Access certification exam practice tests
+ + + + + +' + (index + 1) + '. ' + q.question + '
' + + q.options.map(function (option) { + return ''; + }).join(''); + quizForm.appendChild(questionDiv); + }); + } + + // ────────────────────────────────────────────── + // Timer logic + // ────────────────────────────────────────────── + function startTimer() { + secondsRemaining = EXAM_DURATION_SECONDS; + updateTimerDisplay(); + timerInterval = setInterval(function () { + secondsRemaining--; + updateTimerDisplay(); + if (secondsRemaining <= 0) { + stopTimer(); + alert('\u23F0 Time is up! Your quiz has been automatically submitted.'); + submitQuiz(); + } + }, 1000); + } + + function stopTimer() { + if (timerInterval) { + clearInterval(timerInterval); + timerInterval = null; + } + } + + function updateTimerDisplay() { + const mins = Math.floor(secondsRemaining / 60); + const secs = secondsRemaining % 60; + timerDisplay.textContent = + String(mins).padStart(2, '0') + ':' + String(secs).padStart(2, '0'); + + if (secondsRemaining <= 300) { + timerDisplay.classList.add('timer-warning'); + } else { + timerDisplay.classList.remove('timer-warning'); + } + } + + // ────────────────────────────────────────────── + // Quiz submission & scoring + // ────────────────────────────────────────────── + startPaymentBtn.addEventListener('click', function () { + submitQuiz(); + }); + + function submitQuiz() { + stopTimer(); + + var score = 0; + quizQuestions.forEach(function (q, index) { + var selected = quizForm.querySelector('input[name="question' + index + '"]:checked'); + if (selected && selected.value === q.answer) { + score++; + } + }); + + var total = quizQuestions.length; + var pct = Math.round((score / total) * 100); + + document.getElementById('quiz-container').style.display = 'none'; + resultsContainer.style.display = 'block'; + resultsScore.innerHTML = + 'You scored ' + score + ' / ' + total + ' (' + pct + '%)'; + } + + retakeBtn.addEventListener('click', function () { + resultsContainer.style.display = 'none'; + document.getElementById('quiz-container').style.display = 'block'; + renderQuiz(); + startTimer(); + }); + + proceedPaymentBtn.addEventListener('click', function () { + resultsContainer.style.display = 'none'; + paymentContainer.style.display = 'block'; + }); + + // ────────────────────────────────────────────── + // Stripe payment integration (Payment Intents API) + // ────────────────────────────────────────────── + var stripeInstance = null; + var cardElement = null; + + // Fetch the publishable key from the server (no hardcoded keys) + fetch('/api/v1/payments/config') + .then(function (response) { return response.json(); }) + .then(function (data) { + if (data.success && data.data.publishableKey) { + stripeInstance = Stripe(data.data.publishableKey); + var elements = stripeInstance.elements(); + cardElement = elements.create('card'); + cardElement.mount('#card-element'); + } + }) + .catch(function (err) { + console.error('Failed to load Stripe config:', err); + }); + + document.getElementById('payment-form').addEventListener('submit', function (event) { + event.preventDefault(); + + if (!stripeInstance || !cardElement) { + alert('Payment system is not ready. Please try again.'); + return; + } + + var submitBtn = document.getElementById('submit-payment'); + submitBtn.disabled = true; + submitBtn.textContent = 'Processing…'; + + // Step 1: Create a PaymentIntent on the server (amount is server-authoritative) + fetch('/api/v1/payments/create-payment-intent', { + method: 'POST', + headers: { 'Content-Type': 'application/json' }, + body: JSON.stringify({ + email: document.getElementById('signin-email') + ? document.getElementById('signin-email').value + : undefined + }) + }) + .then(function (response) { return response.json(); }) + .then(function (data) { + if (!data.success) { + throw new Error(data.error?.message || 'Failed to create payment'); + } + // Step 2: Confirm the payment on the client side + return stripeInstance.confirmCardPayment(data.data.clientSecret, { + payment_method: { card: cardElement } + }); + }) + .then(function (result) { + if (result.error) { + alert('Payment failed: ' + result.error.message); + } else if (result.paymentIntent && result.paymentIntent.status === 'succeeded') { + alert('\uD83C\uDF89 Payment successful! You now have full access.'); + } + }) + .catch(function (err) { + console.error('Payment error:', err); + alert('Payment failed. Please try again.'); + }) + .finally(function () { + submitBtn.disabled = false; + submitBtn.textContent = 'Pay Now'; + }); + }); +}); diff --git a/public/style.css b/public/style.css new file mode 100644 index 0000000..7bb938e --- /dev/null +++ b/public/style.css @@ -0,0 +1,392 @@ +/* style.css */ + +/* ─── Reset & Base ─────────────────────────────── */ +*, *::before, *::after { + box-sizing: border-box; +} + +body { + font-family: 'Segoe UI', Arial, sans-serif; + background-color: #f0f2f5; + color: #333; + margin: 0; + padding: 0; + min-height: 100vh; +} + +a { + color: #0066cc; + text-decoration: none; +} + +a:hover { + text-decoration: underline; +} + +/* ─── Sign-In View ─────────────────────────────── */ +#signin-container { + display: flex; + align-items: center; + justify-content: center; + min-height: 100vh; + background: linear-gradient(135deg, #1a3c6e 0%, #0d5cad 100%); + padding: 20px; +} + +#signin-box { + background: #fff; + border-radius: 12px; + padding: 40px 36px; + width: 100%; + max-width: 420px; + box-shadow: 0 8px 32px rgba(0, 0, 0, 0.18); +} + +#signin-logo { + display: flex; + align-items: center; + justify-content: center; + gap: 10px; + margin-bottom: 16px; +} + +.logo-icon { + font-size: 2rem; +} + +.logo-text { + font-size: 1.3rem; + font-weight: 700; + color: #1a3c6e; +} + +#signin-box h2 { + text-align: center; + margin: 0 0 6px 0; + font-size: 1.4rem; + color: #1a3c6e; +} + +.signin-subtitle { + text-align: center; + color: #666; + font-size: 0.9rem; + margin: 0 0 24px 0; +} + +.signin-error { + background: #fff0f0; + border: 1px solid #f5c6cb; + color: #c0392b; + border-radius: 6px; + padding: 10px 14px; + font-size: 0.88rem; + margin-bottom: 16px; +} + +.form-group { + margin-bottom: 16px; +} + +.form-group label { + display: block; + font-size: 0.88rem; + font-weight: 600; + color: #444; + margin-bottom: 6px; +} + +.form-group input { + width: 100%; + padding: 11px 14px; + border: 1px solid #ccc; + border-radius: 7px; + font-size: 0.95rem; + outline: none; + transition: border-color 0.2s; +} + +.form-group input:focus { + border-color: #0066cc; + box-shadow: 0 0 0 3px rgba(0, 102, 204, 0.12); +} + +/* ─── Shared Button Styles ─────────────────────── */ +.btn-primary { + display: block; + width: 100%; + padding: 12px; + background-color: #0d5cad; + color: #fff; + border: none; + border-radius: 7px; + font-size: 1rem; + font-weight: 600; + cursor: pointer; + transition: background-color 0.2s; + text-align: center; +} + +.btn-primary:hover { + background-color: #0a4a8a; +} + +.btn-guest { + display: block; + width: 100%; + padding: 11px; + background-color: #fff; + color: #0d5cad; + border: 2px solid #0d5cad; + border-radius: 7px; + font-size: 0.95rem; + font-weight: 600; + cursor: pointer; + transition: background-color 0.2s, color 0.2s; + text-align: center; +} + +.btn-guest:hover { + background-color: #e8f0fb; +} + +.btn-signout { + padding: 7px 16px; + background-color: transparent; + color: #fff; + border: 1px solid rgba(255, 255, 255, 0.6); + border-radius: 6px; + font-size: 0.85rem; + cursor: pointer; + transition: background-color 0.2s; + width: auto; +} + +.btn-signout:hover { + background-color: rgba(255, 255, 255, 0.15); +} + +.signin-divider { + display: flex; + align-items: center; + text-align: center; + color: #aaa; + font-size: 0.85rem; + margin: 18px 0; +} + +.signin-divider::before, +.signin-divider::after { + content: ''; + flex: 1; + border-bottom: 1px solid #ddd; +} + +.signin-divider span { + padding: 0 10px; +} + +.signin-footer { + text-align: center; + font-size: 0.85rem; + color: #666; + margin-top: 20px; + margin-bottom: 0; +} + +/* ─── App Header ───────────────────────────────── */ +#app-header { + display: flex; + align-items: center; + justify-content: space-between; + background: #1a3c6e; + color: #fff; + padding: 12px 24px; + position: sticky; + top: 0; + z-index: 100; + box-shadow: 0 2px 8px rgba(0,0,0,0.15); +} + +.header-left { + display: flex; + align-items: center; + gap: 10px; +} + +.header-left .logo-text { + color: #fff; + font-size: 1.1rem; +} + +.header-right { + display: flex; + align-items: center; + gap: 14px; + font-size: 0.9rem; +} + +/* ─── Quiz Container ───────────────────────────── */ +#quiz-container { + max-width: 700px; + margin: 30px auto; + padding: 28px 32px; + background: #fff; + border-radius: 10px; + box-shadow: 0 2px 12px rgba(0, 0, 0, 0.09); +} + +#quiz-header { + display: flex; + align-items: center; + justify-content: space-between; + margin-bottom: 24px; + flex-wrap: wrap; + gap: 12px; +} + +#quiz-title { + margin: 0; + font-size: 1.4rem; + color: #1a3c6e; +} + +/* ─── Timer ────────────────────────────────────── */ +#timer-box { + display: flex; + flex-direction: column; + align-items: center; + background: #f0f5ff; + border: 2px solid #0d5cad; + border-radius: 8px; + padding: 8px 18px; + min-width: 120px; +} + +.timer-label { + font-size: 0.75rem; + font-weight: 600; + color: #555; + text-transform: uppercase; + letter-spacing: 0.05em; +} + +#timer-display { + font-size: 1.6rem; + font-weight: 700; + font-variant-numeric: tabular-nums; + color: #0d5cad; + letter-spacing: 0.05em; +} + +#timer-display.timer-warning { + color: #c0392b; + animation: pulse 1s infinite; +} + +@keyframes pulse { + 0%, 100% { opacity: 1; } + 50% { opacity: 0.6; } +} + +/* ─── Question Styles ──────────────────────────── */ +.question { + background: #f8f9fa; + border: 1px solid #e0e0e0; + border-radius: 8px; + padding: 18px 20px; + margin-bottom: 18px; +} + +.question-text { + margin: 0 0 12px 0; + font-size: 1rem; + line-height: 1.5; + color: #222; +} + +.option-label { + display: flex; + align-items: center; + gap: 10px; + padding: 9px 12px; + border-radius: 6px; + cursor: pointer; + font-size: 0.95rem; + transition: background-color 0.15s; + margin-bottom: 4px; +} + +.option-label:hover { + background-color: #e8f0fb; +} + +.option-label input[type="radio"] { + accent-color: #0d5cad; + width: 16px; + height: 16px; + flex-shrink: 0; +} + +/* ─── Quiz Actions ─────────────────────────────── */ +#quiz-actions { + margin-top: 24px; +} + +/* ─── Results Container ────────────────────────── */ +#results-container { + max-width: 700px; + margin: 30px auto; + padding: 36px 32px; + background: #fff; + border-radius: 10px; + box-shadow: 0 2px 12px rgba(0, 0, 0, 0.09); + text-align: center; +} + +#results-container h2 { + color: #1a3c6e; + margin-bottom: 16px; +} + +#results-score { + font-size: 1.2rem; + margin-bottom: 28px; + color: #333; +} + +#results-container .btn-primary { + max-width: 240px; + margin: 8px auto; +} + +/* ─── Payment Container ────────────────────────── */ +#payment-container { + max-width: 700px; + margin: 30px auto; + padding: 28px 32px; + background: #fff; + border-radius: 10px; + box-shadow: 0 2px 12px rgba(0, 0, 0, 0.09); +} + +#payment-container h2 { + color: #1a3c6e; + text-align: center; + margin-bottom: 8px; +} + +#payment-container p { + text-align: center; + color: #555; + margin-bottom: 20px; +} + +#card-element { + border: 1px solid #ccc; + border-radius: 7px; + padding: 12px; + margin-bottom: 16px; + background: #fafafa; +} + diff --git a/render.yaml b/render.yaml index d8578ef..7e1cf10 100644 --- a/render.yaml +++ b/render.yaml @@ -1,6 +1,32 @@ services: + # ── Backend API ───────────────────────────────── - type: web - name: quiz-app + name: exam-practice-pro-api + runtime: node + buildCommand: npm ci --omit=dev + startCommand: node src/server.js + healthCheckPath: /health + envVars: + - key: NODE_ENV + value: production + - key: NODE_VERSION + value: 22 + - key: STRIPE_SECRET_KEY + sync: false + - key: STRIPE_PUBLISHABLE_KEY + sync: false + - key: STRIPE_WEBHOOK_SECRET + sync: false + - key: JWT_SECRET + generateValue: true + - key: CORS_ORIGINS + sync: false + - key: LOG_LEVEL + value: info + + # ── Next.js Frontend ─────────────────────────── + - type: web + name: exam-practice-pro-frontend runtime: node rootDir: exam-practice-pro buildCommand: npm install && npm run build diff --git a/server.js b/server.js index 0d7e603..efd89c8 100644 --- a/server.js +++ b/server.js @@ -1,29 +1,50 @@ // server.js -const express = require('express'); -const stripe = require('stripe')('your-secret-key-here'); // Replace with your Stripe secret key -const bodyParser = require('body-parser'); -const app = express(); +// ───────────────────────────────────────────────────────── +// DEPRECATED — this file is kept for reference only. +// The production server has been refactored into src/server.js. +// +// To start the application, run: +// npm start (uses src/server.js) +// npm run dev (uses src/server.js with --watch) +// ───────────────────────────────────────────────────────── +// +// WHAT WAS WRONG WITH THIS FILE: +// +// 1. HARDCODED SECRET KEY (OWASP A02:2021 – Cryptographic Failures) +// const stripe = require('stripe')('your-secret-key-here'); +// → Secrets must come from environment variables, never source code. +// +// 2. DEPRECATED CHARGES API +// stripe.charges.create({...