refractor code,

2026-05-21 12:35:49 -04:00
parent e74681e810
commit f009ca10c6
158 changed files with 215801 additions and 5884 deletions
@@ -0,0 +1,99 @@
+import { Router } from 'express'
+import { requireCompanyAuth } from '../../middleware/requireCompanyAuth'
+import { requireTenant } from '../../middleware/requireTenant'
+import { requireRole } from '../../middleware/requireRole'
+import { parseBody } from '../../http/validate'
+import { ok } from '../../http/respond'
+import * as amanpay from '../../services/amanpayService'
+import * as paypal from '../../services/paypalService'
+import * as service from './subscription.service'
+import { checkoutSchema, changePlanSchema, capturePaypalSchema } from './subscription.schemas'
+
+const router = Router()
+
+// ─── Public ────────────────────────────────────────────────────
+
+router.get('/plans', (_req, res) => {
+  ok(res, { data: service.getPlans() })
+})
+
+router.get('/providers', (_req, res) => {
+  ok(res, { data: service.getProviders() })
+})
+
+// ─── Webhooks (no auth) ────────────────────────────────────────
+
+router.post('/webhooks/amanpay', async (req, res, next) => {
+  try {
+    const rawBody  = JSON.stringify(req.body)
+    const signature = (req.headers['x-amanpay-signature'] as string) ?? ''
+    if (amanpay.isConfigured() && !amanpay.verifyWebhookSignature(rawBody, signature)) {
+      return res.status(401).json({ error: 'invalid_signature' })
+    }
+    await service.handleAmanpayWebhook(req.body)
+    res.json({ received: true })
+  } catch (err) { next(err) }
+})
+
+router.post('/webhooks/paypal', async (req, res, next) => {
+  try {
+    const rawBody = JSON.stringify(req.body)
+    const isValid = await paypal.verifyWebhookEvent(req.headers as Record<string, string>, rawBody)
+    if (paypal.isConfigured() && !isValid) return res.status(401).json({ error: 'invalid_signature' })
+    await service.handlePaypalWebhook(req.body)
+    res.json({ received: true })
+  } catch (err) { next(err) }
+})
+
+// ─── PayPal capture (auth but no subscription check) ──────────
+
+router.post('/capture-paypal', requireCompanyAuth, requireTenant, async (req, res, next) => {
+  try {
+    const { paypalOrderId } = parseBody(capturePaypalSchema, req)
+    ok(res, { data: await service.capturePaypal(req.companyId, paypalOrderId) })
+  } catch (err) { next(err) }
+})
+
+// ─── Authenticated ────────────────────────────────────────────
+
+router.use(requireCompanyAuth, requireTenant)
+
+router.get('/me', async (req, res, next) => {
+  try {
+    ok(res, { data: await service.getSubscription(req.companyId) })
+  } catch (err) { next(err) }
+})
+
+router.get('/invoices', async (req, res, next) => {
+  try {
+    ok(res, { data: await service.getInvoices(req.companyId) })
+  } catch (err) { next(err) }
+})
+
+router.post('/checkout', requireRole('OWNER'), async (req, res, next) => {
+  try {
+    const body = parseBody(checkoutSchema, req)
+    ok(res, { data: await service.checkout(req.companyId, body) })
+  } catch (err) { next(err) }
+})
+
+router.post('/change-plan', requireRole('OWNER'), async (req, res, next) => {
+  try {
+    const body = parseBody(changePlanSchema, req)
+    ok(res, { data: await service.changePlan(req.companyId, body) })
+  } catch (err) { next(err) }
+})
+
+router.post('/cancel', requireRole('OWNER'), async (req, res, next) => {
+  try {
+    ok(res, { data: await service.cancel(req.companyId) })
+  } catch (err) { next(err) }
+})
+
+router.post('/resume', requireRole('OWNER'), async (req, res, next) => {
+  try {
+    ok(res, { data: await service.resume(req.companyId) })
+  } catch (err) { next(err) }
+})
+
+export default router