initial commit: rocket.new export of broadcastbeat

src/app/api/accounting/stripe-webhook/route.ts

@@ -0,0 +1,51 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { createClient } from '@/lib/supabase/server';
+
+
+// Stub — Stripe credentials will be added later
+export async function POST(request: NextRequest) {
+  const webhookSecret = process.env.STRIPE_WEBHOOK_SECRET_RMP;
+  if (!webhookSecret) {
+    return NextResponse.json({ error: 'Stripe not configured' }, { status: 503 });
+  }
+
+  // TODO: Verify Stripe webhook signature when STRIPE_WEBHOOK_SECRET_RMP is set
+  // const sig = request.headers.get('stripe-signature');
+  // const event = stripe.webhooks.constructEvent(body, sig, webhookSecret);
+
+  const body = await request.json();
+  const eventType = body?.type;
+
+  if (eventType === 'payment_intent.succeeded') {
+    const supabase = await createClient();
+    const stripeId = body?.data?.object?.id;
+    const amountCents = body?.data?.object?.amount;
+
+    if (stripeId && amountCents) {
+      const { data: invoice } = await supabase
+        .from('rmp_invoices')
+        .select('id')
+        .eq('amount_cents', amountCents)
+        .eq('status', 'pending')
+        .limit(1)
+        .single();
+
+      if (invoice) {
+        await supabase.from('rmp_invoices').update({
+          status: 'paid',
+          payment_method: 'stripe',
+          stripe_payment_id: stripeId,
+          paid_date: new Date().toISOString().split('T')[0],
+        }).eq('id', invoice.id);
+
+        await supabase.from('rmp_notifications').insert({
+          type: 'stripe_payment',
+          message: `Stripe payment received: ${stripeId}`,
+          invoice_id: invoice.id,
+        });
+      }
+    }
+  }
+
+  return NextResponse.json({ received: true });
+}