Add public API keys, outbound webhooks, and bulk SMS campaigns with settings UI and org modules.
This commit is contained in:
@@ -0,0 +1,50 @@
|
||||
import {
|
||||
CanActivate,
|
||||
ExecutionContext,
|
||||
Injectable,
|
||||
UnauthorizedException,
|
||||
} from '@nestjs/common';
|
||||
import { BillingService } from '../billing/billing.service';
|
||||
import { ApiKeysService } from './api-keys.service';
|
||||
|
||||
@Injectable()
|
||||
export class ApiKeyAuthGuard implements CanActivate {
|
||||
constructor(
|
||||
private readonly apiKeys: ApiKeysService,
|
||||
private readonly billing: BillingService,
|
||||
) {}
|
||||
|
||||
async canActivate(context: ExecutionContext): Promise<boolean> {
|
||||
const req = context.switchToHttp().getRequest<{
|
||||
headers: Record<string, string | string[] | undefined>;
|
||||
user?: {
|
||||
userId: string;
|
||||
organizationId: string;
|
||||
role: string;
|
||||
apiKeyId?: string;
|
||||
};
|
||||
}>();
|
||||
|
||||
const header =
|
||||
req.headers['x-api-key'] ??
|
||||
(typeof req.headers.authorization === 'string' &&
|
||||
req.headers.authorization.toLowerCase().startsWith('bearer mk_')
|
||||
? req.headers.authorization.slice(7).trim()
|
||||
: undefined);
|
||||
|
||||
const raw = Array.isArray(header) ? header[0] : header;
|
||||
if (!raw?.trim()) throw new UnauthorizedException('کلید API لازم است');
|
||||
|
||||
const auth = await this.apiKeys.authenticate(raw.trim());
|
||||
await this.billing.requireActiveForOrganization(auth.organizationId);
|
||||
await this.billing.requireModule(auth.organizationId, 'public_api');
|
||||
|
||||
req.user = {
|
||||
userId: `api-key:${auth.apiKeyId}`,
|
||||
organizationId: auth.organizationId,
|
||||
role: auth.role,
|
||||
apiKeyId: auth.apiKeyId,
|
||||
};
|
||||
return true;
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,53 @@
|
||||
import {
|
||||
Body,
|
||||
Controller,
|
||||
Delete,
|
||||
Get,
|
||||
Param,
|
||||
Post,
|
||||
UseGuards,
|
||||
} from '@nestjs/common';
|
||||
import { IsString, MaxLength, MinLength } from 'class-validator';
|
||||
import { JwtAuthGuard } from '../auth/jwt-auth.guard';
|
||||
import { CurrentUser } from '../auth/current-user.decorator';
|
||||
import { Roles } from '../auth/roles.decorator';
|
||||
import { RolesGuard } from '../auth/roles.guard';
|
||||
import { OrgModuleGuard } from '../billing/org-module.guard';
|
||||
import { RequireOrgModule } from '../billing/org-module.decorator';
|
||||
import { ApiKeysService } from './api-keys.service';
|
||||
|
||||
class CreateApiKeyDto {
|
||||
@IsString()
|
||||
@MinLength(2)
|
||||
@MaxLength(80)
|
||||
name!: string;
|
||||
}
|
||||
|
||||
@Controller('api-keys')
|
||||
@UseGuards(JwtAuthGuard, RolesGuard, OrgModuleGuard)
|
||||
@RequireOrgModule('public_api')
|
||||
@Roles('owner', 'admin')
|
||||
export class ApiKeysController {
|
||||
constructor(private readonly apiKeys: ApiKeysService) {}
|
||||
|
||||
@Get()
|
||||
list(@CurrentUser() user: { organizationId: string }) {
|
||||
return this.apiKeys.list(user.organizationId);
|
||||
}
|
||||
|
||||
@Post()
