@sgftech/medusa-payment-stripe-subscription 0.0.32 → 0.0.34

package/dist/api/middlewares.d.ts

@@ -1,3 +1,3 @@
 import { MedusaRequest, MiddlewaresConfig } from "@medusajs/medusa";
-export declare const saveRawData: (req: MedusaRequest, res: any, next: any) => void;
+export declare const validateRawData: (req: MedusaRequest, res: any, next: any) => Promise<void>;
 export declare const config: MiddlewaresConfig;

package/dist/api/middlewares.js

@@ -1,20 +1,23 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.config = exports.saveRawData = void 0;
+exports.config = exports.validateRawData = void 0;
 const body_parser_1 = require("body-parser");
-const saveRawData = (req, res, next) => {
+const validateRawData = async (req, res, next) => {
+    const stripeSubscriptionProviderService = req.scope.resolve("stripeSubscriptionProviderService");
+    const stripe = stripeSubscriptionProviderService.getStripe();
+    await stripe.webhooks.signature.verifyHeader(req.body.toString(), req.headers["stripe-signature"], stripeSubscriptionProviderService.options.webhook_secret, 300);
     req["rawData"] = req.body;
     next();
 };
-exports.saveRawData = saveRawData;
+exports.validateRawData = validateRawData;
 exports.config = {
     routes: [
         {
             method: ["POST", "PUT"],
-            matcher: "/store/stripe/hooks/*",
+            matcher: "/stripe/hooks/*",
             bodyParser: false,
-            middlewares: [(0, body_parser_1.raw)({ type: "application/json" })]
+            middlewares: [(0, body_parser_1.raw)({ type: "application/json" }), exports.validateRawData]
         }
     ]
 };
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dist/api/stripe/hooks/route.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = exports.constructWebhook = exports.STRIPE_HOOK_RECEIVED_EVENT = void 0;
+exports.STRIPE_HOOK_RECEIVED_EVENT = "medusa.stripe_payment_intent_update";
+function constructWebhook({ signature, body, container }) {
+    const stripeProviderService = container.resolve("stripeSubscriptionProviderService");
+    return stripeProviderService.constructWebhookEvent(body, signature);
+}
+exports.constructWebhook = constructWebhook;
+const POST = async (req, response) => {
+    const event = constructWebhook({
+        signature: req.headers["stripe-signature"],
+        body: req.body,
+        container: req.scope
+    });
+    const eventBus = req.scope.resolve("eventBusService");
+    const pluginOptions = req.scope.resolve("stripeSubscriptionProviderService").options;
+    try {
+        await eventBus.emit(exports.STRIPE_HOOK_RECEIVED_EVENT, event, {
+            delay: pluginOptions.webhook_delay || 5000,
+            attempts: pluginOptions.webhook_retries || 3
+        });
+        response.sendStatus(200);
+    }
+    catch (e) {
+        response.sendStatus(500);
+    }
+    return;
+};
+exports.POST = POST;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/subscribers/stripe-event.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.config = void 0;
 const handle_subscription_1 = require("../utils/handle-subscription");
-const route_1 = require("../api/store/stripe/hooks/route");
+const route_1 = require("../api/stripe/hooks/route");
 async function stripeEventsHandler({ data, eventName, container }) {
     const event = data;
     const paymentIntent = event.data.object;
@@ -17,4 +17,4 @@ exports.default = stripeEventsHandler;
 exports.config = {
     event: route_1.STRIPE_HOOK_RECEIVED_EVENT
 };
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sgftech/medusa-payment-stripe-subscription",
-  "version": "0.0.32",
+  "version": "0.0.34",
   "description": "A plugin for stripe subscriptions",
   "author": "Medusa (https://medusajs.com)",
   "license": "MIT",

