRequest, res: Response, next: any, stripeConfig: StripeConfig) => Promise<any>;

package/dist/routes/rest.js

@@ -0,0 +1,89 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stripeREST = void 0;
+var errors_1 = require("payload/errors");
+var stripe_1 = __importDefault(require("stripe"));
+var lodash_get_1 = __importDefault(require("lodash.get"));
+var stripeREST = function (req, res, next, stripeConfig) { return __awaiter(void 0, void 0, void 0, function () {
+    var stripeSecretKey, stripe, _a, stripeMethod, stripeArgs // 'cus_MGgt3Tuj3D66f2'
+    , user, topLevelMethod, contextToBind, foundMethod, stripeResponse, err_1;
+    return __generator(this, function (_b) {
+        switch (_b.label) {
+            case 0:
+                stripeSecretKey = stripeConfig.stripeSecretKey;
+                stripe = new stripe_1.default(stripeSecretKey, { apiVersion: '2022-08-01' });
+                _b.label = 1;
+            case 1:
+                _b.trys.push([1, 7, , 8]);
+                _a = req.body, stripeMethod = _a.stripeMethod, stripeArgs = _a.stripeArgs, user = req.user;
+                if (!user) { // TODO: make this customizable from the config
+                    throw new errors_1.Forbidden();
+                }
+                if (!(typeof stripeMethod === 'string')) return [3 /*break*/, 5];
+                topLevelMethod = stripeMethod.split('.')[0];
+                contextToBind = stripe[topLevelMethod];
+                foundMethod = (0, lodash_get_1.default)(stripe, stripeMethod).bind(contextToBind);
+                if (!(typeof foundMethod === 'function')) return [3 /*break*/, 3];
+                return [4 /*yield*/, foundMethod(stripeArgs)];
+            case 2:
+                stripeResponse = _b.sent();
+                if (!(stripeResponse === null || stripeResponse === void 0 ? void 0 : stripeResponse.data)) {
+                    return [2 /*return*/, res.status(404)];
+                }
+                return [2 /*return*/, res.json(stripeResponse)];
+            case 3:
+                console.warn("The provide Stripe method of '".concat(stripeMethod, "' is not a part of the Stripe API."));
+                return [2 /*return*/, next()];
+            case 4: return [3 /*break*/, 6];
+            case 5:
+                console.warn('You must provide a Stripe method to call.');
+                return [2 /*return*/, next()];
+            case 6: return [3 /*break*/, 8];
+            case 7:
+                err_1 = _b.sent();
+                return [2 /*return*/, next(err_1)];
+            case 8: return [2 /*return*/];
+        }
+    });
+}); };
+exports.stripeREST = stripeREST;
+//# sourceMappingURL=rest.js.map

package/dist/routes/rest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest.js","sourceRoot":"","sources":["../../src/routes/rest.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,yCAA2C;AAC3C,kDAA4B;AAE5B,0DAAmC;AAG5B,IAAM,UAAU,GAAG,UACxB,GAAmB,EACnB,GAAa,EACb,IAAS,EACT,YAA0B;;;;;;gBAElB,eAAe,GAAK,YAAY,gBAAjB,CAAkB;gBAEnC,MAAM,GAAG,IAAI,gBAAM,CAAC,eAAe,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;;;;gBAIrE,KAKE,GAAG,KAFJ,EAFC,YAAY,kBAAA,EACZ,UAAU,gBAAA,EAEZ,IAAI,GACF,GAAG,KADD,CACE;gBAER,IAAI,CAAC,IAAI,EAAE,EAAE,+CAA+C;oBAC1D,MAAM,IAAI,kBAAS,EAAE,CAAC;iBACvB;qBAEG,CAAA,OAAO,YAAY,KAAK,QAAQ,CAAA,EAAhC,wBAAgC;gBAC5B,cAAc,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAiB,CAAC;gBAC5D,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;gBACvC,WAAW,GAAG,IAAA,oBAAS,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;qBAEpE,CAAA,OAAO,WAAW,KAAK,UAAU,CAAA,EAAjC,wBAAiC;gBACZ,qBAAM,WAAW,CAAC,UAAU,CAAC,EAAA;;gBAA9C,cAAc,GAAG,SAA6B;gBAEpD,IAAI,CAAC,CAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,IAAI,CAAA,EAAE;oBACzB,sBAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAC;iBACxB;gBAED,sBAAO,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,EAAC;;gBAEhC,OAAO,CAAC,IAAI,CAAC,wCAAiC,YAAY,uCAAoC,CAAC,CAAC;gBAChG,sBAAO,IAAI,EAAE,EAAC;;;gBAGhB,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;gBAC1D,sBAAO,IAAI,EAAE,EAAC;;;;gBAIhB,sBAAO,IAAI,CAAC,KAAG,CAAC,EAAC;;;;KAEpB,CAAC;AAhDW,QAAA,UAAU,cAgDrB"}

