batching events

apps/api/src/controllers/webhook.controller.ts

@@ -0,0 +1,152 @@
+import type { WebhookEvent } from '@clerk/fastify';
+import type { FastifyReply, FastifyRequest } from 'fastify';
+import { pathOr } from 'ramda';
+import { Webhook } from 'svix';
+
+import { AccessLevel, db } from '@openpanel/db';
+
+if (!process.env.CLERK_SIGNING_SECRET) {
+  throw new Error('CLERK_SIGNING_SECRET is required');
+}
+
+const wh = new Webhook(process.env.CLERK_SIGNING_SECRET);
+
+function verify(body: any, headers: FastifyRequest['headers']) {
+  try {
+    const svix_id = headers['svix-id'] as string;
+    const svix_timestamp = headers['svix-timestamp'] as string;
+    const svix_signature = headers['svix-signature'] as string;
+
+    wh.verify(JSON.stringify(body), {
+      'svix-id': svix_id,
+      'svix-timestamp': svix_timestamp,
+      'svix-signature': svix_signature,
+    });
+
+    return true;
+  } catch (error) {
+    return false;
+  }
+}
+
+export async function clerkWebhook(
+  request: FastifyRequest<{
+    Body: WebhookEvent;
+  }>,
+  reply: FastifyReply
+) {
+  const payload = request.body;
+  const verified = verify(payload, request.headers);
+
+  if (!verified) {
+    return reply.send({ message: 'Invalid signature' });
+  }
+
+  if (payload.type === 'user.created') {
+    const email = payload.data.email_addresses[0]?.email_address;
+
+    if (!email) {
+      return Response.json(
+        { message: 'No email address found' },
+        { status: 400 }
+      );
+    }
+
+    const user = await db.user.create({
+      data: {
+        id: payload.data.id,
+        email,
+        firstName: payload.data.first_name,
+        lastName: payload.data.last_name,
+      },
+    });
+
+    const memberships = await db.member.findMany({
+      where: {
+        email,
+        userId: null,
+      },
+    });
+
+    for (const membership of memberships) {
+      const access = pathOr<string[]>([], ['meta', 'access'], membership);
+      db.$transaction([
+        // Update the member to link it to the user
+        // This will remove the item from invitations
+        db.member.update({
+          where: {
+            id: membership.id,
+          },
+          data: {
+            userId: user.id,
+          },
+        }),
+        db.projectAccess.createMany({
+          data: access
+            .filter((a) => typeof a === 'string')
+            .map((projectId) => ({
+              organizationSlug: membership.organizationId,
+              organizationId: membership.organizationId,
+              projectId: projectId,
+              userId: user.id,
+              level: AccessLevel.read,
+            })),
+        }),
+      ]);
+    }
+  }
+
+  if (payload.type === 'organizationMembership.created') {
+    const access = payload.data.public_metadata.access;
+    if (Array.isArray(access)) {
+      await db.projectAccess.createMany({
+        data: access
+          .filter((a): a is string => typeof a === 'string')
+          .map((projectId) => ({
+            organizationSlug: payload.data.organization.slug,
+            organizationId: payload.data.organization.slug,
+            projectId: projectId,
+            userId: payload.data.public_user_data.user_id,
+            level: AccessLevel.read,
+          })),
+      });
+    }
+  }
+
+  if (payload.type === 'user.deleted') {
+    await db.$transaction([
+      db.user.update({
+        where: {
+          id: payload.data.id,
+        },
+        data: {
+          deletedAt: new Date(),
+          firstName: null,
+          lastName: null,
+          email: `deleted+${payload.data.id}@openpanel.dev`,
+        },
+      }),
+      db.projectAccess.deleteMany({
+        where: {
+          userId: payload.data.id,
+        },
+      }),
+      db.member.deleteMany({
+        where: {
+          userId: payload.data.id,
+        },
+      }),
+    ]);
+  }
+
+  if (payload.type === 'organizationMembership.deleted') {
+    await db.projectAccess.deleteMany({
+      where: {
+        organizationSlug: payload.data.organization.slug,
+        userId: payload.data.public_user_data.user_id,
+      },
+    });
+  }
+
+  reply.send({ success: true });
+}