|
||||
create(
|
||||
@CurrentUser() user: { organizationId: string },
|
||||
@Body() dto: CreateApiKeyDto,
|
||||
) {
|
||||
return this.apiKeys.create(user.organizationId, dto);
|
||||
}
|
||||
|
||||
@Delete(':id')
|
||||
revoke(
|
||||
@CurrentUser() user: { organizationId: string },
|
||||
@Param('id') id: string,
|
||||
) {
|
||||
return this.apiKeys.revoke(user.organizationId, id);
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,111 @@
|
||||
import {
|
||||
BadRequestException,
|
||||
Injectable,
|
||||
NotFoundException,
|
||||
UnauthorizedException,
|
||||
} from '@nestjs/common';
|
||||
import { createHash, randomBytes } from 'crypto';
|
||||
import type {
|
||||
CreateOrganizationApiKeyRequest,
|
||||
CreateOrganizationApiKeyResponse,
|
||||
OrganizationApiKeyDto,
|
||||
} from '@mento/shared';
|
||||
import { PrismaService } from '../prisma/prisma.service';
|
||||
|
||||
@Injectable()
|
||||
export class ApiKeysService {
|
||||
constructor(private readonly prisma: PrismaService) {}
|
||||
|
||||
async list(organizationId: string): Promise<OrganizationApiKeyDto[]> {
|
||||
const rows = await this.prisma.organizationApiKey.findMany({
|
||||
where: { organizationId },
|
||||
orderBy: { createdAt: 'desc' },
|
||||
});
|
||||
return rows.map((row) => this.toDto(row));
|
||||
}
|
||||
|
||||
async create(
|
||||
organizationId: string,
|
||||
dto: CreateOrganizationApiKeyRequest,
|
||||
): Promise<CreateOrganizationApiKeyResponse> {
|
||||
const name = dto.name?.trim();
|
||||
if (!name) throw new BadRequestException('نام کلید الزامی است');
|
||||
|
||||
const rawKey = `mk_${randomBytes(24).toString('hex')}`;
|
||||
const prefix = rawKey.slice(0, 10);
|
||||
const keyHash = this.hashKey(rawKey);
|
||||
|
||||
const row = await this.prisma.organizationApiKey.create({
|
||||
data: {
|
||||
organizationId,
|
||||
name,
|
||||
prefix,
|
||||
keyHash,
|
||||
},
|
||||
});
|
||||
|
||||
return { ...this.toDto(row), rawKey };
|
||||
}
|
||||
|
||||
async revoke(organizationId: string, id: string): Promise<OrganizationApiKeyDto> {
|
||||
const existing = await this.prisma.organizationApiKey.findFirst({
|
||||
where: { id, organizationId },
|
||||
});
|
||||
if (!existing) throw new NotFoundException('کلید پیدا نشد');
|
||||
if (existing.revokedAt) return this.toDto(existing);
|
||||
|
||||
const row = await this.prisma.organizationApiKey.update({
|
||||
where: { id },
|
||||
data: { revokedAt: new Date() },
|
||||
});
|
||||
return this.toDto(row);
|
||||
}
|
||||
|
||||
async authenticate(
|
||||
rawKey: string,
|
||||
): Promise<{ organizationId: string; apiKeyId: string; role: 'owner' }> {
|
||||
const key = rawKey.trim();
|
||||
if (!key.startsWith('mk_') || key.length < 20) {
|
||||
throw new UnauthorizedException('کلید API نامعتبر است');
|
||||
}
|
||||
const keyHash = this.hashKey(key);
|
||||
const row = await this.prisma.organizationApiKey.findFirst({
|
||||
where: { keyHash, revokedAt: null },
|
||||
select: { id: true, organizationId: true },
|
||||
});
|
||||
if (!row) throw new UnauthorizedException('کلید API نامعتبر است');
|
||||
|
||||
