@windrun-huaiin/backend-core 10.0.1

package/src/app/api/webhook/clerk/user/route.ts

@@ -0,0 +1,249 @@
+// Fix BigInt serialization issue
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+(BigInt.prototype as any).toJSON = function () {
+  return this.toString();
+};
+
+import { userAggregateService } from '../../../../../services/aggregate/index';
+import { UserStatus } from '../../../../../services//database/constants';
+import { Apilogger, userService } from '../../../../../services//database/index';
+import { headers } from 'next/headers';
+import { NextRequest, NextResponse } from 'next/server';
+import { Webhook } from 'svix';
+
+// 定义Clerk Webhook事件类型
+interface ClerkWebhookEvent {
+  data: {
+    id: string;
+    email_addresses?: Array<{
+      email_address: string;
+    }>;
+    first_name?: string;
+    last_name?: string,
+    username?: string,
+    unsafe_metadata?: {
+      user_id?: string;
+      fingerprint_id?: string;
+    };
+    deleted?: boolean;
+    object?: string;
+  };
+  event_attributes?: {
+    http_request?: {
+      client_ip?: string;
+      user_agent?: string;
+    };
+  };
+  instance_id?: string;
+  object: string;
+  timestamp: number;
+  type: 'user.created' | 'user.deleted';
+}
+export async function POST(request: NextRequest) {
+  try {
+    // 获取原始请求体
+    const rawBody = await request.text();
+
+    let event: ClerkWebhookEvent;
+
+    // 开发环境跳过签名校验
+    if (process.env.NODE_ENV === 'development') {
+      console.log('Development mode: skipping webhook signature verification');
+      try {
+        event = JSON.parse(rawBody) as ClerkWebhookEvent;
+      } catch (err) {
+        console.error('Failed to parse webhook body:', err);
+        return NextResponse.json(
+          { error: 'Invalid webhook body' },
+          { status: 400 }
+        );
+      }
+    } else {
+      // 生产环境进行签名校验
+      const headerPayload = await headers();
+      const svix_id = headerPayload.get('svix-id');
+      const svix_timestamp = headerPayload.get('svix-timestamp');
+      const svix_signature = headerPayload.get('svix-signature');
+
+      // 如果缺少必要的header，返回错误
+      if (!svix_id || !svix_timestamp || !svix_signature) {
+        return NextResponse.json(
+          { error: 'Missing webhook headers' },
+          { status: 400 }
+        );
+      }
+
+      // 获取webhook signing secret
+      const webhookSecret = process.env.CLERK_WEBHOOK_SECRET;
+      if (!webhookSecret) {
+        console.error('CLERK_WEBHOOK_SECRET is not configured');
+        return NextResponse.json(
+          { error: 'Webhook configuration error' },
+          { status: 500 }
+        );
+      }
+
+      // 验证webhook签名
+      try {
+        const wh = new Webhook(webhookSecret);
+        event = wh.verify(rawBody, {
+          'svix-id': svix_id,
+          'svix-timestamp': svix_timestamp,
+          'svix-signature': svix_signature,
+        }) as ClerkWebhookEvent;
+      } catch (err) {
+        console.error('Webhook signature verification failed:', err);
+        return NextResponse.json(
+          { error: 'Webhook signature verification failed' },
+          { status: 400 }
+        );
+      }
+    }
+
+    // Log the incoming webhook
+    const logId = await Apilogger.logClerkIncoming(`${event.type}`, {
+      clerk_user_id: event.data.id,
+      email: event.data.email_addresses?.[0]?.email_address,
+      fingerprint_id: event.data.unsafe_metadata?.fingerprint_id
+    }, event);
+
+    let processingResult = { success: true, message: 'Event processed successfully' };
+
+    try {
+      // 处理不同的事件类型
+      const { type } = event;
+
+      switch (type) {
+        case 'user.created':
+          await handleUserCreated(event);
+          break;
+        case 'user.deleted':
+          await handleUserDeleted(event);
+          break;
+        default:
+          console.log(`Unhandled event type: ${type}`);
+          processingResult = { success: false, message: `Unhandled event type: ${type}`};