}) is legacy. +// → Replaced with the Payment Intents API for SCA compliance & better UX. +// +// 3. NO INPUT VALIDATION (OWASP A03:2021 – Injection) +// The /charge endpoint blindly trusted client-sent token + amount. +// → Server now enforces amount validation & uses express-validator. +// +// 4. NO ERROR DETAILS / LOGGING +// res.json({success: false}) — no diagnostics for debugging. +// → Centralised error handler + Pino structured logging. +// +// 5. NO SECURITY HEADERS (OWASP A05:2021) +// No helmet, no CORS, no rate limiting. +// → All added in src/app.js. +// +// 6. NO WEBHOOK VERIFICATION +// Without webhooks, payment confirmation relies on client → trivially spoofable. +// → Stripe webhook with signature verification added. +// +// 7. NO GRACEFUL SHUTDOWN +// process.exit() on errors would drop in-flight requests. +// → SIGTERM / SIGINT handlers added in src/server.js. +// +// See README.md for the full architecture overview. +// ───────────────────────────────────────────────────────── -app.use(bodyParser.json()); -app.use(express.static('public')); // Assuming your HTML, CSS, and JS files are in 'public' directory +// eslint-disable-next-line no-console +console.warn( + '⚠️ server.js is deprecated. Use `npm start` to run src/server.js instead.' +); -app.post('/charge', async (req, res) => { - const {token} = req.body; +require('./src/server'); - try { - const charge = await stripe.charges.create({ - amount: 5000, // Amount in cents - currency: 'usd', - description: 'Quiz Payment', - source: token, - }); - - res.json({success: true}); - } catch (error) { - res.json({success: false}); - } -}); - -app.listen(3000, () => { - console.log('Server running on port 3000'); -}); diff --git a/src/app.js b/src/app.js new file mode 100644 index 0000000..7d5aef7 --- /dev/null +++ b/src/app.js @@ -0,0 +1,99 @@ +'use strict'; + +const express = require('express'); +const helmet = require('helmet'); +const cors = require('cors'); +const config = require('./config'); +const logger = require('./utils/logger'); +const routes = require('./routes'); +const { errorHandler, notFound } = require('./middleware/error-handler'); +const { generalLimiter } = require('./middleware/rate-limiter'); +const paymentController = require('./controllers/payment.controller'); + +const app = express(); + +// ────────────────────────────────────────────────────────── +// 1. Security headers (OWASP A05:2021 – Security Misconfiguration) +// ────────────────────────────────────────────────────────── +app.use( + helmet({ + contentSecurityPolicy: { + directives: { + defaultSrc: ["'self'"], + scriptSrc: ["'self'", 'https://js.stripe.com'], + frameSrc: ["'self'", 'https://js.stripe.com', 'https://hooks.stripe.com'], + connectSrc: ["'self'", 'https://api.stripe.com'], + styleSrc: ["'self'", "'unsafe-inline'"], + imgSrc: ["'self'", 'data:', 'https:'], + }, + }, + crossOriginEmbedderPolicy: false, // Required for Stripe iframe + }) +); + +// ────────────────────────────────────────────────────────── +// 2. CORS (OWASP A01:2021 – Broken Access Control) +// ────────────────────────────────────────────────────────── +app.use( + cors({ + origin: config.cors.origins, + methods: ['GET', 'POST'], + allowedHeaders: ['Content-Type', 'Authorization', 'Stripe-Signature'], + credentials: true, + maxAge: 86400, + }) +); + +// ────────────────────────────────────────────────────────── +// 3. Stripe webhook — MUST be registered BEFORE json body parser +// because Stripe needs the raw body for signature verification. +// ────────────────────────────────────────────────────────── +app.post( + '/api/v1/payments/webhook', + express.raw({ type: 'application/json' }), + paymentController.handleWebhook +); + +// ────────────────────────────────────────────────────────── +// 4. Body parsing +// ────────────────────────────────────────────────────────── +app.use(express.json({ limit: '10kb' })); +app.use(express.urlencoded({ extended: false, limit: '10kb' })); + +// ────────────────────────────────────────────────────────── +// 5. Request logging +// ────────────────────────────────────────────────────────── +app.use((req, _res, next) => { + logger.info({ method: req.method, url: req.url }, 'incoming request'); + next(); +}); + +// ────────────────────────────────────────────────────────── +// 6. Global rate limiter +// ────────────────────────────────────────────────────────── +app.use('/api/', generalLimiter); + +// ────────────────────────────────────────────────────────── +// 7. Static files (serves Index.html, script.js, style.css) +// ────────────────────────────────────────────────────────── +app.use(express.static('public')); + +// ────────────────────────────────────────────────────────── +// 8. API routes (versioned) +// ────────────────────────────────────────────────────────── +app.use('/api/v1', routes); + +// ────────────────────────────────────────────────────────── +// 9. Convenience redirect: /health → /api/v1/health +// ────────────────────────────────────────────────────────── +app.get('/health', (_req, res) => { + res.redirect('/api/v1/health'); +}); + +// ────────────────────────────────────────────────────────── +// 10. Error handling +// ────────────────────────────────────────────────────────── +app.use(notFound); +app.use(errorHandler); + +module.exports = app; diff --git a/src/config/index.js b/src/config/index.js new file mode 100644 index 0000000..6603dde --- /dev/null +++ b/src/config/index.js @@ -0,0 +1,71 @@ +'use strict'; + +const path = require('path'); + +// Load .env from the project root (one level above src/) +require('dotenv').config({ path: path.resolve(__dirname, '../../.env') }); + +/** + * Centralised configuration — every setting is read from env vars + * with sensible defaults for local development. + */ +const config = { + env: process.env.NODE_ENV || 'development', + port: parseInt(process.env.PORT, 10) || 3000, + + // ── Stripe ─────────────────────────────────────────── + stripe: { + secretKey: process.env.STRIPE_SECRET_KEY || '', + publishableKey: process.env.STRIPE_PUBLISHABLE_KEY || '', + webhookSecret: