Diff -- /var/www/vhosts/3dshawn.com/ptmatrix.3dshawn.com/stripe_webhook.cgi
Diff

/var/www/vhosts/3dshawn.com/ptmatrix.3dshawn.com/stripe_webhook.cgi

added on local at 2026-07-01 12:34:42

Added
+163
lines
Removed
-0
lines
Context
0
unchanged
Blobs
from
to 4e07c7165252
Restore this content →
Unified diff
Naive LCS-based line diff. Additions in emerald, deletions in rose. Both sides decompressed live from BLOB_STORE.
1#!/usr/bin/perl
2
3##################################################################################################################################
4# ______ ____ ____ ______ ______ ____ ___ __ ___ ______ _ __ ____ ____ __ __ _ __ _____ ____
5# / ____// __ \ / __ \ / ____/ / ____// __ \ / | / |/ // ____/| | / // __ \ / __ \ / //_/ | | / /|__ / / __ \
6# / / / / / // / / // __/ / /_ / /_/ // /| | / /|_/ // __/ | | /| / // / / // /_/ // ,< | | / / /_ < / / / /
7# / /___ / /_/ // /_/ // /___ / __/ / _, _// ___ | / / / // /___ | |/ |/ // /_/ // _, _// /| | | |/ / ___/ /_ / /_/ /
8# \____/ \____//_____//_____/ /_/ /_/ |_|/_/ |_|/_/ /_//_____/ |__/|__/ \____//_/ |_|/_/ |_| |___/ /____/(_)\____/
9#
10# - Written by: Shawn Pickering
11# - shawn@shawnpickering.com
12##################################################################################################################################
13use strict;
14use lib '/var/www/vhosts/3dshawn.com/ptmatrix.3dshawn.com';
15
16
17#############################################################
18## Variables
19#############################################################
20
21
22
23############################################################
24# Modules
25############################################################
26use CGI; my $query = new CGI;
27use MODS::DBConnect; my $db = new MODS::DBConnect;
28use MODS::PTMatrix::Config; my $config = new MODS::PTMatrix::Config; my $database_name = $config->settings('database_name');
29use MODS::PTMatrix::PM;
30use MODS::PTMatrix::Stripe;
31use JSON::PP qw(decode_json);
32
33
34
35############################################################
36# Program Controls
37############################################################
38$|=1;
39&stripe_event;
40
41
42############################################################
43# Subroutines
44############################################################
45sub stripe_event{
46 #Receive raw JSON from Stripe (with Stripe-Signature header), verify, dispatch.
47 #All events are stored in stripe_events for idempotency + audit.
48
49 my $secret = $config->settings('stripe_webhook_secret') || '';
50
51 #Read the raw body (NOT through CGI - we need it byte-exact for signature verify)
52 binmode STDIN;
53 my $body = '';
54 my $len = $ENV{CONTENT_LENGTH} || 0;
55 read(STDIN, $body, $len) if $len;
56
57 my $sig = $ENV{HTTP_STRIPE_SIGNATURE} || '';
58
59 #When secret is set, REQUIRE a valid signature
60 if($secret && !MODS::PTMatrix::Stripe::verify_webhook_sig($body, $sig, $secret)){
61 print qq~Status: 400 Bad Signature\nContent-Type: text/plain\n\nbad signature\n~;
62 return;
63 }
64
65 my $ev;
66 eval { $ev = decode_json($body); };
67 if($@ || !$ev || !$ev->{id} || !$ev->{type}){
68 print qq~Status: 400 Bad JSON\nContent-Type: text/plain\n\nbad json\n~;
69 return;
70 }
71
72 my $id_q = MODS::PTMatrix::PM::sql_quote($ev->{id});
73 my $type_q = MODS::PTMatrix::PM::sql_quote($ev->{type});
74 my $payload_q = MODS::PTMatrix::PM::sql_quote($body);
75
76 my $dbh = $db->db_connect();
77
78 #Idempotency - skip if we already saw this event id
79 my $already = $db->db_readwrite($dbh, qq~SELECT id FROM `${database_name}`.stripe_events WHERE id='$id_q' LIMIT 1~, $ENV{SCRIPT_NAME}, __LINE__);
80 if($already){
81 $db->db_disconnect($dbh);
82 print qq~Content-Type: text/plain\n\nalready processed\n~;
83 return;
84 }
85
86 #Record the event row first so we have a paper trail even if the dispatch dies
87 $db->db_readwrite($dbh, qq~INSERT INTO `${database_name}`.stripe_events (id, event_type, payload, received_at) VALUES ('$id_q', '$type_q', '$payload_q', NOW())~, $ENV{SCRIPT_NAME}, __LINE__);
88
89 my $data = $ev->{data} && $ev->{data}->{object} ? $ev->{data}->{object} : {};
