alpha v0.0.1

twopg · Apr 19, 2020 · efd50bf · efd50bf
1 parent 708e1ca
commit efd50bf
Show file tree

Hide file tree

Showing 4 changed files with 52 additions and 147 deletions.
diff --git a/api/routes/api-routes.ts b/api/routes/api-routes.ts
@@ -9,8 +9,7 @@ import Stripe from 'stripe';
 import bodyParser from 'body-parser';
 import { SavedUser } from '../../models/user';
 
-export const router = Router(),
-             endpointSecret = 'whsec_uNgUHx7T0J1vbOgcTuRCEjXGZYTMvqs0';
+export const router = Router();
 
 let commands: CommandDocument[] = [];
 SavedCommand.find().then(cmds => commands = cmds);
@@ -28,6 +27,9 @@ router.get('/auth', async (req, res) => {
 
 router.post('/webhook', async(req, res) => {
   try {
+    // TODO: ensure it matches a stripe signature
+    // -> this will prevent anyone giving themselves 2PG+ for free
+    if (!req.headers['stripe-signature']) return;
     // stripe.webhooks.signature
       // .parseHeader(req.headers['stripe-signature']);
 
@@ -37,13 +39,10 @@ router.post('/webhook', async(req, res) => {
       return res.json({ success: true });
     }
     res.json({ received: true });
-  } catch (error) { res.status(400).send(error); console.log(error);
-  } 
+  } catch (error) { res.status(400).send(error); } 
 });
 
-async function giveUserPlus(id: string) {
-  console.log('give ' + id + ' premium');
-
+async function giveUserPlus(id: string) {  
   const savedUser = await SavedUser.findById(id);
   savedUser.premium = true;
   savedUser.save();

diff --git a/api/routes/user-routes.ts b/api/routes/user-routes.ts
@@ -19,7 +19,7 @@ router.get('/', async (req, res) => {
 const items = [
     {
         name: '2PG+',
-        description: 'Support 2PG, and unlock exclusive user features!',
+        description: 'Support 2PG, and unlock exclusive features!',
         amount: 500,
         currency: 'usd',
         quantity: 1,