Integration Guide

app.post('/api/create-subscription', async (req, res) => {
  try {
    // Get user from session/auth
    const user = req.user;
    const { planId } = req.body;
    
    // Create checkout session
    const session = await eventop.checkout.create({
      merchantWallet: process.env.MERCHANT_WALLET,
      planId: planId,
      customerEmail: user.email,
      customerId: user.id.toString(),
      successUrl: `${process.env.BASE_URL}/subscription/success`,
      cancelUrl: `${process.env.BASE_URL}/pricing`,
      metadata: {
        userId: user.id,
        userName: user.name,
        source: 'web_pricing_page'
      }
    });
    
    // Redirect to checkout
    res.json({ checkoutUrl: session.url });
    
  } catch (error) {
    console.error('Checkout creation failed:', error);
    res.status(500).json({ error: 'Failed to create checkout session' });
  }
});

import { useState } from 'react';

export function SubscribeButton({ planId, planName }) {
  const [loading, setLoading] = useState(false);
  
  const handleSubscribe = async () => {
    setLoading(true);
    
    try {
      const response = await fetch('/api/create-subscription', {
        method: 'POST',
        headers: { 'Content-Type': 'application/json' },
        body: JSON.stringify({ planId })
      });
      
      const { checkoutUrl } = await response.json();
      
      // Redirect to checkout
      window.location.href = checkoutUrl;
      
    } catch (error) {
      console.error('Subscription failed:', error);
      alert('Failed to start checkout. Please try again.');
    } finally {
      setLoading(false);
    }
  };
  
  return (
    <button 
      onClick={handleSubscribe}
      disabled={loading}
      className="subscribe-button"
    >
      {loading ? 'Loading...' : `Subscribe to ${planName}`}
    </button>
  );
}

const crypto = require('crypto');

app.post('/webhooks/eventop', express.raw({ type: 'application/json' }), async (req, res) => {
  const signature = req.headers['x-webhook-signature'];
  const timestamp = req.headers['x-webhook-timestamp'];
  const webhookId = req.headers['x-webhook-id'];
  
  // Verify signature
  const payload = req.body.toString();
  const expectedSignature = crypto
    .createHmac('sha256', process.env.EVENTOP_WEBHOOK_SECRET)
    .update(payload)
    .digest('hex');
  
  if (!crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expectedSignature))) {
    return res.status(401).json({ error: 'Invalid signature' });
  }
  
  // Prevent replay attacks
  const age = Date.now() - parseInt(timestamp);
  if (age > 300000) { // 5 minutes
    return res.status(401).json({ error: 'Webhook too old' });
  }
  
  // Parse event
  const event = JSON.parse(payload);
  
  // Process event
  try {
    await processWebhookEvent(event);
    res.json({ received: true });
  } catch (error) {
    console.error('Webhook processing failed:', error);
    res.status(500).json({ error: 'Processing failed' });
  }
});