Integrations

import Stripe from "stripe";
 
const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!);
 
export async function POST(req: Request) {
  const raw = await req.text();
  const event = stripe.webhooks.constructEvent(
    raw,
    req.headers.get("stripe-signature")!,
    process.env.STRIPE_WEBHOOK_SECRET!,
  );
 
  if (event.type === "checkout.session.completed") {
    const session = event.data.object as Stripe.Checkout.Session;
    const amount = ((session.amount_total ?? 0) / 100).toFixed(2);
    const res = await fetch("https://api.koltrix.com/api/v2/emails", {
      method: "POST",
      headers: {
        Authorization: `Bearer ${process.env.KOLTRIX_KEY}`,
        "Content-Type": "application/json",
        "Idempotency-Key": event.id,
      },
      body: JSON.stringify({
        from: "Acme Billing <[email protected]>",
        to: [session.customer_details!.email!],
        subject: "Your Acme receipt",
        body_html: `<p>Thanks for your order of ${amount} ${session.currency?.toUpperCase()}.</p>`,
      }),
    });
    // Let Stripe retry if Koltrix couldn't take it; the key prevents duplicates.
    if (!res.ok && res.status >= 500) return new Response("retry", { status: 500 });
  }
  return new Response("ok");
}

export async function POST(req: Request) {
  // Verify X-Hub-Signature-256 here before trusting the payload.
  const { action, pull_request, repository } = await req.json();
  if (action !== "opened" || pull_request.base.ref !== "main") {
    return new Response("ignored");
  }
 
  await fetch("https://api.koltrix.com/api/v2/emails", {
    method: "POST",
    headers: {
      Authorization: `Bearer ${process.env.KOLTRIX_KEY}`,
      "Content-Type": "application/json",
      "Idempotency-Key": `pr-${repository.id}-${pull_request.number}-opened`,
    },
    body: JSON.stringify({
      from: "[email protected]",
      to: ["[email protected]"],
      subject: `[${repository.full_name}] ${pull_request.title}`,
      body_html: `<p><a href="${pull_request.html_url}">Review #${pull_request.number}</a></p>`,
    }),
  });
  return new Response("ok");
}

import crypto from "node:crypto";
 
export async function POST(req: Request) {
  const raw = await req.text();
  const expected =
    "sha256=" +
    crypto.createHmac("sha256", process.env.KOLTRIX_WEBHOOK_SECRET!).update(raw).digest("hex");
  const given = req.headers.get("x-koltrix-signature") ?? "";
  if (
    given.length !== expected.length ||
    !crypto.timingSafeEqual(Buffer.from(given), Buffer.from(expected))
  ) {
    return new Response("bad signature", { status: 401 });
  }
 
  const event = JSON.parse(raw);
  if (event.event === "message.bounced") {
    await fetch(process.env.SLACK_WEBHOOK_URL!, {
      method: "POST",
      headers: { "Content-Type": "application/json" },
      body: JSON.stringify({
        text: `:warning: "${event.subject}" bounced (${event.message_id}): ${event.error}`,
      }),
    });
  }
  return new Response("ok");
}