+      }
+
+      // Update response in log
+      Apilogger.updateResponse(logId, processingResult);
+
+      return NextResponse.json({ received: true });
+    } catch (error) {
+      console.error('Webhook processing error:', error);
+      
+      // Update error response in log
+      const errorResult = { 
+        success: false, 
+        error: error instanceof Error ? error.message : 'Unknown error',
+        stack: error instanceof Error ? error.stack : undefined
+      };
+      Apilogger.updateResponse(logId, errorResult);
+      
+      return NextResponse.json(
+        { error: 'Internal server error' },
+        { status: 500 }
+      );
+    }
+  } catch (error) {
+    console.error('Webhook processing error:', error);
+    return NextResponse.json(
+      { error: 'Internal server error' },
+      { status: 500 }
+    );
+  }
+}
+
+/**
+ * 处理用户创建事件
+ */
+async function handleUserCreated(event: ClerkWebhookEvent) {
+  const { data } = event;
+  const clerkUserId = data.id;
+  const email = data.email_addresses?.[0]?.email_address;
+  const unsafeMetadata = data.unsafe_metadata;
+  const fingerprintId = unsafeMetadata?.fingerprint_id;
+  const userName = data.username 
+    ? data.username 
+    : [data.first_name, data.last_name].filter(Boolean).join(' ') || undefined;
+
+  console.log('Processing user.created event:', {
+    clerkUserId,
+    email,
+    fingerprintId,
+    userName
+  });
+
+  // 检查必要参数
+  if (!fingerprintId) {
+    console.error('Missing fingerprintId in webhook data, process flow error');
+    return;
+  }
+
+  if (!email) {
+    console.error('Missing email in webhook data');
+    return;
+  }
+
+  try {
+    // 按fingerprintId查询该设备的所有未注销过的用户记录，注销过的记录相当于是死数据
+    const existingUsers = await userService.findListByFingerprintId(fingerprintId);
+    if (!existingUsers || existingUsers.length === 0) {
+      console.error('Invalid fingerprintId in webhook data, process flow error');
+      return;
+    }
+
+    // 查找email相同的记录
+    const sameEmailUser = existingUsers.find(user => user.email === email);
+    if (sameEmailUser) {
+      // 同一账号，检查是否需要更新clerkUserId
+      if (sameEmailUser.clerkUserId !== clerkUserId) {
+        await userService.updateUser(sameEmailUser.userId, { clerkUserId, userName: userName, status: UserStatus.REGISTERED });
+        console.log(`Updated clerkUserId for user ${sameEmailUser.userId}`);
+      } else {
+        console.log(`User with email ${email} already exists, skipping duplicate message`);
+      }
+      return;
+    }
+
+    // 查找匿名用户（email为空且clerkUserId为空）
+    const anonymousUser = existingUsers.find(user => !user.email && !user.clerkUserId && user.status === UserStatus.ANONYMOUS );
+    if (anonymousUser) {
+      // 匿名用户升级
+      await userAggregateService.upgradeToRegistered(anonymousUser.userId, email, clerkUserId, userName);
+      console.log(`Successfully upgraded anonymous user ${anonymousUser.userId} to registered user`);
+      return;
+    }
+
+    // 同设备新账号，创建新用户
+    await userAggregateService.createNewRegisteredUser(clerkUserId, email, fingerprintId, userName);
+    console.log(`Created new user for device ${fingerprintId} with email ${email}`);
+    
+  } catch (error) {
+    console.error('Error handling user.created event:', error);
+    throw error;
+  }
+}
+
+/**
+ * 处理用户删除事件
+ */
+async function handleUserDeleted(event: ClerkWebhookEvent) {
+  const { data } = event;
+  const clerkUserId = data.id;
+
+  console.log('Processing user.deleted event:', { clerkUserId });
+
+  try {
+    const userId = await userAggregateService.handleUserUnregister(clerkUserId);
+    if (!userId) {
+      console.warn(`User not found, skipping oprate , (clerkUserId: ${clerkUserId})`);
+    } else {
+      console.log(`Successfully deleted user ${userId} , (clerkUserId: ${clerkUserId})`);
+    }
+  } catch (error) {
+    console.error('Error handling user.deleted event:', error);
+    throw error;
+  }
+}
+