await this.prisma.organizationApiKey.update({
|
||||
where: { id: row.id },
|
||||
data: { lastUsedAt: new Date() },
|
||||
});
|
||||
|
||||
return {
|
||||
organizationId: row.organizationId,
|
||||
apiKeyId: row.id,
|
||||
role: 'owner',
|
||||
};
|
||||
}
|
||||
|
||||
hashKey(raw: string): string {
|
||||
return createHash('sha256').update(raw).digest('hex');
|
||||
}
|
||||
|
||||
private toDto(row: {
|
||||
id: string;
|
||||
name: string;
|
||||
prefix: string;
|
||||
lastUsedAt: Date | null;
|
||||
revokedAt: Date | null;
|
||||
createdAt: Date;
|
||||
}): OrganizationApiKeyDto {
|
||||
return {
|
||||
id: row.id,
|
||||
name: row.name,
|
||||
prefix: row.prefix,
|
||||
lastUsedAt: row.lastUsedAt?.toISOString() ?? null,
|
||||
revokedAt: row.revokedAt?.toISOString() ?? null,
|
||||
createdAt: row.createdAt.toISOString(),
|
||||
};
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,167 @@
|
||||
import {
|
||||
Controller,
|
||||
Get,
|
||||
Param,
|
||||
Query,
|
||||
UseGuards,
|
||||
} from '@nestjs/common';
|
||||
import { IsInt, IsOptional, IsString, Max, Min } from 'class-validator';
|
||||
import { Type } from 'class-transformer';
|
||||
import { CurrentUser } from '../auth/current-user.decorator';
|
||||
import { PrismaService } from '../prisma/prisma.service';
|
||||
import { ApiKeyAuthGuard } from './api-key-auth.guard';
|
||||
|
||||
class ListQueryDto {
|
||||
@IsOptional()
|
||||
@IsString()
|
||||
q?: string;
|
||||
|
||||
@IsOptional()
|
||||
@Type(() => Number)
|
||||
@IsInt()
|
||||
@Min(1)
|
||||
page?: number = 1;
|
||||
|
||||
@IsOptional()
|
||||
@Type(() => Number)
|
||||
@IsInt()
|
||||
@Min(1)
|
||||
@Max(100)
|
||||
limit?: number = 20;
|
||||
}
|
||||
|
||||
@Controller('public/v1')
|
||||
@UseGuards(ApiKeyAuthGuard)
|
||||
export class PublicApiV1Controller {
|
||||
constructor(private readonly prisma: PrismaService) {}
|
||||
|
||||
@Get('people')
|
||||
async listPeople(
|
||||
@CurrentUser() user: { organizationId: string },
|
||||
@Query() query: ListQueryDto,
|
||||
) {
|
||||
const page = query.page ?? 1;
|
||||
const limit = query.limit ?? 20;
|
||||
const where = {
|
||||
organizationId: user.organizationId,
|
||||
...(query.q?.trim()
|
||||
? {
|
||||
OR: [
|
||||
{ firstName: { contains: query.q.trim(), mode: 'insensitive' as const } },
|
||||
{ lastName: { contains: query.q.trim(), mode: 'insensitive' as const } },
|
||||
{ mobile: { contains: query.q.trim() } },
|
||||
{ email: { contains: query.q.trim(), mode: 'insensitive' as const } },
|
||||
],
|
||||
}
|
||||
: {}),
|
||||
};
|
||||
const [total, items] = await Promise.all([
|
||||
this.prisma.person.count({ where }),
|
||||
this.prisma.person.findMany({
|
||||
where,
|
||||
select: {
|
||||
id: true,
|
||||
firstName: true,
|
||||
lastName: true,
|
||||
email: true,
|
||||
mobile: true,
|
||||
phone: true,
|
||||
createdAt: true,
|
||||
updatedAt: true,
|
||||
},
|
||||
orderBy: { updatedAt: 'desc' },
|
||||
skip: (page - 1) * limit,
|
||||
take: limit,
|
||||
}),
|
||||
]);
|
||||
return {
|
||||
total,
|
||||
page,
|
||||
limit,
|
||||