process.env.STRIPE_WEBHOOK_SECRET || '', + currency: 'usd', + /** Amount in cents — $50.00 for full exam access */ + fullAccessAmountCents: 5000, + }, + + // ── JWT / Auth ─────────────────────────────────────── + jwt: { + secret: process.env.JWT_SECRET || '', + expiresIn: process.env.JWT_EXPIRES_IN || '24h', + }, + + // ── CORS ───────────────────────────────────────────── + cors: { + origins: process.env.CORS_ORIGINS + ? process.env.CORS_ORIGINS.split(',').map((o) => o.trim()) + : ['http://localhost:3000'], + }, + + // ── Logging ────────────────────────────────────────── + logLevel: process.env.LOG_LEVEL || 'info', +}; + +/** + * Validate that critical secrets are present in production. + * Throws at startup so the app doesn't run in an insecure state. + */ +function validateConfig() { + const missing = []; + + if (!config.stripe.secretKey) missing.push('STRIPE_SECRET_KEY'); + if (!config.stripe.webhookSecret) missing.push('STRIPE_WEBHOOK_SECRET'); + if (!config.jwt.secret) missing.push('JWT_SECRET'); + + if (config.env === 'production' && missing.length > 0) { + throw new Error( + `Missing required environment variables for production: ${missing.join(', ')}` + ); + } + + if (missing.length > 0) { + // In dev mode, log a warning instead of crashing + // eslint-disable-next-line no-console + console.warn( + `⚠️ Missing environment variables (non-fatal in dev): ${missing.join(', ')}` + ); + } +} + +validateConfig(); + +module.exports = config; diff --git a/src/controllers/auth.controller.js b/src/controllers/auth.controller.js new file mode 100644 index 0000000..8342f41 --- /dev/null +++ b/src/controllers/auth.controller.js @@ -0,0 +1,66 @@ +'use strict'; + +const authService = require('../services/auth.service'); + +/** + * POST /api/v1/auth/register + */ +async function register(req, res, next) { + try { + const { email, password } = req.body; + const result = await authService.register({ email, password }); + + res.status(201).json({ + success: true, + data: result, + }); + } catch (err) { + next(err); + } +} + +/** + * POST /api/v1/auth/login + */ +async function login(req, res, next) { + try { + const { email, password } = req.body; + const result = await authService.login({ email, password }); + + res.json({ + success: true, + data: result, + }); + } catch (err) { + next(err); + } +} + +/** + * POST /api/v1/auth/guest + */ +function guest(_req, res) { + const result = authService.createGuestSession(); + + res.json({ + success: true, + data: result, + }); +} + +/** + * GET /api/v1/auth/me + * + * Returns the current authenticated user's profile. + */ +function me(req, res) { + res.json({ + success: true, + data: { + user: req.user, + isGuest: req.isGuest || false, + }, + }); +} + +module.exports = { register, login, guest, me }; diff --git a/src/controllers/payment.controller.js b/src/controllers/payment.controller.js new file mode 100644 index 0000000..d3213db --- /dev/null +++ b/src/controllers/payment.controller.js @@ -0,0 +1,153 @@ +'use strict'; + +const stripeService = require('../services/stripe.service'); +const config = require('../config'); +const logger = require('../utils/logger'); + +/** + * POST /api/v1/payments/create-payment-intent + * + * Creates a Stripe PaymentIntent and returns the client secret + * so the frontend can confirm payment via Stripe.js. + */ +async function createPaymentIntent(req, res, next) { + try { + const { email } = req.body; + + // Amount is server-authoritative — never trust the client + const result = await stripeService.createPaymentIntent({ + amount: config.stripe.fullAccessAmountCents, + currency: config.stripe.currency, + customerEmail: email || undefined, + metadata: { + userId: req.user?.id || 'anonymous', + product: 'full_exam_access', + }, + }); + + res.status(201).json({ + success: true, + data: { + clientSecret: result.clientSecret, + paymentIntentId: result.paymentIntentId, + amount: config.stripe.fullAccessAmountCents, + currency: config.stripe.currency, + }, + }); + } catch (err) { + next(err); + } +} + +/** + * GET /api/v1/payments/status/:paymentIntentId + * + * Retrieve the status of a PaymentIntent (useful for polling). + */ +async function getPaymentStatus(req, res, next) { + try { + const { paymentIntentId } = req.params; + const paymentIntent = await stripeService.getPaymentIntent(paymentIntentId); + + res.json({ + success: true, + data: { + id: paymentIntent.id, + status: paymentIntent.status, + amount: paymentIntent.amount, + currency: paymentIntent.currency, + }, + }); + } catch (err) { + next(err); + } +} + +/** + * POST /api/v1/payments/webhook + * + * Stripe webhook endpoint — verifies signature and processes events. + * + * IMPORTANT: This endpoint must receive the **raw** body (not JSON-parsed). + * The route is registered BEFORE the global JSON body-parser in app.js. + */ +async function handleWebhook(req, res, next) { + try { + const signature = req.headers['stripe-signature']; + if (!signature) { + return res.status(400).json({ + success: false, + error: { message: 'Missing Stripe-Signature header' }, + }); + } + + const event = stripeService.constructWebhookEvent(req.body, signature); + + logger.info({ eventType: event.type, eventId: event.id }, 'Stripe webhook received'); + + switch (event.type) { + case 'payment_intent.succeeded': { + const paymentIntent = event.data.object; + logger.info( + { paymentIntentId: paymentIntent.id, amount: paymentIntent.amount }, + 'Payment succeeded' + ); + // TODO: update user's payment status in database + // await UserModel.updatePaymentStatus(paymentIntent.metadata.userId, 'paid'); + break; + } + + case 'payment_intent.payment_failed': { + const paymentIntent = event.data.object; + logger.warn( + { + paymentIntentId: paymentIntent.id, + error: paymentIntent.last_payment_error?.message, + }, + 'Payment failed' + ); + // TODO: update user's payment status / notify + break; + } + + default: + logger.debug({ eventType: event.type }, 'Unhandled Stripe event type'); + } + + // Stripe expects a 200 response to acknowledge receipt + res.json({ received: true }); + } catch (err) { + // Signature verification failures should return 400 + if (err.type === 'StripeSignatureVerificationError') { + logger.warn({ err }, 'Stripe webhook signature verification failed'); + return res.status(400).json({ + success: false, + error: { message: 'Webhook signature verification failed' }, + }); + } + next(err); + } +} + +/** + * GET /api/v1/payments/config + * + * Returns the Stripe publishable key for frontend initialisation. + */ +function getStripeConfig(_req, res) { + res.json({ + success: true, + data: { + publishableKey: config.stripe.publishableKey, + amount: config.stripe.fullAccessAmountCents, + currency: config.stripe.currency, + }, + }); +} + +module.exports = { + createPaymentIntent, + getPaymentStatus, + handleWebhook, + getStripeConfig, +}; diff --git a/src/middleware/auth.js b/src/middleware/auth.js new file mode 100644 index 0000000..e97bc08 --- /dev/null +++ b/src/middleware/auth.js @@ -0,0 +1,85 @@ +'use strict'; + +const jwt = require('jsonwebtoken'); +const config = require('../config'); +const logger = require('../utils/logger'); + +/** + * Express middleware that verifies a JWT bearer token. + * + * Populates `req.user` with the decoded payload on success. + * Returns 401 for missing/invalid tokens. + */ +function authenticateToken(req, res, next) { + const authHeader = req.headers.authorization; + const token = authHeader && authHeader.startsWith('Bearer ') + ? authHeader.slice(7) + : null; + + if (!token) { + return res.status(401).json({ + success: false, + error: { message: 'Authentication required' }, + }); + } + + try { + const decoded = jwt.verify(token, config.jwt.secret); + req.user = decoded; + next(); + } catch (err) { + logger.warn({ err }, 'Invalid or expired token'); + return res.status(401).json({ + success: false, + error: { message: 'Invalid or expired token' }, + }); + } +} + +/** + * Middleware that allows both authenticated and guest users through, + * but marks the request accordingly. + * + * - If a valid JWT is present → `req.user` is populated, `req.isGuest = false`. + * - If no JWT is present → `req.user = { id: 'guest', role: 'guest' }`, `req.isGuest = true`. + */ +function allowGuest(req, _res, next) { + const authHeader = req.headers.authorization; + const token = authHeader && authHeader.startsWith('Bearer ') + ? authHeader.slice(7) + : null; + + if (token) { + try { + const decoded = jwt.verify(token, config.jwt.secret); + req.user = decoded; + req.isGuest = false; + return next(); + } catch { + // Token invalid — fall through to guest + } + } + + req.user = { id: 'guest', role: 'guest' }; + req.isGuest = true; + next(); +} + +/** + * Role-based access control middleware factory. + * + * Usage: `router.get('/admin', authenticateToken, requireRole('admin'), handler)` + */ +function requireRole(...roles) { + return (req, res, next) => { + if (!req.user || !roles.includes(req.user.role)) { + return res.status(403).json({ + success: false, + error: { message: 'Insufficient permissions' }, + }); + } + next(); + }; +} + +module.exports = { authenticateToken, allowGuest, requireRole }; diff --git a/src/middleware/error-handler.js b/src/middleware/error-handler.js new file mode 100644 index 0000000..abeb0db --- /dev/null +++ b/src/middleware/error-handler.js @@ -0,0 +1,39 @@ +'use strict'; + +const logger = require('../utils/logger'); + +/** + * Centralised Express error-handling middleware. + * + * - Logs the full error server-side. + * - Returns a safe JSON payload to the client (no stack traces in production). + */ +// eslint-disable-next-line no-unused-vars +function errorHandler(err, _req, res, _next) { + const statusCode = err.statusCode || 500; + const isProduction = process.env.NODE_ENV === 'production'; + + logger.error({ err, statusCode }, err.message); + + res.status(statusCode).json({ + success: false, + error: { + message: isProduction && statusCode === 500 + ? 'Internal server error' + : err.message, + ...(!isProduction && { stack: err.stack }), + }, + }); +} + +/** + * Catch-all for undefined routes. + */ +function notFound(_req, res) { + res.status(404).json({ + success: false, + error: { message: 'Resource not found' }, + }); +} + +module.exports = { errorHandler, notFound }; diff --git a/src/middleware/rate-limiter.js b/src/middleware/rate-limiter.js new file mode 100644 index 0000000..f2b29b6 --- /dev/null +++ b/src/middleware/rate-limiter.js @@ -0,0 +1,58 @@ +'use strict'; + +const rateLimit = require('express-rate-limit'); +const logger = require('../utils/logger'); + +/** + * General API rate limiter — 100 requests per 15-minute window. + */ +const generalLimiter = rateLimit({ + windowMs: 15 * 60 * 1000, + max: 100, + standardHeaders: true, + legacyHeaders: false, + handler: (_req, res) => { + logger.warn('General rate limit exceeded'); + res.status(429).json({ + success: false, + error: { message: 'Too many requests. Please try again later.' }, + }); + }, +}); + +/** + * Strict rate limiter for payment endpoints — 10 requests per 15-minute window. + * Protects against brute-force / replay attacks on the payment flow. + */ +const paymentLimiter = rateLimit({ + windowMs: 15 * 60 * 1000, + max: 10, + standardHeaders: true, + legacyHeaders: false, + handler: (_req, res) => { + logger.warn('Payment rate limit exceeded'); + res.status(429).json({ + success: false, + error: { message: 'Too many payment attempts. Please wait before trying again.' }, + }); + }, +}); + +/** + * Auth rate limiter — 20 requests per 15-minute window. + */ +const authLimiter = rateLimit({ + windowMs: 15 * 60 * 1000, + max: 20, + standardHeaders: true, + legacyHeaders: false, + handler: (_req, res) => { + logger.warn('Auth rate limit exceeded'); + res.status(429).json({ + success: false, + error: { message: 'Too many authentication attempts. Please wait before trying again.' }, + }); + }, +}); + +module.exports = { generalLimiter, paymentLimiter, authLimiter }; diff --git a/src/middleware/validate.js b/src/middleware/validate.js new file mode 100644 index 0000000..b12231f --- /dev/null +++ b/src/middleware/validate.js @@ -0,0 +1,28 @@ +'use strict'; + +const { validationResult } = require('express-validator'); + +/** + * Express middleware that checks express-validator results. + * + * Place after your validation chains: + * router.post('/pay', [...validations], validate, controller); + */ +function validate(req, res, next) { + const errors = validationResult(req); + if (!errors.isEmpty()) { + return res.status(400).json({ + success: false, + error: { + message: 'Validation failed', + details: errors.array().map((e) => ({ + field: e.path, + message: e.msg, + })), + }, + }); + } + next(); +} + +module.exports = { validate }; diff --git a/src/models/schemas.js b/src/models/schemas.js new file mode 100644 index 0000000..b41629d --- /dev/null +++ b/src/models/schemas.js @@ -0,0 +1,166 @@ +'use strict'; + +/** + * Database schema models for the Exam Practice Pro platform. + * + * ───────────────────────────────────────────────────────── + * RECOMMENDED