package/dist/api/store/stripe/hooks/route.js

@@ -1,31 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.POST = exports.constructWebhook = exports.STRIPE_HOOK_RECEIVED_EVENT = void 0;
-exports.STRIPE_HOOK_RECEIVED_EVENT = "medusa.stripe_payment_intent_update";
-function constructWebhook({ signature, body, container }) {
-    const stripeProviderService = container.resolve("stripeSubscriptionProviderService");
-    return stripeProviderService.constructWebhookEvent(body, signature);
-}
-exports.constructWebhook = constructWebhook;
-const POST = async (req, response) => {
-    const event = constructWebhook({
-        signature: req.headers["stripe-signature"],
-        body: req.body,
-        container: req.scope
-    });
-    const eventBus = req.scope.resolve("eventBusService");
-    const pluginOptions = req.scope.resolve("stripeSubscriptionProviderService").options;
-    try {
-        await eventBus.emit(exports.STRIPE_HOOK_RECEIVED_EVENT, event, {
-            delay: pluginOptions.webhook_delay || 5000,
-            attempts: pluginOptions.webhook_retries || 3
-        });
-        response.sendStatus(200);
-    }
-    catch (e) {
-        response.sendStatus(500);
-    }
-    return;
-};
-exports.POST = POST;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3N0b3JlL3N0cmlwZS9ob29rcy9yb3V0ZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFRYSxRQUFBLDBCQUEwQixHQUFHLHFDQUFxQyxDQUFDO0FBRWhGLFNBQWdCLGdCQUFnQixDQUFDLEVBQzdCLFNBQVMsRUFDVCxJQUFJLEVBQ0osU0FBUyxFQUtaO0lBQ0csTUFBTSxxQkFBcUIsR0FBRyxTQUFTLENBQUMsT0FBTyxDQUMzQyxtQ0FBbUMsQ0FDRCxDQUFDO0lBRXZDLE9BQU8scUJBQXFCLENBQUMscUJBQXFCLENBQUMsSUFBSSxFQUFFLFNBQVMsQ0FBQyxDQUFDO0FBQ3hFLENBQUM7QUFkRCw0Q0FjQztBQUVNLE1BQU0sSUFBSSxHQUFHLEtBQUssRUFBRSxHQUFrQixFQUFFLFFBQXdCLEVBQUUsRUFBRTtJQUN2RSxNQUFNLEtBQUssR0FBRyxnQkFBZ0IsQ0FBQztRQUMzQixTQUFTLEVBQUUsR0FBRyxDQUFDLE9BQU8sQ0FBQyxrQkFBa0IsQ0FBQztRQUMxQyxJQUFJLEVBQUUsR0FBRyxDQUFDLElBQUk7UUFDZCxTQUFTLEVBQUUsR0FBRyxDQUFDLEtBQUs7S0FDdkIsQ0FBQyxDQUFDO0lBRUgsTUFBTSxRQUFRLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsaUJBQWlCLENBQW9CLENBQUM7SUFDekUsTUFBTSxhQUFhLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQ25DLG1DQUFtQyxDQUN0QyxDQUFDLE9BQU8sQ0FBQztJQUNWLElBQUk7UUFDQSxNQUFNLFFBQVEsQ0FBQyxJQUFJLENBQUMsa0NBQTBCLEVBQUUsS0FBSyxFQUFFO1lBQ25ELEtBQUssRUFBRSxhQUFhLENBQUMsYUFBYSxJQUFJLElBQUk7WUFDMUMsUUFBUSxFQUFFLGFBQWEsQ0FBQyxlQUFlLElBQUksQ0FBQztTQUMvQyxDQUFDLENBQUM7UUFFSCxRQUFRLENBQUMsVUFBVSxDQUFDLEdBQUcsQ0FBQyxDQUFDO0tBQzVCO0lBQUMsT0FBTyxDQUFDLEVBQUU7UUFDUixRQUFRLENBQUMsVUFBVSxDQUFDLEdBQUcsQ0FBQyxDQUFDO0tBQzVCO0lBQ0QsT0FBTztBQUNYLENBQUMsQ0FBQztBQXRCVyxRQUFBLElBQUksUUFzQmYifQ==