items: items.map((p) => ({
|
||||
...p,
|
||||
fullName: `${p.firstName} ${p.lastName}`.trim(),
|
||||
createdAt: p.createdAt.toISOString(),
|
||||
updatedAt: p.updatedAt.toISOString(),
|
||||
})),
|
||||
};
|
||||
}
|
||||
|
||||
@Get('people/:id')
|
||||
async getPerson(
|
||||
@CurrentUser() user: { organizationId: string },
|
||||
@Param('id') id: string,
|
||||
) {
|
||||
const p = await this.prisma.person.findFirst({
|
||||
where: { id, organizationId: user.organizationId },
|
||||
select: {
|
||||
id: true,
|
||||
firstName: true,
|
||||
lastName: true,
|
||||
email: true,
|
||||
mobile: true,
|
||||
phone: true,
|
||||
notes: true,
|
||||
tags: true,
|
||||
createdAt: true,
|
||||
updatedAt: true,
|
||||
},
|
||||
});
|
||||
if (!p) return null;
|
||||
return {
|
||||
...p,
|
||||
fullName: `${p.firstName} ${p.lastName}`.trim(),
|
||||
createdAt: p.createdAt.toISOString(),
|
||||
updatedAt: p.updatedAt.toISOString(),
|
||||
};
|
||||
}
|
||||
|
||||
@Get('deals')
|
||||
async listDeals(
|
||||
@CurrentUser() user: { organizationId: string },
|
||||
@Query() query: ListQueryDto,
|
||||
) {
|
||||
const page = query.page ?? 1;
|
||||
const limit = query.limit ?? 20;
|
||||
const where = {
|
||||
organizationId: user.organizationId,
|
||||
...(query.q?.trim()
|
||||
? {
|
||||
title: { contains: query.q.trim(), mode: 'insensitive' as const },
|
||||
}
|
||||
: {}),
|
||||
};
|
||||
const [total, items] = await Promise.all([
|
||||
this.prisma.deal.count({ where }),
|
||||
this.prisma.deal.findMany({
|
||||
where,
|
||||
select: {
|
||||
id: true,
|
||||
title: true,
|
||||
status: true,
|
||||
amount: true,
|
||||
currency: true,
|
||||
source: true,
|
||||
stageId: true,
|
||||
pipelineId: true,
|
||||
createdAt: true,
|
||||
updatedAt: true,
|
||||
},
|
||||
orderBy: { updatedAt: 'desc' },
|
||||
skip: (page - 1) * limit,
|
||||
take: limit,
|
||||
}),
|
||||
]);
|
||||
return {
|
||||
total,
|
||||
page,
|
||||
limit,
|
||||
items: items.map((d) => ({
|
||||
...d,
|
||||
amount: d.amount == null ? null : Number(d.amount),
|
||||
createdAt: d.createdAt.toISOString(),
|
||||
updatedAt: d.updatedAt.toISOString(),
|
||||
})),
|
||||
};
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,17 @@
|
||||
import { Module } from '@nestjs/common';
|
||||
import { AuthModule } from '../auth/auth.module';
|
||||
import { BillingModule } from '../billing/billing.module';
|
||||
import { ApiKeyAuthGuard } from './api-key-auth.guard';
|
||||
import { ApiKeysController } from './api-keys.controller';
|
||||
import { ApiKeysService } from './api-keys.service';
|
||||
import { PublicApiV1Controller } from './public-api-v1.controller';
|
||||
import { WebhooksController } from './webhooks.controller';
|
||||
import { WebhooksService } from './webhooks.service';
|
||||
|
||||
@Module({
|
||||
imports: [AuthModule, BillingModule],
|
||||
controllers: [ApiKeysController, WebhooksController, PublicApiV1Controller],
|
||||
providers: [ApiKeysService, ApiKeyAuthGuard, WebhooksService],
|
||||
exports: [ApiKeysService, WebhooksService],
|
||||
})
|
||||
export class PublicApiModule {}