package/src/app/api/webhook/stripe/route.ts

@@ -0,0 +1,93 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { headers } from 'next/headers';
+import { validateStripeWebhook } from '../../../../lib/stripe-config';
+import Stripe from 'stripe';
+import { Apilogger } from '../../../../services/database/index';
+import { handleStripeEvent } from '../../../../services//stripe/webhook-handler';
+
+// Disable body parsing, need raw body for signature verification
+export const runtime = 'nodejs';
+
+export async function POST(request: NextRequest) {
+  try {
+    // 1. Get raw request body and signature
+    const body = await request.text();
+    const headersList = await headers();
+    const signature = headersList.get('stripe-signature');
+
+    if (!signature) {
+      return NextResponse.json(
+        { error: 'Missing stripe-signature header' },
+        { status: 400 }
+      );
+    }
+
+    if (!process.env.STRIPE_WEBHOOK_SECRET) {
+      console.error('STRIPE_WEBHOOK_SECRET is not configured');
+      return NextResponse.json(
+        { error: 'Webhook configuration error' },
+        { status: 500 }
+      );
+    }
+
+    // 2. Validate webhook signature
+    const event = validateStripeWebhook(
+      body,
+      signature,
+      process.env.STRIPE_WEBHOOK_SECRET
+    );
+
+    console.log(`Received webhook event: ${event.type} | ID: ${event.id}`);
+
+    // 3. Log incoming webhook and capture log ID for later updates
+    const logId = await Apilogger.logStripeIncoming(event.type, event.id, event);
+
+    try {
+      // 4. Handle the event
+      await handleStripeEvent(event);
+
+      // 5. Update log with success response
+      const processingResult = {
+        success: true,
+        message: 'Event processed successfully'
+      };
+
+      Apilogger.updateResponse(logId, processingResult);
+
+      return NextResponse.json({ received: true });
+    } catch (handlerError) {
+      console.error('Stripe webhook processing error:', handlerError);
+
+      const errorResult = {
+        success: false,
+        error:
+          handlerError instanceof Error
+            ? handlerError.message
+            : 'Unknown error',
+        stack: handlerError instanceof Error ? handlerError.stack : undefined,
+      };
+
+      Apilogger.updateResponse(logId, errorResult);
+
+      return NextResponse.json(
+        { error: 'Webhook processing failed' },
+        { status: 500 }
+      );
+    }
+
+  } catch (error) {
+    console.error('Webhook error:', error);
+
+    if (error instanceof Stripe.errors.StripeSignatureVerificationError) {
+      return NextResponse.json(
+        { error: 'Invalid signature' },
+        { status: 400 }
+      );
+    }
+
+    return NextResponse.json(
+      { error: 'Webhook processing failed' },
+      { status: 500 }
+    );
+  }
+}

package/src/index.ts

@@ -0,0 +1,6 @@
+export * from './prisma';
+export * from './services/database';
+export * from './services/aggregate';
+export * from './services/context';
+export * from './services/stripe';
+export * from './lib';

package/src/lib/auth-utils.ts

@@ -0,0 +1,101 @@
+import { NextRequest } from 'next/server';
+import { userService } from '../services/database/index';
+import { User } from '../services/database/prisma-model-type';
+
+/**
+ * 认证结果类型
+ */
+export interface AuthResult {
+  userId: string;
+  user: User;
+  clerkUserId: string;
+}
+
+/**
+ * 从中间件设置的 Clerk ID 获取完整用户信息
+ */
+export async function getAuthenticatedUser(req: NextRequest): Promise<AuthResult> {
+  try {
+    const clerkUserId = req.headers.get('x-clerk-user-id');
+    if (!clerkUserId) {
+      throw new Error('Authentication required');
+    }
+    
+    const user = await userService.findByClerkUserId(clerkUserId);
+    if (!user) {
+      throw new Error('User not found in database');
+    }
+    
+    return {
+      userId: user.userId,
+      user,
+      clerkUserId
+    };
+  } catch (error) {
+    console.error('Error getting authenticated user:', error);
+    throw error;
+  }
+}
+
+/**
+ * 要求用户必须已认证，返回用户ID
+ */
+export async function requireAuth(req: NextRequest): Promise<string> {
+  const auth = await getAuthenticatedUser(req);
+  return auth.userId;
+}
+
+/**
+ * 要求用户必须已认证，返回完整用户信息
+ */
+export async function requireAuthWithUser(req: NextRequest): Promise<AuthResult> {
+  return await getAuthenticatedUser(req);
+}
+
+/**
+ * API Route版本的认证工具函数
+ */
+export class ApiAuthUtils {
+  private req: NextRequest;
+
+  constructor(req: NextRequest) {
+    this.req = req;
+  }
+
+  /**
+   * 要求用户必须已认证，返回用户ID
+   */
+  async requireAuth(): Promise<string> {
+    return await requireAuth(this.req);
+  }
+
+  /**
+   * 要求用户必须已认证，返回完整用户信息
+   */
+  async requireAuthWithUser(): Promise<AuthResult> {
+    return await requireAuthWithUser(this.req);
+  }
+
+  /**
+   * 获取用户ID（如果已认证）
+   */
+  async getUserId(): Promise<string | null> {
+    try {
+      const auth = await getAuthenticatedUser(this.req);
+      return auth.userId;
+    } catch {
+      return null;
+    }
+  }
+
+  /**
+   * 获取完整用户信息（如果已认证）
+   */
+  async getUser(): Promise<AuthResult | null> {
+    try {
+      return await getAuthenticatedUser(this.req);
+    } catch {
+      return null;
+    }
+  }
+}

