stripe_webhook.js

gistfile1.txt

import { NextResponse } from 'next/server';
import { headers } from 'next/headers';
import Stripe from 'stripe';
import connectMongo from '@/libs/mongoose';
import User from '@/models/User';

const stripe = new Stripe(process.env.STRIPE_SECRET_KEY);
const webhookSecret = process.env.STRIPE_WEBHOOK_SECRET;

export async function POST(req) {
  await connectMongo();

  const body = await req.text();

  const signature = headers().get('stripe-signature');

  let data;
  let eventType;
  let event;

  // Verify Stripe event is legit
  try {
    event = stripe.webhooks.constructEvent(body, signature, webhookSecret);
  } catch (err) {
    console.error(`Webhook signature verification failed. ${err.message}`);
    return NextResponse.json({ error: err.message }, { status: 400 });
  }

  data = event.data;
  eventType = event.type;

  try {
    switch (eventType) {
      case 'checkout.session.completed': {
        const session = await stripe.checkout.sessions.retrieve(
          data.object.id,
          {
            expand: ['line_items']
          }
        );
        const customerId = session?.customer;
        const customer = await stripe.customers.retrieve(customerId);
        const priceId = session?.line_items?.data[0]?.price.id;

        if (customer.email) {
          user = await User.findOne({ email: customer.email });

          if (!user) {
            user = await User.create({
              email: customer.email,
              name: customer.name,
              customerId
            });
            await user.save();
          }
        } else {
          console.error('No user found');
          throw new Error('No user found');
        }

        // Update user data + Grant user access to your product. It's a boolean in the database, but could be a number of credits...
        user.priceId = priceId;
        user.hasAccess = true;
        await user.save();

        // Extra: >>>>> send email to dash <<<<<

        break;
      }

      case 'customer.subscription.deleted': {
        // X Revoke access to the product
        // The customer might have changed the plan (higher or lower plan, cancel soon etc...)
        const subscription = await stripe.subscriptions.retrieve(
          data.object.id
        );
        const user = await User.findOne({
          customerId: subscription.customer
        });

        // Revoke access to your product
        user.hasAccess = false;
        await user.save();

        break;
      }

      default:
      // Unhandled event type
    }
  } catch (e) {
    console.error(
      'stripe error: ' + e.message + ' | EVENT TYPE: ' + eventType
    );
  }

  return NextResponse.json({});
}