|
||||
@@ -0,0 +1,125 @@
|
||||
import {
|
||||
Body,
|
||||
Controller,
|
||||
Delete,
|
||||
Get,
|
||||
Param,
|
||||
Patch,
|
||||
Post,
|
||||
Query,
|
||||
UseGuards,
|
||||
} from '@nestjs/common';
|
||||
import {
|
||||
IsArray,
|
||||
IsBoolean,
|
||||
IsOptional,
|
||||
IsString,
|
||||
IsUrl,
|
||||
MaxLength,
|
||||
MinLength,
|
||||
} from 'class-validator';
|
||||
import { JwtAuthGuard } from '../auth/jwt-auth.guard';
|
||||
import { CurrentUser } from '../auth/current-user.decorator';
|
||||
import { Roles } from '../auth/roles.decorator';
|
||||
import { RolesGuard } from '../auth/roles.guard';
|
||||
import { OrgModuleGuard } from '../billing/org-module.guard';
|
||||
import { RequireOrgModule } from '../billing/org-module.decorator';
|
||||
import { WebhooksService } from './webhooks.service';
|
||||
|
||||
class CreateWebhookDto {
|
||||
@IsString()
|
||||
@MinLength(2)
|
||||
@MaxLength(80)
|
||||
name!: string;
|
||||
|
||||
@IsString()
|
||||
@IsUrl({ require_tld: false })
|
||||
url!: string;
|
||||
|
||||
@IsArray()
|
||||
@IsString({ each: true })
|
||||
events!: string[];
|
||||
|
||||
@IsOptional()
|
||||
@IsString()
|
||||
@MaxLength(120)
|
||||
secret?: string;
|
||||
|
||||
@IsOptional()
|
||||
@IsBoolean()
|
||||
isActive?: boolean;
|
||||
}
|
||||
|
||||
class UpdateWebhookDto {
|
||||
@IsOptional()
|
||||
@IsString()
|
||||
@MinLength(2)
|
||||
@MaxLength(80)
|
||||
name?: string;
|
||||
|
||||
@IsOptional()
|
||||
@IsString()
|
||||
@IsUrl({ require_tld: false })
|
||||
url?: string;
|
||||
|
||||
@IsOptional()
|
||||
@IsArray()
|
||||
@IsString({ each: true })
|
||||
events?: string[];
|
||||
|
||||
@IsOptional()
|
||||
@IsString()
|
||||
@MaxLength(120)
|
||||
secret?: string;
|
||||
|
||||
@IsOptional()
|
||||
@IsBoolean()
|
||||
isActive?: boolean;
|
||||
}
|
||||
|
||||
@Controller('webhooks')
|
||||
@UseGuards(JwtAuthGuard, RolesGuard, OrgModuleGuard)
|
||||
@RequireOrgModule('public_api')
|
||||
@Roles('owner', 'admin')
|
||||
export class WebhooksController {
|
||||
constructor(private readonly webhooks: WebhooksService) {}
|
||||
|
||||
@Get()
|
||||
list(@CurrentUser() user: { organizationId: string }) {
|
||||
return this.webhooks.listEndpoints(user.organizationId);
|
||||
}
|
||||
|
||||
@Get('deliveries')
|
||||
deliveries(
|
||||
@CurrentUser() user: { organizationId: string },
|
||||
@Query('endpointId') endpointId?: string,
|
||||
) {
|
||||
return this.webhooks.listDeliveries(user.organizationId, endpointId);
|
||||
}
|
||||
|
||||
@Post()
|
||||
create(
|
||||
@CurrentUser() user: { organizationId: string },
|
||||
@Body() dto: CreateWebhookDto,
|
||||
) {
|
||||
return this.webhooks.createEndpoint(user.organizationId, dto);
|
||||
}
|
||||
|
||||
@Patch(':id')
|
||||
update(
|
||||
@CurrentUser() user: { organizationId: string },
|
||||
@Param('id') id: string,
|
||||
@Body() dto: UpdateWebhookDto,
|
||||
) {
|
||||
return this.webhooks.updateEndpoint(user.organizationId, id, dto);
|
||||
}
|
||||
|
||||
@Delete(':id')
|
||||
async remove(
|
||||
@CurrentUser() user: { organizationId: string },
|
||||
