From 230dc2a12a9758844ab636e7bca17b0ecae9ad97 Mon Sep 17 00:00:00 2001
From: Nathan Woodburn <github@nathan.woodburn.au>
Date: Thu, 24 Aug 2023 16:41:38 +1000
Subject: [PATCH] main: Added test stripe verification

---
 master/main.py          | 38 ++++++++++++++++++++++++++------------
 master/requirements.txt |  3 ++-
 2 files changed, 28 insertions(+), 13 deletions(-)

diff --git a/master/main.py b/master/main.py
index 4ae4b03..355063e 100644
--- a/master/main.py
+++ b/master/main.py
@@ -234,20 +234,34 @@ def tlsa():
 
 
 @app.route('/stripe', methods=['POST'])
-def stripe():
-     # Log all requests
-    print(request.json)
-    # Log for docker
+def stripeapi():
     print(request.json, flush=True)
-    # Get API header
-    api_key = request.headers.get('key')
-    if api_key == None:
-        return jsonify({'error': 'Invalid API key', 'success': 'false'})
-    if api_key != os.getenv('STRIPE_KEY'):
-        return jsonify({'error': 'Invalid API key', 'success': 'false'})
-    
-   
+    print(request.headers, flush=True)
+    payload = request.data
+    stripe.api_key = os.getenv('STRIPE_SECRET')
+    endpoint_secret = os.getenv('STRIPE_ENDPOINT_SECRET')
+    sig_header = request.headers.get('HTTP_STRIPE_SIGNATURE')
+    events = None
+    try:
+        event = stripe.Webhook.construct_event(
+        payload, sig_header, endpoint_secret
+        )
+    except ValueError as e:
+    # Invalid payload
+        return jsonify({'success': 'false'})
+    except stripe.error.SignatureVerificationError as e:
+        return jsonify({'success': 'false'})
 
+    # Handle the event
+    if event.type == 'payment_intent.succeeded':
+        payment_intent = event.data.object # contains a stripe.PaymentIntent
+        print('PaymentIntent was successful!', flush=True)
+    elif event.type == 'payment_method.attached':
+        payment_method = event.data.object # contains a stripe.PaymentMethod
+        print('PaymentMethod was attached to a Customer!', flush=True)
+    # ... handle other event types
+    else:
+        print('Unhandled event type {}'.format(event.type))
     return jsonify({'success': 'true'})
 
 
diff --git a/master/requirements.txt b/master/requirements.txt
index 01ad091..9a8f17f 100644
--- a/master/requirements.txt
+++ b/master/requirements.txt
@@ -1,4 +1,5 @@
 python-dotenv
 requests
 flask
-jsonify
\ No newline at end of file
+jsonify
+stripe
\ No newline at end of file