Multiple Payment Methods

model Order {
  id     String @id @default(cuid())
  
  // Payment info
  totalAmount    Float
  quantity       Int
  currency       String
  paymentMethod  String
  paymentStatus  String @default("PENDING")
  
  // Payment processor data
  stripePaymentId    String?
  coinbaseChargeId   String?
  blockchainTxHash   String?
  paystackReference  String?
  flutterwaveReference String?
  mpesaCheckoutRequestId String?
  paymentTxId        String?
  
  // Customer info
  customerEmail  String
  customerName   String?
  billingAddress String? // JSON string
  
  createdAt DateTime @default(now())
  updatedAt DateTime @updatedAt

  // Relations
  user    User   @relation(fields: [userId], references: [id])
  userId  String
  
  event   Event  @relation(fields: [eventId], references: [id])
  eventId String
  
  tickets Ticket[]

  @@map("orders")
  @@index([paymentStatus])
}

# Payment gateways (required for initiating fiat checkouts)
VITE_PAYSTACK_PUBLIC_KEY=pk_test_your_paystack_key
VITE_FLUTTERWAVE_PUBLIC_KEY=FLWPUBK_TEST-your_flutterwave_key

# Blockchain options used by ticketing and wallet UX
VITE_CHAIN_ID=137
VITE_RPC_URL=https://polygon-rpc.com

# Notes:
# - Paystack and Flutterwave keys are required for fiat payments from the browser.
# - If you plan to use M-Pesa, you need a server-side endpoint; the client will display a message until configured.

function withdraw() external onlyOwner nonReentrant {
    uint256 balance = address(this).balance;
    
    // Calculate platform fee (250 basis points = 2.5%)
    uint256 platformFee = (balance * platformFeeBps) / 10000;
    uint256 organizerAmount = balance - platformFee;

    // Transfer platform fee
    if (platformFee > 0) {
        payable(platformFeeRecipient).transfer(platformFee);
    }

    // Transfer remaining to organizer
    payable(owner()).transfer(organizerAmount);
}

router.post('/paystack', asyncHandler(async (req, res) => {
  const event = req.body
  
  // Verify webhook signature
  const hash = crypto
    .createHmac('sha512', process.env.PAYSTACK_SECRET_KEY!)
    .update(JSON.stringify(req.body))
    .digest('hex')
  
  if (hash !== req.headers['x-paystack-signature']) {
    return res.status(400).send('Invalid signature')
  }
  
  if (event.event === 'charge.success') {
    const reference = event.data.reference
    
    const order = await prisma.order.findFirst({
      where: { paystackReference: reference }
    })
    
    if (order && order.paymentStatus === 'PENDING') {
      await prisma.order.update({
        where: { id: order.id },
        data: { 
          paymentStatus: 'COMPLETED',
          paymentTxId: event.data.id
        }
      })
      
      // Mint tickets
      await mintTicketsFor(order)
    }
  }
  
  res.status(200).send('OK')
}))