DATABASE: PostgreSQL + * + * Why PostgreSQL? + * - Strong relational data (users ↔ quiz attempts ↔ payments) + * - ACID transactions for payment status updates + * - JSON/JSONB columns for flexible quiz answer storage + * - Mature ecosystem, excellent Node.js support (pg, Prisma, Drizzle) + * - Scales well for read-heavy SaaS workloads + * ───────────────────────────────────────────────────────── + * + * These are reference schemas. When adding a real database, + * use an ORM/query builder (Prisma, Drizzle, Knex) to generate + * migration files from these definitions. + * + * SQL equivalent is provided in comments for clarity. + */ + +/* +-- ──────────────────────────────────────────────── +-- users +-- ──────────────────────────────────────────────── +CREATE TABLE users ( + id UUID PRIMARY KEY DEFAULT gen_random_uuid(), + email VARCHAR(255) UNIQUE NOT NULL, + password_hash VARCHAR(255) NOT NULL, + role VARCHAR(20) NOT NULL DEFAULT 'user', -- 'guest' | 'user' | 'paid' | 'admin' + payment_status VARCHAR(20) NOT NULL DEFAULT 'unpaid', -- 'unpaid' | 'paid' | 'refunded' + stripe_customer_id VARCHAR(255), + created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(), + updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW() +); + +CREATE INDEX idx_users_email ON users(email); +CREATE INDEX idx_users_stripe_customer_id ON users(stripe_customer_id); + +-- ──────────────────────────────────────────────── +-- quiz_attempts +-- ──────────────────────────────────────────────── +CREATE TABLE quiz_attempts ( + id UUID PRIMARY KEY DEFAULT gen_random_uuid(), + user_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE, + quiz_id VARCHAR(100) NOT NULL, + score INTEGER NOT NULL, + total INTEGER NOT NULL, + percentage DECIMAL(5,2) NOT NULL, + passed BOOLEAN NOT NULL, + time_spent_s INTEGER, -- seconds + answers JSONB, -- { questionId: selectedAnswer } + started_at TIMESTAMPTZ NOT NULL, + completed_at TIMESTAMPTZ NOT NULL DEFAULT NOW() +); + +CREATE INDEX idx_quiz_attempts_user ON quiz_attempts(user_id); +CREATE INDEX idx_quiz_attempts_quiz ON quiz_attempts(quiz_id); + +-- ──────────────────────────────────────────────── +-- payments +-- ──────────────────────────────────────────────── +CREATE TABLE payments ( + id UUID PRIMARY KEY DEFAULT gen_random_uuid(), + user_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE, + stripe_payment_intent_id VARCHAR(255) UNIQUE NOT NULL, + amount_cents INTEGER NOT NULL, + currency VARCHAR(10) NOT NULL DEFAULT 'usd', + status VARCHAR(30) NOT NULL, -- mirrors Stripe PaymentIntent status + created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(), + updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW() +); + +CREATE INDEX idx_payments_user ON payments(user_id); +CREATE INDEX idx_payments_stripe ON payments(stripe_payment_intent_id); + +-- ──────────────────────────────────────────────── +-- scores (leaderboard / analytics) +-- ──────────────────────────────────────────────── +CREATE TABLE scores ( + id UUID PRIMARY KEY DEFAULT gen_random_uuid(), + user_id UUID NOT NULL REFERENCES users(id) ON DELETE CASCADE, + quiz_id VARCHAR(100) NOT NULL, + best_score INTEGER NOT NULL, + best_pct DECIMAL(5,2) NOT NULL, + attempts INTEGER NOT NULL DEFAULT 1, + last_attempt TIMESTAMPTZ NOT NULL DEFAULT NOW(), + UNIQUE(user_id, quiz_id) +); + +CREATE INDEX idx_scores_user ON scores(user_id); +*/ + +/** + * JavaScript object representations (for ORM integration). + * + * These mirror the SQL above and can be used directly with + * Prisma schema, Drizzle table definitions, or Knex migrations. + */ +const UserSchema = { + tableName: 'users', + columns: { + id: { type: 'uuid', primaryKey: true, default: 'gen_random_uuid()' }, + email: { type: 'varchar(255)', unique: true, nullable: false }, + password_hash: { type: 'varchar(255)', nullable: false }, + role: { type: 'varchar(20)', nullable: false, default: 'user' }, + payment_status: { type: 'varchar(20)', nullable: false, default: 'unpaid' }, + stripe_customer_id: { type: 'varchar(255)', nullable: true }, + created_at: { type: 'timestamptz', nullable: false, default: 'NOW()' }, + updated_at: { type: 'timestamptz', nullable: false, default: 'NOW()' }, + }, +}; + +const QuizAttemptSchema = { + tableName: 'quiz_attempts', + columns: { + id: { type: 'uuid', primaryKey: true, default: 'gen_random_uuid()' }, + user_id: { type: 'uuid', nullable: false, references: 'users.id' }, + quiz_id: { type: 'varchar(100)', nullable: false }, + score: { type: 'integer', nullable: false }, + total: { type: 'integer', nullable: false }, + percentage: { type: 'decimal(5,2)', nullable: false }, + passed: { type: 'boolean', nullable: false }, + time_spent_s: { type: 'integer', nullable: true }, + answers: { type: 'jsonb', nullable: true }, + started_at: { type: 'timestamptz', nullable: false }, + completed_at: { type: 'timestamptz', nullable: false, default: 'NOW()' }, + }, +}; + +const PaymentSchema = { + tableName: 'payments', + columns: { + id: { type: 'uuid', primaryKey: true, default: 'gen_random_uuid()' }, + user_id: { type: 'uuid', nullable: false, references: 'users.id' }, + stripe_payment_intent_id: { type: 'varchar(255)', unique: true, nullable: false }, + amount_cents: { type: 'integer', nullable: false }, + currency: { type: 'varchar(10)', nullable: false, default: 'usd' }, + status: { type: 'varchar(30)', nullable: false }, + created_at: { type: 'timestamptz', nullable: false, default: 'NOW()' }, + updated_at: { type: 'timestamptz', nullable: false, default: 'NOW()' }, + }, +}; + +const ScoreSchema = { + tableName: 'scores', + columns: { + id: { type: 'uuid', primaryKey: true, default: 'gen_random_uuid()' }, + user_id: { type: 'uuid', nullable: false, references: 'users.id' }, + quiz_id: { type: 'varchar(100)', nullable: false }, + best_score: { type: 'integer', nullable: false }, + best_pct: { type: 'decimal(5,2)', nullable: false }, + attempts: { type: 'integer', nullable: false, default: 1 }, + last_attempt: { type: 'timestamptz', nullable: false, default: 'NOW()' }, + }, + uniqueConstraints: [['user_id', 'quiz_id']], +}; + +module.exports = { + UserSchema, + QuizAttemptSchema, + PaymentSchema, + ScoreSchema, +}; diff --git a/src/routes/auth.js b/src/routes/auth.js new file mode 100644 index 0000000..b4f5254 --- /dev/null +++ b/src/routes/auth.js @@ -0,0 +1,60 @@ +'use strict'; + +const { Router } = require('express'); +const { body } = require('express-validator'); +const { validate } = require('../middleware/validate'); +const { authLimiter } = require('../middleware/rate-limiter'); +const { authenticateToken, allowGuest } = require('../middleware/auth'); +const authController = require('../controllers/auth.controller'); + +const router = Router(); + +/** + * POST /register + */ +router.post( + '/register', + authLimiter, + [ + body('email') + .isEmail() + .withMessage('A valid email address is required') + .normalizeEmail(), + body('password') + .isLength({ min: 8 }) + .withMessage('Password must be at least 8 characters'), + ], + validate, + authController.register +); + +/** + * POST /login + */ +router.post( + '/login', + authLimiter, + [ + body('email') + .isEmail() + .withMessage('A valid email address is required') + .normalizeEmail(), + body('password') + .notEmpty() + .withMessage('Password is required'), + ], + validate, + authController.login +); + +/** + * POST /guest + */ +router.post('/guest', authLimiter, authController.guest); + +/** + * GET /me + */ +router.get('/me', allowGuest, authController.me); + +module.exports = router; diff --git a/src/routes/health.js b/src/routes/health.js new file mode 100644 index 0000000..fcb7378 --- /dev/null +++ b/src/routes/health.js @@ -0,0 +1,25 @@ +'use strict'; + +const { Router } = require('express'); + +const router = Router(); + +/** + * GET /api/v1/health + * + * Lightweight health-check endpoint for load balancers, + * container orchestrators, and monitoring systems. + */ +router.get('/', (_req, res) => { + res.json({ + success: true, + data: { + status: 'healthy', + timestamp: new Date().toISOString(), + uptime: process.uptime(), + version: process.env.npm_package_version || '1.0.0', + }, + }); +}); + +module.exports = router; diff --git a/src/routes/index.js b/src/routes/index.js new file mode 100644 index 0000000..ba5a74e --- /dev/null +++ b/src/routes/index.js @@ -0,0 +1,15 @@ +'use strict'; + +const { Router } = require('express'); +const healthRoutes = require('./health'); +const paymentRoutes = require('./payment'); +const authRoutes = require('./auth'); + +const router = Router(); + +// ── API v1 routes ────────────────────────────────────── +router.use('/health', healthRoutes); +router.use('/payments', paymentRoutes); +router.use('/auth', authRoutes); + +module.exports = router; diff --git a/src/routes/payment.js b/src/routes/payment.js new file mode 100644 index 0000000..25d646b --- /dev/null +++ b/src/routes/payment.js @@ -0,0 +1,56 @@ +'use strict'; + +const { Router } = require('express'); +const { body, param } = require('express-validator'); +const { validate } = require('../middleware/validate'); +const { paymentLimiter } = require('../middleware/rate-limiter'); +const { allowGuest } = require('../middleware/auth'); +const paymentController = require('../controllers/payment.controller'); + +const router = Router(); + +/** + * GET /config + * Returns the Stripe publishable key for frontend init. + */ +router.get('/config', paymentController.getStripeConfig); + +/** + * POST /create-payment-intent + * Creates a PaymentIntent (server-authoritative amount). + */ +router.post( + '/create-payment-intent', + paymentLimiter, + allowGuest, + [ + body('email') + .optional() + .isEmail() + .withMessage('A valid email address is required') + .normalizeEmail(), + ], + validate, + paymentController.createPaymentIntent +); + +/** + * GET /status/:paymentIntentId + * Retrieve PaymentIntent status. + */ +router.get( + '/status/:paymentIntentId', + [ + param('paymentIntentId') + .isString() + .matches(/^pi_/) + .withMessage('Invalid PaymentIntent ID format'), + ], + validate, + paymentController.getPaymentStatus +); + +// Note: The webhook route is registered separately in app.js +// because it needs the raw body (not JSON-parsed). + +module.exports = router; diff --git a/src/server.js b/src/server.js new file mode 100644 index 0000000..db26b86 --- /dev/null +++ b/src/server.js @@ -0,0 +1,52 @@ +'use strict'; + +const app = require('./app'); +const config = require('./config'); +const logger = require('./utils/logger'); + +// ────────────────────────────────────────────────────────── +// Start server +// ────────────────────────────────────────────────────────── +const server = app.listen(config.port, () => { + logger.info( + { + port: config.port, + env: config.env, + stripeMode: config.stripe.secretKey?.startsWith('sk_live') ? 'LIVE' : 'TEST', + }, + `🚀 Exam Practice Pro API running on port ${config.port}` + ); +}); + +// ────────────────────────────────────────────────────────── +// Graceful shutdown +// ────────────────────────────────────────────────────────── +function gracefulShutdown(signal) { + logger.info({ signal }, 'Received shutdown signal — closing server…'); + server.close(() => { + logger.info('HTTP server closed'); + // Close database connections, flush logs, etc. + process.exit(0); + }); + + // Force exit if graceful shutdown takes too long + setTimeout(() => { + logger.error('Graceful shutdown timed out — forcing exit'); + process.exit(1); + }, 10_000); +} + +process.on('SIGTERM', () => gracefulShutdown('SIGTERM')); +process.on('SIGINT', () => gracefulShutdown('SIGINT')); + +// ────────────────────────────────────────────────────────── +// Unhandled rejection / exception safety nets +// ────────────────────────────────────────────────────────── +process.on('unhandledRejection', (reason) => { + logger.error({ err: reason }, 'Unhandled promise rejection'); +}); + +process.on('uncaughtException', (err) => { + logger.fatal({ err }, 'Uncaught exception — shutting down'); + gracefulShutdown('uncaughtException'); +}); diff --git a/src/services/auth.service.js b/src/services/auth.service.js new file mode 100644 index 0000000..e7a1626 --- /dev/null +++ b/src/services/auth.service.js @@ -0,0 +1,125 @@ +'use strict'; + +const jwt = require('jsonwebtoken'); +const bcrypt = require('bcryptjs'); +const { v4: uuidv4 } = require('uuid'); +const config = require('../config'); +const logger = require('../utils/logger'); + +/** + * Authentication service. + * + * Short-term: demo/guest authentication with signed JWTs. + * Long-term: hook into a real user database (see models/user.model.js). + */ +class AuthService { + /** + * Register a new user (demo — stores nothing persistently). + * + * In a real implementation this would write to a database. + * + * @param {Object} params + * @param {string} params.email + * @param {string} params.password + * @returns {Promise<{token: string, user: Object}>} + */ + async register({ email, password }) { + // Hash password (even in demo mode — teaches the right pattern) + const salt = await bcrypt.genSalt(12); + const hashedPassword = await bcrypt.hash(password, salt); + + const user = { + id: uuidv4(), + email, + password: hashedPassword, + role: 'user', + createdAt: new Date().toISOString(), + }; + + logger.info({ userId: user.id, email }, 'User registered (demo)'); + + const token = this._signToken(user); + return { + token, + user: { id: user.id, email: user.email, role: user.role }, + }; + } + + /** + * Authenticate a user with email + password. + * + * Demo mode: accepts any non-empty credentials and returns a valid JWT. + * Production: would look up the user in the database and verify the hash. + * + * @param {Object} params + * @param {string} params.email + * @param {string} params.password + * @returns {Promise<{token: string, user: Object}>} + */ + async login({ email, password }) { + // ── Demo authentication ───────────────────────────── + // In production, replace this block with a real DB lookup: + // const user = await UserModel.findByEmail(email); + // if (!user) throw ... + // const valid = await bcrypt.compare(password, user.password); + // if (!valid) throw ... + // ──────────────────────────────────────────────────── + + if (!email || !password) { + throw Object.assign( + new Error('Email and password are required'), + { statusCode: 400 } + ); + } + + const user = { + id: uuidv4(), + email, + role: 'user', + }; + + logger.info({ userId: user.id, email }, 'User logged in (demo)'); + + const token = this._signToken(user); + return { + token, + user: { id: user.id, email: user.email, role: user.role }, + }; + } + + /** + * Create a guest session with limited privileges. + * + * @returns {{token: string, user: Object}} + */ + createGuestSession() { + const user = { + id: `guest-${uuidv4()}`, + email: null, + role: 'guest', + }; + + logger.info({ userId: user.id }, 'Guest session created'); + + const token = this._signToken(user); + return { + token, + user: { id: user.id, role: user.role }, + }; + } + + /** + * Sign a JWT for the given user payload. + * + * @private + */ + _signToken(user) { + return jwt.sign( + { id: user.id, email: user.email, role: user.role }, + config.jwt.secret || 'dev-secret-do-not-use-in-production', + { expiresIn: config.jwt.expiresIn } + ); + } +} + +module.exports = new AuthService(); diff --git a/src/services/stripe.service.js b/src/services/stripe.service.js new file mode 100644 index 0000000..a4b5c25 --- /dev/null +++ b/src/services/stripe.service.js @@ -0,0 +1,124 @@ +'use strict'; + +const Stripe = require('stripe'); +const config = require('../config'); +const logger = require('../utils/logger'); + +/** + * Stripe service — encapsulates all Stripe interactions. + * + * Uses the Payment Intents API (replaces deprecated Charges API). + */ +class StripeService { + constructor() { + this.stripe = config.stripe.secretKey + ? new Stripe(config.stripe.secretKey, { apiVersion: '2024-06-20' }) + : null; + + if (!this.stripe) { + logger.warn('Stripe secret key not configured — payment features disabled'); + } + } + + /** + * Create a PaymentIntent for the given amount. + * + * @param {Object} params + * @param {number} params.amount — amount in cents (server-authoritative) + * @param {string} params.currency + * @param {string} [params.customerEmail] + * @param {Object} [params.metadata] + * @returns {Promise<{clientSecret: string, paymentIntentId: string}>} + */ + async createPaymentIntent({ amount, currency, customerEmail, metadata = {} }) { + if (!this.stripe) { + throw Object.assign(new Error('Stripe is not configured'), { statusCode: 503 }); + } + + // Server-side amount validation — prevent client tampering + const validAmount = this._validateAmount(amount); + + const paymentIntent = await this.stripe.paymentIntents.create({ + amount: validAmount, + currency: currency || config.stripe.currency, + automatic_payment_methods: { enabled: true }, + metadata: { + ...metadata, + ...(customerEmail && { customerEmail }), + }, + ...(customerEmail && { receipt_email: customerEmail }), + }); + + logger.info( + { paymentIntentId: paymentIntent.id, amount: validAmount }, + 'PaymentIntent created' + ); + + return { + clientSecret: paymentIntent.client_secret, + paymentIntentId: paymentIntent.id, + }; + } + + /** + * Verify and construct a Stripe webhook event. + * + * @param {Buffer} rawBody — raw request body + * @param {string} signature — Stripe-Signature header value + * @returns {Stripe.Event} + */ + constructWebhookEvent(rawBody, signature) { + if (!this.stripe) { + throw Object.assign(new Error('Stripe is not configured'), { statusCode: 503 }); + } + + if (!config.stripe.webhookSecret) { + throw Object.assign( + new Error('Stripe webhook secret not configured'), + { statusCode: 503 } + ); + } + + return this.stripe.webhooks.constructEvent( + rawBody, + signature, + config.stripe.webhookSecret + ); + } + + /** + * Retrieve an existing PaymentIntent by ID. + */ + async getPaymentIntent(paymentIntentId) { + if (!this.stripe) { + throw Object.assign(new Error('Stripe is not configured'), { statusCode: 503 }); + } + return this.stripe.paymentIntents.retrieve(paymentIntentId); + } + + /** + * Validate amount against the known product catalog. + * Prevents client from sending an arbitrary (lower) amount. + * + * @private + * @param {number} requestedAmount — amount in cents + * @returns {number} validated amount + */ + _validateAmount(requestedAmount) { + const allowedAmounts = [config.stripe.fullAccessAmountCents]; + + if (!allowedAmounts.includes(requestedAmount)) { + throw Object.assign( + new Error( + `Invalid payment amount: ${requestedAmount}. Allowed: ${allowedAmounts.join(', ')}` + ), + { statusCode: 400 } + ); + } + + return requestedAmount; + } +} + +// Export singleton +module.exports = new StripeService(); diff --git a/src/utils/logger.js b/src/utils/logger.js new file mode 100644 index 0000000..a1a974c --- /dev/null +++ b/src/utils/logger.js @@ -0,0 +1,26 @@ +'use strict'; + +const pino = require('pino'); +const config = require('../config'); + +/** + * Application-wide logger (Pino). + * + * - In development: pretty-printed output via pino-pretty. + * - In production : structured JSON for ingestion by log aggregators. + */ +const logger = pino({ + level: config.logLevel, + ...(config.env !== 'production' && { + transport: { + target: 'pino-pretty', + options: { + colorize: true, + translateTime: 'SYS:standard', + ignore: 'pid,hostname', + }, + }, + }), +}); + +module.exports = logger;