mirror of
https://github.com/plausible/analytics.git
synced 2024-12-29 20:42:01 +03:00
44afbaa2f9
* Wrap paddle actions with DB transactions * Bow to credo * Make the paddle transactions crash when applicable * s/changeset/details
77 lines
2.1 KiB
Elixir
77 lines
2.1 KiB
Elixir
defmodule PlausibleWeb.Api.PaddleController do
|
|
use PlausibleWeb, :controller
|
|
use Plausible.Repo
|
|
require Logger
|
|
|
|
plug :verify_signature
|
|
|
|
def webhook(conn, %{"alert_name" => "subscription_created"} = params) do
|
|
Plausible.Billing.subscription_created(params)
|
|
|> webhook_response(conn, params)
|
|
end
|
|
|
|
def webhook(conn, %{"alert_name" => "subscription_updated"} = params) do
|
|
Plausible.Billing.subscription_updated(params)
|
|
|> webhook_response(conn, params)
|
|
end
|
|
|
|
def webhook(conn, %{"alert_name" => "subscription_cancelled"} = params) do
|
|
Plausible.Billing.subscription_cancelled(params)
|
|
|> webhook_response(conn, params)
|
|
end
|
|
|
|
def webhook(conn, %{"alert_name" => "subscription_payment_succeeded"} = params) do
|
|
Plausible.Billing.subscription_payment_succeeded(params)
|
|
|> webhook_response(conn, params)
|
|
end
|
|
|
|
def webhook(conn, _params) do
|
|
send_resp(conn, 404, "") |> halt
|
|
end
|
|
|
|
@paddle_key File.read!("priv/paddle.pem")
|
|
|
|
def verify_signature(conn, _opts) do
|
|
signature = Base.decode64!(conn.params["p_signature"])
|
|
|
|
msg =
|
|
Map.delete(conn.params, "p_signature")
|
|
|> Enum.map(fn {key, val} -> {key, "#{val}"} end)
|
|
|> List.keysort(0)
|
|
|> PhpSerializer.serialize()
|
|
|
|
[key_entry] = :public_key.pem_decode(@paddle_key)
|
|
public_key = :public_key.pem_entry_decode(key_entry)
|
|
|
|
if :public_key.verify(msg, :sha, signature, public_key) do
|
|
conn
|
|
else
|
|
send_resp(conn, 400, "") |> halt
|
|
end
|
|
end
|
|
|
|
def verified_signature?(params) do
|
|
signature = Base.decode64!(params["p_signature"])
|
|
|
|
msg =
|
|
Map.delete(params, "p_signature")
|
|
|> Enum.map(fn {key, val} -> {key, "#{val}"} end)
|
|
|> List.keysort(0)
|
|
|> PhpSerializer.serialize()
|
|
|
|
[key_entry] = :public_key.pem_decode(@paddle_key)
|
|
public_key = :public_key.pem_entry_decode(key_entry)
|
|
:public_key.verify(msg, :sha, signature, public_key)
|
|
end
|
|
|
|
defp webhook_response({:ok, _}, conn, _params) do
|
|
json(conn, "")
|
|
end
|
|
|
|
defp webhook_response({:error, details}, conn, _params) do
|
|
Logger.error("Error processing Paddle webhook: #{inspect(details)}")
|
|
|
|
conn |> send_resp(400, "") |> halt
|
|
end
|
|
end
|