package/dist/routes/updatePayment.d.ts

@@ -0,0 +1,3 @@
+import { PayloadRequest } from 'payload/dist/types';
+import { StripeConfig } from '../types';
+export declare const updateStripePayment: (req: PayloadRequest, res: any, next: any, stripeConfig: StripeConfig) => Promise<any>;

package/dist/routes/updatePayment.js

@@ -0,0 +1,96 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.updateStripePayment = void 0;
+var payload_1 = __importDefault(require("payload"));
+var errors_1 = require("payload/errors");
+var stripe_1 = __importDefault(require("stripe"));
+var updateStripePayment = function (req, res, next, stripeConfig) { return __awaiter(void 0, void 0, void 0, function () {
+    var stripeSecretKey, stripe, _a, subscriptionID, paymentMethodID, user, matchingCustomers, err_1;
+    return __generator(this, function (_b) {
+        switch (_b.label) {
+            case 0:
+                stripeSecretKey = stripeConfig.stripeSecretKey;
+                stripe = new stripe_1.default(stripeSecretKey, { apiVersion: '2022-08-01' });
+                _b.label = 1;
+            case 1:
+                _b.trys.push([1, 5, , 6]);
+                _a = req.body, subscriptionID = _a.subscriptionID, paymentMethodID = _a.paymentMethodID, user = req.user;
+                if (!user) {
+                    throw new errors_1.Forbidden();
+                }
+                return [4 /*yield*/, payload_1.default.find({
+                        collection: 'customers',
+                        where: {
+                            and: [
+                                {
+                                    stripeSubscriptionID: {
+                                        equals: subscriptionID,
+                                    },
+                                },
+                            ],
+                        },
+                    })];
+            case 2:
+                matchingCustomers = _b.sent();
+                if (matchingCustomers.docs.length !== 1) {
+                    throw new errors_1.Forbidden();
+                }
+                return [4 /*yield*/, stripe.paymentMethods.attach(paymentMethodID, {
+                        customer: user.stripeCustomerID,
+                    })];
+            case 3:
+                _b.sent();
+                return [4 /*yield*/, stripe.subscriptions.update(subscriptionID, {
+                        default_payment_method: paymentMethodID,
+                    })];
+            case 4:
+                _b.sent();
+                return [2 /*return*/, res.sendStatus(200)];
+            case 5:
+                err_1 = _b.sent();
+                return [2 /*return*/, next(err_1)];
+            case 6: return [2 /*return*/];
+        }
+    });
+}); };
+exports.updateStripePayment = updateStripePayment;
+//# sourceMappingURL=updatePayment.js.map

package/dist/routes/updatePayment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updatePayment.js","sourceRoot":"","sources":["../../src/routes/updatePayment.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oDAA8B;AAE9B,yCAA2C;AAC3C,kDAA4B;AAGrB,IAAM,mBAAmB,GAAG,UACjC,GAAmB,EACnB,GAAQ,EACR,IAAS,EACT,YAA0B;;;;;gBAElB,eAAe,GAAK,YAAY,gBAAjB,CAAkB;gBAEnC,MAAM,GAAG,IAAI,gBAAM,CAAC,eAAe,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;;;;gBAG/D,KAAoD,GAAG,KAAd,EAAjC,cAAc,oBAAA,EAAE,eAAe,qBAAA,EAAI,IAAI,GAAK,GAAG,KAAR,CAAS;gBAEhE,IAAI,CAAC,IAAI,EAAE;oBACT,MAAM,IAAI,kBAAS,EAAE,CAAC;iBACvB;gBAEyB,qBAAM,iBAAO,CAAC,IAAI,CAAC;wBAC3C,UAAU,EAAE,WAAW;wBACvB,KAAK,EAAE;4BACL,GAAG,EAAE;gCACH;oCACE,oBAAoB,EAAE;wCACpB,MAAM,EAAE,cAAc;qCACvB;iCACF;6BACF;yBACF;qBACF,CAAC,EAAA;;gBAXI,iBAAiB,GAAG,SAWxB;gBAEF,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE;oBACvC,MAAM,IAAI,kBAAS,EAAE,CAAC;iBACvB;gBAED,qBAAM,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,eAAe,EAAE;wBAClD,QAAQ,EAAE,IAAI,CAAC,gBAAgB;qBAChC,CAAC,EAAA;;gBAFF,SAEE,CAAC;gBAEH,qBAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,EAAE;wBAChD,sBAAsB,EAAE,eAAe;qBACxC,CAAC,EAAA;;gBAFF,SAEE,CAAC;gBAEH,sBAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAC;;;gBAE3B,sBAAO,IAAI,CAAC,KAAG,CAAC,EAAC;;;;KAEpB,CAAC;AA9CW,QAAA,mBAAmB,uBA8C9B"}

