[FEAT] sponsor for opensox

apps/api/package.json

@@ -37,6 +37,7 @@
     "razorpay": "^2.9.6",
     "superjson": "^2.2.5",
     "zeptomail": "^6.2.1",
-    "zod": "^4.1.9"
+    "zod": "^4.1.9",
+    "cloudinary": "^2.0.0"
   }
-}
+}

apps/api/prisma/clear_sponsors.sql

@@ -0,0 +1,3 @@
+DELETE FROM "Sponsor";
+
+-- npx prisma db execute --file=./prisma/clear_sponsors.sql --schema=./prisma/schema.prisma

apps/api/prisma/schema.prisma

@@ -42,6 +42,7 @@ model User {
   accounts       Account[]
   payments       Payment[]
   subscriptions  Subscription[]
+  sponsors       Sponsor[]
 }
 
 model Account {
@@ -64,7 +65,7 @@ model Account {
 
 model Payment {
   id                String        @id @default(cuid())
-  userId            String
+  userId            String?
   subscriptionId    String?
   razorpayPaymentId String        @unique
   razorpayOrderId   String
@@ -74,7 +75,7 @@ model Payment {
   createdAt         DateTime      @default(now())
   updatedAt         DateTime      @updatedAt
   subscription      Subscription? @relation(fields: [subscriptionId], references: [id])
-  user              User          @relation(fields: [userId], references: [id], onDelete: Cascade)
+  user              User?         @relation(fields: [userId], references: [id], onDelete: Cascade)
 }
 
 model Subscription {
@@ -102,3 +103,20 @@ model Plan {
   updatedAt     DateTime       @updatedAt
   subscriptions Subscription[]
 }
+
+model Sponsor {
+  id                  String   @id @default(cuid())
+  userId              String?
+  company_name        String
+  description         String
+  website             String
+  image_url           String
+  razorpay_payment_id String?
+  razorpay_sub_id     String?
+  plan_status         String   // active, cancelled, pending_payment, pending_submission, failed
+  contact_name        String?  // customer name from razorpay
+  contact_email       String?  // customer email from razorpay
+  contact_phone       String?  // customer phone from razorpay
+  created_at          DateTime @default(now())
+  user                User?    @relation(fields: [userId], references: [id])
+}

apps/api/src/index.ts

@@ -62,8 +62,8 @@ const apiLimiter = rateLimit({
 
 // Request size limits (except for webhook - needs raw body)
 app.use("/webhook/razorpay", express.raw({ type: "application/json" }));
-app.use(express.json({ limit: "10kb" }));
-app.use(express.urlencoded({ limit: "10kb", extended: true }));
+app.use(express.json({ limit: "50mb" }));
+app.use(express.urlencoded({ limit: "50mb", extended: true }));
 
 // CORS configuration
 const corsOptions: CorsOptionsType = {
@@ -153,104 +153,10 @@ app.get("/join-community", apiLimiter, async (req: Request, res: Response) => {
   }
 });
 
-// Razorpay Webhook Handler (Backup Flow)
-app.post("/webhook/razorpay", async (req: Request, res: Response) => {
-  try {
-    const webhookSecret = process.env.RAZORPAY_WEBHOOK_SECRET;
-    if (!webhookSecret) {
-      console.error("RAZORPAY_WEBHOOK_SECRET not configured");
-      return res.status(500).json({ error: "Webhook not configured" });
-    }
-
-    // Get signature from headers
-    const signature = req.headers["x-razorpay-signature"] as string;
-    if (!signature) {
-      return res.status(400).json({ error: "Missing signature" });
-    }
-
-    // Verify webhook signature
-    const body = req.body.toString();
-    const expectedSignature = crypto
-      .createHmac("sha256", webhookSecret)
-      .update(body)
-      .digest("hex");
-
-    const isValidSignature = crypto.timingSafeEqual(
-      Buffer.from(signature),
-      Buffer.from(expectedSignature)
-    );
-
-    if (!isValidSignature) {
-      console.error("Invalid webhook signature");
-      return res.status(400).json({ error: "Invalid signature" });
-    }
-
-    // Parse the event
-    const event = JSON.parse(body);
-    const eventType = event.event;
-
-    // Handle payment.captured event
-    if (eventType === "payment.captured") {
-      const payment = event.payload.payment.entity;
-
-      // Extract payment details
-      const razorpayPaymentId = payment.id;
-      const razorpayOrderId = payment.order_id;
-      const amount = payment.amount;
-      const currency = payment.currency;
+import { handleRazorpayWebhook } from "./webhooks.js";
 
-      // Get user ID from order notes (should be stored when creating order)
-      const notes = payment.notes || {};
-      const userId = notes.user_id;
-
-      if (!userId) {
-        console.error("User ID not found in payment notes");
-        return res.status(400).json({ error: "User ID not found" });
-      }
-
-      // Get plan ID from notes
-      const planId = notes.plan_id;
-      if (!planId) {
-        console.error("Plan ID not found in payment notes");
-        return res.status(400).json({ error: "Plan ID not found" });
-      }
-
-      try {
-        // Create payment record (with idempotency check)
-        const paymentRecord = await paymentService.createPaymentRecord(userId, {
-          razorpayPaymentId,
-          razorpayOrderId,
-          amount,
-          currency,
-        });
-
-        // Create subscription (with idempotency check)
-        await paymentService.createSubscription(
-          userId,
-          planId,
-          paymentRecord.id
-        );
-
-        console.log(
-          `✅ Webhook: Payment ${razorpayPaymentId} processed successfully`
-        );
-        return res.status(200).json({ status: "ok" });
-      } catch (error: any) {
-        console.error("Webhook payment processing error:", error);
-        // Return 200 to prevent Razorpay retries for application errors
-        return res
-          .status(200)
-          .json({ status: "ok", note: "Already processed" });
-      }
-    }
-
-    // Acknowledge other events
-    return res.status(200).json({ status: "ok" });
-  } catch (error: any) {
-    console.error("Webhook error:", error);
-    return res.status(500).json({ error: "Internal server error" });
-  }
-});
+// Razorpay Webhook Handler
+app.post("/webhook/razorpay", handleRazorpayWebhook);
 
 // Connect to database
 prismaModule.connectDB();

apps/api/src/routers/_app.ts

@@ -14,13 +14,16 @@ const testRouter = router({
     }),
 });
 
+import { sponsorRouter } from "./sponsor.js";
+
 export const appRouter = router({
   hello: testRouter,
   query: queryRouter,
   user: userRouter,
   project: projectRouter,
   auth: authRouter,
   payment: paymentRouter,
+  sponsor: sponsorRouter,
 });
 
 export type AppRouter = typeof appRouter;