discourse-subscriptions/app/controllers/hooks_controller.rb

# frozen_string_literal: true

module DiscourseSubscriptions
  class HooksController < ::ApplicationController
    include DiscourseSubscriptions::Group
    skip_before_action :verify_authenticity_token, only: [:create]

    def create
      begin
        payload = request.body.read
        sig_header = request.env['HTTP_STRIPE_SIGNATURE']
        webhook_secret = SiteSetting.discourse_subscriptions_webhook_secret

        event = ::Stripe::Webhook.construct_event(payload, sig_header, webhook_secret)

      rescue JSON::ParserError => e
        render_json_error e.message
        return
      rescue Stripe::SignatureVerificationError => e
        render_json_error e.message
        return
      end

      case event[:type]
      when 'customer.subscription.deleted'

        customer = Customer.find_by(
          customer_id: event[:customer],
          product_id: event[:plan][:product]
        )

        if customer
          customer.delete

          user = ::User.find(customer.user_id)
          group = plan_group(event[:plan])
          group.remove(user) if group
        end
      end

      head 200
    end
  end
end