Function webhookHandler

web/src/app/api/stripe/webhook/route.ts:333–640

(req: NextRequest)

}

const webhookHandler = async (req: NextRequest): Promise<NextResponse> => {
  let event: Stripe.Event
  try {
    const buf = await req.text()
    const sig = req.headers.get('stripe-signature')!

    event = stripeServer.webhooks.constructEvent(
      buf,
      sig,
      env.STRIPE_WEBHOOK_SECRET_KEY,
    )
  } catch (err) {
    const errorMessage = err instanceof Error ? err.message : String(err)
    logger.error(
      { error: errorMessage },
      'Webhook signature verification failed',
    )
    return NextResponse.json(
      { error: { message: `Webhook Error: ${errorMessage}` } },
      { status: 400 },
    )
  }

  logger.info({ type: event.type }, 'Received Stripe webhook event')

  // BILLING_DISABLED: Acknowledge but ignore org-billing related events
  // Return 200 to prevent Stripe from retrying (503 would cause retry storms)
  if (!ORG_BILLING_ENABLED) {
    const isOrgEvent = await isOrgBillingEvent(event)
    if (isOrgEvent) {
      logger.warn(
        { type: event.type, eventId: event.id },
        'BILLING_DISABLED: Ignoring org billing webhook event',
      )
      return NextResponse.json({
        received: true,
        ignored: 'org billing disabled',
      })
    }
  }

  try {
    switch (event.type) {
      case 'customer.created':
        break
      case 'customer.subscription.created':
      case 'customer.subscription.updated': {
        const sub = event.data.object as Stripe.Subscription
        if (sub.metadata?.organization_id) {
          await handleOrganizationSubscriptionEvent(sub)
        } else {
          await handleSubscriptionUpdated({ stripeSubscription: sub, logger })
        }
        break
      }
      case 'customer.subscription.deleted': {
        const sub = event.data.object as Stripe.Subscription
        if (sub.metadata?.organization_id) {