package/dist/routes/webhooks.d.ts

@@ -0,0 +1,4 @@
+import { PayloadRequest } from 'payload/dist/types';
+import { StripeConfig } from '../types';
+import { Response } from 'express';
+export declare const stripeWebhooks: (req: PayloadRequest, res: Response, next: any, stripeConfig: StripeConfig) => void;

package/dist/routes/webhooks.js

@@ -0,0 +1,33 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stripeWebhooks = void 0;
+var stripe_1 = __importDefault(require("stripe"));
+var stripeWebhooks = function (req, res, next, stripeConfig) {
+    var stripeSecretKey = stripeConfig.stripeSecretKey, stripeWebhookEndpointSecret = stripeConfig.stripeWebhookEndpointSecret, webhooks = stripeConfig.webhooks;
+    if (webhooks && stripeWebhookEndpointSecret) {
+        var stripe = new stripe_1.default(stripeSecretKey, { apiVersion: '2022-08-01' });
+        var stripeSignature = req.headers['stripe-signature'];
+        if (stripeSignature) {
+            var event_1;
+            try {
+                event_1 = stripe.webhooks.constructEvent(req.body, stripeSignature, stripeWebhookEndpointSecret);
+            }
+            catch (err) {
+                res.status(400).send("Webhook Error: ".concat(err.message));
+            }
+            if (event_1) {
+                var webhookEventHandler = webhooks[event_1.type];
+                if (typeof webhookEventHandler === 'function') {
+                    webhookEventHandler(event_1, stripe, stripeConfig);
+                }
+                ;
+            }
+        }
+    }
+    res.json({ received: true });
+};
+exports.stripeWebhooks = stripeWebhooks;
+//# sourceMappingURL=webhooks.js.map

package/dist/routes/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../src/routes/webhooks.ts"],"names":[],"mappings":";;;;;;AAAA,kDAA4B;AAKrB,IAAM,cAAc,GAAG,UAC5B,GAAmB,EACnB,GAAa,EACb,IAAS,EACT,YAA0B;IAGxB,IAAA,eAAe,GAGb,YAAY,gBAHC,EACf,2BAA2B,GAEzB,YAAY,4BAFa,EAC3B,QAAQ,GACN,YAAY,SADN,CACO;IAEjB,IAAI,QAAQ,IAAI,2BAA2B,EAAE;QAC3C,IAAM,MAAM,GAAG,IAAI,gBAAM,CAAC,eAAe,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;QAEzE,IAAM,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAExD,IAAI,eAAe,EAAE;YACnB,IAAI,OAA+B,CAAC;YAEpC,IAAI;gBACF,OAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,2BAA2B,CAAC,CAAC;aAChG;YAAC,OAAO,GAAQ,EAAE;gBACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,yBAAkB,GAAG,CAAC,OAAO,CAAE,CAAC,CAAC;aACvD;YAED,IAAI,OAAK,EAAE;gBACT,IAAM,mBAAmB,GAAG,QAAQ,CAAC,OAAK,CAAC,IAAI,CAAC,CAAC;gBACjD,IAAI,OAAO,mBAAmB,KAAK,UAAU,EAAE;oBAC7C,mBAAmB,CAAC,OAAK,EAAE,MAAM,EAAE,YAAY,CAAC,CAAA;iBACjD;gBAAA,CAAC;aACH;SACF;KACF;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/B,CAAC,CAAC;AApCW,QAAA,cAAc,kBAoCzB"}

package/dist/types.d.ts

@@ -0,0 +1,9 @@
+import Stripe from "stripe";
+export declare type WebhookHandler = (event: any, stripe: Stripe, stripeConfig: StripeConfig) => void;
+export declare type StripeConfig = {
+    stripeSecretKey: string;
+    stripeWebhookEndpointSecret?: string;
+    webhooks?: {
+        [webhookName: string]: WebhookHandler;
+    };
+};

package/dist/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@payloadcms/plugin-stripe",
+  "version": "0.0.1",
+  "homepage:": "https://payloadcms.com",
+  "repository": "git@github.com:payloadcms/plugin-stripe.git",
+  "description": "Stripe plugin for Payload CMS",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "tsc",
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": [
+    "payload",
+    "stripe",
+    "cms",
+    "plugin",
+    "typescript",
+    "payments"
+  ],
+  "author": "dev@payloadcms.com",
+  "license": "MIT",
+  "peerDependencies": {
+    "payload": "^0.18.5 || ^1.0.27"
+  },
+  "dependencies": {
+    "lodash.get": "^4.4.2",
+    "stripe": "^10.2.0"
+  },
+  "devDependencies": {
+    "@types/express": "^4.17.13",
+    "@types/lodash.get": "^4.4.7",
+    "payload": "^1.0.9",
+    "typescript": "^4.5.5"
+  },
+  "files": [
+    "dist"
+  ]
+}