@Param('id') id: string,
|
||||
) {
|
||||
await this.webhooks.removeEndpoint(user.organizationId, id);
|
||||
return { ok: true };
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,296 @@
|
||||
import {
|
||||
BadRequestException,
|
||||
Injectable,
|
||||
Logger,
|
||||
NotFoundException,
|
||||
} from '@nestjs/common';
|
||||
import { Cron } from '@nestjs/schedule';
|
||||
import { createHmac, randomBytes } from 'crypto';
|
||||
import type {
|
||||
CreateWebhookEndpointRequest,
|
||||
UpdateWebhookEndpointRequest,
|
||||
WebhookDeliveryDto,
|
||||
WebhookEndpointDto,
|
||||
WebhookEvent,
|
||||
} from '@mento/shared';
|
||||
import { WEBHOOK_EVENTS } from '@mento/shared';
|
||||
import { Prisma } from '@prisma/client';
|
||||
import { PrismaService } from '../prisma/prisma.service';
|
||||
|
||||
@Injectable()
|
||||
export class WebhooksService {
|
||||
private readonly logger = new Logger(WebhooksService.name);
|
||||
|
||||
constructor(private readonly prisma: PrismaService) {}
|
||||
|
||||
async listEndpoints(organizationId: string): Promise<WebhookEndpointDto[]> {
|
||||
const rows = await this.prisma.webhookEndpoint.findMany({
|
||||
where: { organizationId },
|
||||
orderBy: { createdAt: 'desc' },
|
||||
});
|
||||
return rows.map((row) => this.toEndpointDto(row));
|
||||
}
|
||||
|
||||
async createEndpoint(
|
||||
organizationId: string,
|
||||
dto: CreateWebhookEndpointRequest,
|
||||
): Promise<WebhookEndpointDto & { secret: string }> {
|
||||
const name = dto.name?.trim();
|
||||
const url = dto.url?.trim();
|
||||
if (!name) throw new BadRequestException('نام وبهوک الزامی است');
|
||||
if (!url || !/^https?:\/\//i.test(url)) {
|
||||
throw new BadRequestException('آدرس وبهوک باید با http یا https شروع شود');
|
||||
}
|
||||
const events = this.normalizeEvents(dto.events);
|
||||
if (!events.length) throw new BadRequestException('حداقل یک رویداد انتخاب کنید');
|
||||
|
||||
const secret = dto.secret?.trim() || randomBytes(24).toString('hex');
|
||||
const row = await this.prisma.webhookEndpoint.create({
|
||||
data: {
|
||||
organizationId,
|
||||
name,
|
||||
url,
|
||||
secret,
|
||||
events,
|
||||
isActive: dto.isActive ?? true,
|
||||
},
|
||||
});
|
||||
return { ...this.toEndpointDto(row), secret };
|
||||
}
|
||||
|
||||
async updateEndpoint(
|
||||
organizationId: string,
|
||||
id: string,
|
||||
dto: UpdateWebhookEndpointRequest,
|
||||
): Promise<WebhookEndpointDto> {
|
||||
const existing = await this.prisma.webhookEndpoint.findFirst({
|
||||
where: { id, organizationId },
|
||||
});
|
||||
if (!existing) throw new NotFoundException('وبهوک پیدا نشد');
|
||||
|
||||
const data: Prisma.WebhookEndpointUpdateInput = {};
|
||||
if (dto.name !== undefined) {
|
||||
const name = dto.name.trim();
|
||||
if (!name) throw new BadRequestException('نام وبهوک الزامی است');
|
||||
data.name = name;
|
||||
}
|
||||
if (dto.url !== undefined) {
|
||||
const url = dto.url.trim();
|
||||
if (!url || !/^https?:\/\//i.test(url)) {
|
||||
throw new BadRequestException('آدرس وبهوک نامعتبر است');
|
||||
}
|
||||
data.url = url;
|
||||
}
|
||||
