Collecting Payments

				
					app.post('/api/webhook', express.raw({ type: 'application/json' }), (req, res) => {
    const sig = req.headers['stripe-signature'];
    let event;

    try {
        // This verifies the message actually came from Stripe
        event = stripe.webhooks.constructEvent(
            req.body, 
            sig, 
            process.env.STRIPE_WEBHOOK_SECRET // This is your whsec_ key
        );
    } catch (err) {
        console.error(`Webhook Error: ${err.message}`);
        return res.status(400).send(`Webhook Error: ${err.message}`);
    }

    // 2. HANDLE THE EVENT
      if (event.type === 'checkout.session.completed') {
          const session = event.data.object;
          const mode = session.mode;
          const email = session.customer_details?.email;

          console.log('Session mode:', mode);
          console.log('Session email:', email);
          console.log('Session details:', session);

          if (mode === 'payment') {
              console.log('Payment Successful!');
              console.log('Customer Email:', email);
              console.log('Amount Paid:', session.amount_total / 100); // Stripe uses cents
              // This is where you would update your database (e.g., User.paid = true)
          } else if (mode === 'subscription') {
              console.log('Subscription Successful!');
              console.log('Customer Email:', email);
              // Update Supabase profiles table: set is_paid true for this user
              if (email) {
                  const supabaseUrl = `${process.env.SUPABASE_URL}/rest/v1/profiles?email=eq.${encodeURIComponent(email)}`;
                  const supabaseHeaders = {
                      'Content-Type': 'application/json',
                      'apikey': process.env.SUPABASE_SERVICE_ROLE_KEY,
                      'Authorization': `Bearer ${process.env.SUPABASE_SERVICE_ROLE_KEY}`,
                  };
                  const supabaseBody = JSON.stringify({ is_paid: true });
                  console.log('Supabase PATCH URL:', supabaseUrl);
                  console.log('Supabase PATCH Headers:', supabaseHeaders);
                  console.log('Supabase PATCH Body:', supabaseBody);
                  fetch(supabaseUrl, {
                      method: 'PATCH',
                      headers: supabaseHeaders,
                      body: supabaseBody
                  })
                  .then(res => {
                      console.log('Supabase PATCH response status:', res.status);
                      return res.json();
                  })
                  .then(data => {
                      console.log('Supabase update (is_paid true):', data);
                  })
                  .catch(err => {
                      console.error('Supabase update error:', err);
                  });
              } else {
                  console.log('No email found for subscription session. Supabase not updated.');
              }
          }
      } else if (event.type === 'checkout.session.expired') {
          const session = event.data.object;
          console.log('Session expired. Releasing the tutor slot for:', session.id);
      } else if (event.type === 'subscription.deleted') {
          const subscription = event.data.object;
          const email = subscription.customer_email || subscription.customer?.email;
          console.log('Subscription deleted. Email:', email);
          console.log('Subscription details:', subscription);
          // Update Supabase profiles table: set is_paid false for this user
          if (email) {
              const supabaseUrl = `${process.env.SUPABASE_URL}/rest/v1/profiles?email=eq.${encodeURIComponent(email)}`;
              const supabaseHeaders = {
                  'Content-Type': 'application/json',
                  'apikey': process.env.SUPABASE_SERVICE_ROLE_KEY,
                  'Authorization': `Bearer ${process.env.SUPABASE_SERVICE_ROLE_KEY}`,
              };
              const supabaseBody = JSON.stringify({ is_paid: false });
              console.log('Supabase PATCH URL:', supabaseUrl);
              console.log('Supabase PATCH Headers:', supabaseHeaders);
              console.log('Supabase PATCH Body:', supabaseBody);
              fetch(supabaseUrl, {
                  method: 'PATCH',
                  headers: supabaseHeaders,
                  body: supabaseBody
              })
              .then(res => {
                  console.log('Supabase PATCH response status:', res.status);
                  return res.json();
              })
              .then(data => {
                  console.log('Supabase update (is_paid false):', data);
              })
              .catch(err => {
                  console.error('Supabase update error:', err);
              });
          } else {
              console.log('No email found for deleted subscription. Supabase not updated.');
          }
      }

    // Return a 200 response to acknowledge receipt
    res.json({ received: true });
});