90
91 if ($ev->{type} eq 'checkout.session.completed') {&handle_checkout_completed($dbh, $data);}
92 elsif($ev->{type} eq 'invoice.payment_succeeded') {&handle_invoice_paid($dbh, $data);}
93 elsif($ev->{type} eq 'customer.subscription.deleted') {&handle_subscription_deleted($dbh, $data);}
94
95 #Mark the event as processed
96 $db->db_readwrite($dbh, qq~UPDATE `${database_name}`.stripe_events SET processed_at=NOW() WHERE id='$id_q'~, $ENV{SCRIPT_NAME}, __LINE__);
97 $db->db_disconnect($dbh);
98
99 print qq~Content-Type: text/plain\n\nok\n~;
100}
101
102sub handle_checkout_completed{
103 my($dbh, $data) = @_;
104
105 my $cid = $data->{metadata} && $data->{metadata}->{company_id} ? ($data->{metadata}->{company_id} + 0) : 0;
106 my $plan = $data->{metadata} && $data->{metadata}->{plan_tier} ? $data->{metadata}->{plan_tier} : '';
107 my $cust = $data->{customer} || '';
108 my $subid = $data->{subscription} || '';
109
110 return unless $cid && $plan =~ /^(free|starter|pro|business|enterprise)$/;
111
112 my $plan_q = MODS::PTMatrix::PM::sql_quote($plan);
113 my $cust_q = MODS::PTMatrix::PM::sql_quote($cust);
114 my $sub_q = MODS::PTMatrix::PM::sql_quote($subid);
115
116 #Bump the plan, store the customer + sub IDs, blank the trial timestamp
117 $db->db_readwrite($dbh, qq~UPDATE `${database_name}`.companies SET plan_tier='$plan_q', stripe_customer_id='$cust_q', stripe_subscription_id='$sub_q', trial_ends_at=NULL WHERE id='$cid'~, $ENV{SCRIPT_NAME}, __LINE__);
118
119 #Any pending plan change flag is now satisfied
120 $db->db_readwrite($dbh, qq~DELETE FROM `${database_name}`.company_settings WHERE company_id='$cid' AND setting_key='pending_plan_change'~, $ENV{SCRIPT_NAME}, __LINE__);
121
122 MODS::PTMatrix::PM::audit($cid, 0, 'billing.activated', 'company', $cid, $plan);
123}
124
125sub handle_invoice_paid{
126 my($dbh, $data) = @_;
127
128 my $sid = $data->{subscription} || '';
129 my $cust = $data->{customer} || '';
130 my $invno = $data->{number} || $data->{id} || '';
131 my $amt = ($data->{amount_paid} || 0) + 0;
132 my $amtd = ($data->{amount_due} || 0) + 0;
133 my $cur = uc($data->{currency} || 'USD');
134 my $hosted = $data->{hosted_invoice_url} || '';
135 my $stripe_inv_q = MODS::PTMatrix::PM::sql_quote($data->{id} || '');
136 my $sid_q = MODS::PTMatrix::PM::sql_quote($sid);
137 my $cust_q = MODS::PTMatrix::PM::sql_quote($cust);
138 my $invno_q = MODS::PTMatrix::PM::sql_quote($invno);
139 my $hosted_q = MODS::PTMatrix::PM::sql_quote($hosted);
140
141 #Find the company by the stripe_customer_id we stored at checkout
142 my $c = $db->db_readwrite($dbh, qq~SELECT id FROM `${database_name}`.companies WHERE stripe_customer_id='$cust_q' LIMIT 1~, $ENV{SCRIPT_NAME}, __LINE__);
143 return unless $c && $c->{id};
144
145 #Upsert the invoice row - idempotent on stripe_invoice_id
146 $db->db_readwrite($dbh, qq~INSERT INTO `${database_name}`.invoices (company_id, invoice_number, status, amount_due_cents, amount_paid_cents, currency, stripe_invoice_id, hosted_invoice_url, paid_at, created_at) VALUES ('$c->{id}', '$invno_q', 'paid', '$amtd', '$amt', '$cur', '$stripe_inv_q', '$hosted_q', NOW(), NOW()) ON DUPLICATE KEY UPDATE status='paid', amount_paid_cents=VALUES(amount_paid_cents), hosted_invoice_url=VALUES(hosted_invoice_url), paid_at=NOW()~, $ENV{SCRIPT_NAME}, __LINE__);
147
148 MODS::PTMatrix::PM::audit($c->{id}, 0, 'billing.invoice_paid', 'company', $c->{id}, "$amt $cur");
149}
150
151sub handle_subscription_deleted{
152 my($dbh, $data) = @_;
153
154 my $cust = $data->{customer} || '';
155 my $cust_q = MODS::PTMatrix::PM::sql_quote($cust);
156
157 my $c = $db->db_readwrite($dbh, qq~SELECT id FROM `${database_name}`.companies WHERE stripe_customer_id='$cust_q' LIMIT 1~, $ENV{SCRIPT_NAME}, __LINE__);
158 return unless $c && $c->{id};
159
160 $db->db_readwrite($dbh, qq~UPDATE `${database_name}`.companies SET status='cancelled' WHERE id='$c->{id}'~, $ENV{SCRIPT_NAME}, __LINE__);
161
162 MODS::PTMatrix::PM::audit($c->{id}, 0, 'billing.subscription_cancelled', 'company', $c->{id});
163}
Keyboard: j next diff k previous diff g top G bottom r restore c compile-check ? help