if (dto.events !== undefined) {
|
||||
const events = this.normalizeEvents(dto.events);
|
||||
if (!events.length) throw new BadRequestException('حداقل یک رویداد انتخاب کنید');
|
||||
data.events = events;
|
||||
}
|
||||
if (dto.secret !== undefined && dto.secret.trim()) {
|
||||
data.secret = dto.secret.trim();
|
||||
}
|
||||
if (dto.isActive !== undefined) data.isActive = Boolean(dto.isActive);
|
||||
|
||||
const row = await this.prisma.webhookEndpoint.update({
|
||||
where: { id },
|
||||
data,
|
||||
});
|
||||
return this.toEndpointDto(row);
|
||||
}
|
||||
|
||||
async removeEndpoint(organizationId: string, id: string): Promise<void> {
|
||||
const existing = await this.prisma.webhookEndpoint.findFirst({
|
||||
where: { id, organizationId },
|
||||
});
|
||||
if (!existing) throw new NotFoundException('وبهوک پیدا نشد');
|
||||
await this.prisma.webhookEndpoint.delete({ where: { id } });
|
||||
}
|
||||
|
||||
async listDeliveries(
|
||||
organizationId: string,
|
||||
endpointId?: string,
|
||||
): Promise<WebhookDeliveryDto[]> {
|
||||
const rows = await this.prisma.webhookDelivery.findMany({
|
||||
where: {
|
||||
organizationId,
|
||||
...(endpointId ? { endpointId } : {}),
|
||||
},
|
||||
orderBy: { createdAt: 'desc' },
|
||||
take: 50,
|
||||
});
|
||||
return rows.map((row) => ({
|
||||
id: row.id,
|
||||
event: row.event,
|
||||
status: row.status,
|
||||
statusCode: row.statusCode,
|
||||
attempts: row.attempts,
|
||||
lastError: row.lastError,
|
||||
createdAt: row.createdAt.toISOString(),
|
||||
deliveredAt: row.deliveredAt?.toISOString() ?? null,
|
||||
}));
|
||||
}
|
||||
|
||||
/** Fire-and-forget enqueue for domain events */
|
||||
emit(
|
||||
organizationId: string,
|
||||
event: WebhookEvent,
|
||||
data: Record<string, unknown>,
|
||||
): void {
|
||||
void this.enqueue(organizationId, event, data).catch((err) => {
|
||||
this.logger.warn(`webhook enqueue failed: ${String(err)}`);
|
||||
});
|
||||
}
|
||||
|
||||
async enqueue(
|
||||
organizationId: string,
|
||||
event: WebhookEvent,
|
||||
data: Record<string, unknown>,
|
||||
): Promise<void> {
|
||||
const endpoints = await this.prisma.webhookEndpoint.findMany({
|
||||
where: {
|
||||
organizationId,
|
||||
isActive: true,
|
||||
events: { has: event },
|
||||
},
|
||||
select: { id: true },
|
||||
});
|
||||
if (!endpoints.length) return;
|
||||
|
||||
const payload = {
|
||||
id: randomBytes(8).toString('hex'),
|
||||
event,
|
||||
createdAt: new Date().toISOString(),
|
||||
data,
|
||||
};
|
||||
|
||||
await this.prisma.webhookDelivery.createMany({
|
||||
data: endpoints.map((ep) => ({
|
||||
organizationId,
|
||||
endpointId: ep.id,
|
||||
event,
|
||||
payload: payload as Prisma.InputJsonValue,
|
||||
status: 'pending',
|
||||
nextAttemptAt: new Date(),
|
||||
})),
|
||||
});
|
||||
}
|
||||
|
||||
@Cron('*/1 * * * *')
|
||||
async processDue(): Promise<number> {
|
||||
const now = new Date();
|
||||
const pending = await this.prisma.webhookDelivery.findMany({
|
||||
where: {
|
||||
status: { in: ['pending', 'failed'] },
|
||||
nextAttemptAt: { lte: now },
|
||||
