fix architecture and write new tests

apps/api/src/modules/subscriptions/subscription.routes.ts

@@ -4,6 +4,7 @@ import { requireTenant } from '../../middleware/requireTenant'
 import { requireRole } from '../../middleware/requireRole'
 import { parseBody } from '../../http/validate'
 import { ok } from '../../http/respond'
+import { getRawBodyString, parseRawJsonBody } from '../../http/webhooks'
 import * as amanpay from '../../services/amanpayService'
 import * as paypal from '../../services/paypalService'
 import * as service from './subscription.service'
@@ -23,7 +24,7 @@ const router        = Router()
 // ─── Public ────────────────────────────────────────────────────
 
 publicRouter.get('/plans', (_req, res, next) => {
-  service.getPlans().then((d) => ok(res, d)).catch(next)
+  service.getPlans().then((d: any) => ok(res, d)).catch(next)
 })
 
 publicRouter.get('/providers', (_req, res) => {
@@ -31,29 +32,31 @@ publicRouter.get('/providers', (_req, res) => {
 })
 
 publicRouter.get('/features', (_req, res, next) => {
-  service.getPlanFeatures().then((d) => ok(res, d)).catch(next)
+  service.getPlanFeatures().then((d: any) => ok(res, d)).catch(next)
 })
 
 // ─── Webhooks (no auth) ────────────────────────────────────────
 
 webhookRouter.post('/webhooks/amanpay', async (req, res, next) => {
   try {
-    const rawBody   = JSON.stringify(req.body)
+    const rawBody   = getRawBodyString(req)
+    const payload   = parseRawJsonBody(req)
     const signature = (req.headers['x-amanpay-signature'] as string) ?? ''
     if (!amanpay.isConfigured() || !amanpay.verifyWebhookSignature(rawBody, signature)) {
       return res.status(401).json({ error: 'invalid_signature' })
     }
-    await service.handleAmanpayWebhook(req.body)
+    await service.handleAmanpayWebhook(payload, rawBody)
     res.json({ received: true })
   } catch (err) { next(err) }
 })
 
 webhookRouter.post('/webhooks/paypal', async (req, res, next) => {
   try {
-    const rawBody = JSON.stringify(req.body)
+    const rawBody = getRawBodyString(req)
+    const payload = parseRawJsonBody(req)
     const isValid = await paypal.verifyWebhookEvent(req.headers as Record<string, string>, rawBody)
     if (!paypal.isConfigured() || !isValid) return res.status(401).json({ error: 'invalid_signature' })
-    await service.handlePaypalWebhook(req.body)
+    await service.handlePaypalWebhook(payload, rawBody)
     res.json({ received: true })
   } catch (err) { next(err) }
 })