package/src/lib/credit-init.ts

@@ -0,0 +1,9 @@
+// create app config
+export const creditsConfig = {
+  freeAmount: Number(process.env.CREDITS_INIT_FREE_AMOUNT) || 1,
+  freeRegisterAmount: Number(process.env.CREDITS_INIT_FREE_REGISTER_AMOUNT) || 2,
+  freeExpiredDays: Number(process.env.CREDITS_INIT_FREE_EXPIRED_DAYS) || 7,
+  oneTimeExpiredDays: Number(process.env.CREDITS_ONE_TIME_EXPIRED_DAYS) || 30
+};
+
+export const { freeAmount, freeRegisterAmount, freeExpiredDays, oneTimeExpiredDays } = creditsConfig;

package/src/lib/index.ts

@@ -0,0 +1,4 @@
+export * from './money-price-config';
+export * from './credit-init';
+export * from './stripe-config';
+export * from './auth-utils';

package/src/lib/money-price-config.ts

@@ -0,0 +1,168 @@
+import {
+  MoneyPriceConfig,
+  PaymentProviderConfig,
+  EnhancePricePlan,
+  getActiveProviderConfigUtil,
+  getCreditsFromPriceIdUtil,
+  getPriceConfigUtil
+} from '@windrun-huaiin/third-ui/main/server'
+
+export const moneyPriceConfig: MoneyPriceConfig = {
+  paymentProviders: {
+    stripe: {
+      provider: 'stripe',
+      enabled: true,
+      // 订阅模式产品
+      subscriptionProducts: {
+        F1: {
+          key: 'F1',
+          plans: {
+            monthly: {
+              priceId: 'free',
+              amount: 0,
+              currency: 'usd',
+              credits: 0
+            },
+            yearly: {
+              priceId: 'free',
+              amount: 0,
+              currency: 'usd',
+              credits: 0
+            }
+          }
+        },
+        P2: {
+          key: 'P2',
+          plans: {
+            monthly: {
+              priceId: process.env.STRIPE_PRO_MONTHLY_PRICE_ID!,
+              amount: Number(process.env.STRIPE_PRO_MONTHLY_AMOUNT!), // 10
+              currency: process.env.STRIPE_PRO_MONTHLY_CURRENCY!,
+              credits: Number(process.env.STRIPE_PRO_MONTHLY_CREDITS!)
+            },
+            yearly: {
+              priceId: process.env.STRIPE_PRO_YEARLY_PRICE_ID!,
+              amount: Number(process.env.STRIPE_PRO_YEARLY_AMOUNT!),
+              originalAmount: Number(process.env.STRIPE_PRO_MONTHLY_AMOUNT!), // 10,
+              discountPercent: Number(process.env.STRIPE_PRO_DISCOUNT_PERCENT),
+              currency: process.env.STRIPE_PRO_YEARLY_CURRENCY!,
+              credits: Number(process.env.STRIPE_PRO_YEARLY_CREDITS!) 
+            }
+          }
+        },
+        U3: {
+          key: 'U3',
+          plans: {
+            monthly: {
+              priceId: process.env.STRIPE_ULTRA_MONTHLY_PRICE_ID!,
+              amount: Number(process.env.STRIPE_ULTRA_MONTHLY_AMOUNT!), 
+              currency: process.env.STRIPE_ULTRA_MONTHLY_CURRENCY!,
+              credits: Number(process.env.STRIPE_ULTRA_MONTHLY_CREDITS!) 
+            },
+            yearly: {
+              priceId: process.env.STRIPE_ULTRA_YEARLY_PRICE_ID!,
+              amount: Number(process.env.STRIPE_ULTRA_YEARLY_AMOUNT!), 
+              originalAmount: Number(process.env.STRIPE_ULTRA_MONTHLY_AMOUNT!), 