attempts: { lt: 5 },
|
||||
},
|
||||
include: { endpoint: true },
|
||||
orderBy: { nextAttemptAt: 'asc' },
|
||||
take: 40,
|
||||
});
|
||||
|
||||
let done = 0;
|
||||
for (const row of pending) {
|
||||
if (!row.endpoint.isActive) {
|
||||
await this.prisma.webhookDelivery.update({
|
||||
where: { id: row.id },
|
||||
data: { status: 'cancelled', lastError: 'endpoint inactive' },
|
||||
});
|
||||
continue;
|
||||
}
|
||||
await this.deliver(row.id);
|
||||
done += 1;
|
||||
}
|
||||
return done;
|
||||
}
|
||||
|
||||
private async deliver(id: string): Promise<void> {
|
||||
const row = await this.prisma.webhookDelivery.findUnique({
|
||||
where: { id },
|
||||
include: { endpoint: true },
|
||||
});
|
||||
if (!row) return;
|
||||
|
||||
const body = JSON.stringify(row.payload);
|
||||
const signature = createHmac('sha256', row.endpoint.secret)
|
||||
.update(body)
|
||||
.digest('hex');
|
||||
|
||||
try {
|
||||
const res = await fetch(row.endpoint.url, {
|
||||
method: 'POST',
|
||||
headers: {
|
||||
'Content-Type': 'application/json',
|
||||
'X-Mento-Event': row.event,
|
||||
'X-Mento-Signature': `sha256=${signature}`,
|
||||
'User-Agent': 'MentoCRM-Webhook/1.0',
|
||||
},
|
||||
body,
|
||||
signal: AbortSignal.timeout(15000),
|
||||
});
|
||||
|
||||
if (res.ok) {
|
||||
await this.prisma.webhookDelivery.update({
|
||||
where: { id },
|
||||
data: {
|
||||
status: 'delivered',
|
||||
statusCode: res.status,
|
||||
attempts: row.attempts + 1,
|
||||
deliveredAt: new Date(),
|
||||
lastError: null,
|
||||
},
|
||||
});
|
||||
return;
|
||||
}
|
||||
|
||||
const errText = await res.text().catch(() => '');
|
||||
await this.fail(row.id, row.attempts + 1, res.status, errText.slice(0, 400));
|
||||
} catch (err) {
|
||||
await this.fail(row.id, row.attempts + 1, null, String(err).slice(0, 400));
|
||||
}
|
||||
}
|
||||
|
||||
private async fail(
|
||||
id: string,
|
||||
attempts: number,
|
||||
statusCode: number | null,
|
||||
lastError: string,
|
||||
) {
|
||||
const delayMin = Math.min(60, 2 ** Math.min(attempts, 5));
|
||||
await this.prisma.webhookDelivery.update({
|
||||
where: { id },
|
||||
data: {
|
||||
status: attempts >= 5 ? 'dead' : 'failed',
|
||||
statusCode,
|
||||
attempts,
|
||||
lastError,
|
||||
nextAttemptAt: new Date(Date.now() + delayMin * 60_000),
|
||||
},
|
||||
});
|
||||
}
|
||||
|
||||
private normalizeEvents(events: string[]): string[] {
|
||||
const allowed = new Set<string>(WEBHOOK_EVENTS);
|
||||
return [...new Set((events ?? []).map((e) => e.trim()).filter((e) => allowed.has(e)))];
|
||||
}
|
||||
|
||||
private toEndpointDto(row: {
|
||||
id: string;
|
||||
name: string;
|
||||
url: string;
|
||||
events: string[];
|
||||
isActive: boolean;
|
||||
createdAt: Date;
|
||||
updatedAt: Date;
|
||||
}): WebhookEndpointDto {
|
||||
return {
|
||||
id: row.id,
|
||||
name: row.name,
|
||||
url: row.url,
|
||||
events: row.events,
|
||||
isActive: row.isActive,
|
||||
createdAt: row.createdAt.toISOString(),
|
||||
updatedAt: row.updatedAt.toISOString(),
|
||||
};
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user