+              discountPercent: Number(process.env.STRIPE_ULTRA_DISCOUNT_PERCENT),
+              currency: process.env.STRIPE_ULTRA_YEARLY_CURRENCY!,
+              credits: Number(process.env.STRIPE_ULTRA_YEARLY_CREDITS!) 
+            }
+          }
+        }
+      },
+      // 积分包产品
+      creditPackProducts: {
+        F1: {
+          key: 'F1',
+          priceId: process.env.STRIPE_ONE_TIME_LESS_PRICE_ID!,
+          amount: Number(process.env.STRIPE_ONE_TIME_LESS_AMOUNT!),
+          currency: process.env.STRIPE_ONE_TIME_LESS_CURRENCY!,
+          credits: Number(process.env.STRIPE_ONE_TIME_LESS_CREDITS!)
+        },
+        P2: {
+          key: 'P2',
+          priceId: process.env.STRIPE_ONE_TIME_MID_PRICE_ID!,
+          amount: Number(process.env.STRIPE_ONE_TIME_MID_AMOUNT!),
+          currency: process.env.STRIPE_ONE_TIME_MID_CURRENCY!,
+          credits: Number(process.env.STRIPE_ONE_TIME_MID_CREDITS!)
+        },
+        U3: {
+          key: 'U3',
+          priceId: process.env.STRIPE_ONE_TIME_MORE_PRICE_ID!,
+          amount: Number(process.env.STRIPE_ONE_TIME_MORE_AMOUNT!),
+          currency: process.env.STRIPE_ONE_TIME_MORE_CURRENCY!,
+          credits: Number(process.env.STRIPE_ONE_TIME_MORE_CREDITS!)
+        }
+      }
+    }
+  },
+  
+  activeProvider: process.env.ACTIVE_PAYMENT_PROVIDER || 'stripe',
+  
+  display: {
+    currency: '$',
+    locale: 'en',
+    minFeaturesCount: 4
+  }
+};
+
+// ============ 应用层wrapper - 隐藏moneyPriceConfig细节 ============
+
+/**
+ * 获取当前激活的支付供应商配置
+ *
+ * 🔒 安全设计：
+ * - wrapper函数隐藏moneyPriceConfig
+ * - util层负责从config中提取激活的provider配置
+ * - 外部只能通过这个wrapper访问，看不到config对象
+ *
+ * @returns 当前激活的支付供应商配置
+ */
+export function getActiveProviderConfig(): PaymentProviderConfig {
+  return getActiveProviderConfigUtil(moneyPriceConfig);
+}
+
+/**
+ * 根据 priceId 获取对应的积分数量
+ *
+ * 🔒 安全设计：
+ * - wrapper函数隐藏moneyPriceConfig
+ * - util层负责解析config并提取结果
+ * - 外部只能通过这个wrapper访问，看不到config对象
+ *
+ * @param priceId - 查询的价格ID
+ * @param _provider - 保留参数（向后兼容），暂未使用
+ * @returns 对应的积分数量，或null
+ */
+export function getCreditsFromPriceId(priceId?: string, _provider?: string): number | null {
+  return getCreditsFromPriceIdUtil(priceId, moneyPriceConfig);
+}
+
+/**
+ * 根据查询参数获取价格配置
+ *
+ * 支持三种查询方式：
+ * 1. 按 priceId 查询：getPriceConfig(priceId='price_xxx')
+ * 2. 按 plan 和 billingType 查询：getPriceConfig(undefined, 'P2', 'monthly')
+ * 3. 按 plan 查询：getPriceConfig(undefined, 'P2')
+ *
+ * 🔒 安全设计：
+ * - wrapper函数隐藏moneyPriceConfig
+ * - util层负责解析config并提取匹配的结果
+ * - 外部只能通过这个wrapper访问，看不到config对象
+ *
+ * @param priceId - 查询的价格ID（可选）
+ * @param plan - 查询的套餐名称如'P2'、'U3'（可选）
+ * @param billingType - 查询的计费类型如'monthly'、'yearly'（可选）
+ * @param _provider - 保留参数（向后兼容），暂未使用
+ * @returns 匹配的价格配置，包含计算好的元数据（priceName、description、interval）
+ */
+export function getPriceConfig(
+  priceId?: string,
+  plan?: string,
+  billingType?: string,
+  _provider?: string
+): (EnhancePricePlan & { priceName: string; description: string; interval?: string }) | null {
+  return getPriceConfigUtil(priceId, plan, billingType, moneyPriceConfig);
+}
+