Payment Integration

import { serve } from 'https://deno.land/[email protected]/http/server.ts';
import MercadoPago from 'mercadopago';

serve(async (req) => {
  const { user_id, credits, price, pack_name, redirect_url } = await req.json();
  
  // Initialize MercadoPago
  mercadopago.configure({
    access_token: Deno.env.get('MERCADOPAGO_ACCESS_TOKEN')
  });
  
  // Create payment preference
  const preference = await mercadopago.preferences.create({
    items: [{
      title: `${pack_name} - ${credits} Créditos`,
      unit_price: price,
      quantity: 1
    }],
    back_urls: {
      success: `${redirect_url}?payment=success`,
      failure: `${redirect_url}?payment=failure`,
      pending: `${redirect_url}?payment=pending`
    },
    notification_url: `${redirect_url}/api/mercadopago-webhook`,
    metadata: {
      user_id,
      credits,
      pack_name
    }
  });
  
  return new Response(
    JSON.stringify({ init_point: preference.init_point }),
    { headers: { 'Content-Type': 'application/json' } }
  );
});

serve(async (req) => {
  const body = await req.json();
  
  // Validate webhook signature
  const signature = req.headers.get('x-signature');
  if (!validateSignature(signature, body)) {
    return new Response('Invalid signature', { status: 401 });
  }
  
  // Get payment details
  const paymentId = body.data.id;
  const payment = await mercadopago.payment.get(paymentId);
  
  // Only process approved payments
  if (payment.status !== 'approved') {
    return new Response('Payment not approved', { status: 200 });
  }
  
  // Extract metadata
  const { user_id, credits } = payment.metadata;
  
  // Add credits to user
  const { error } = await supabase
    .from('profiles')
    .update({ 
      credits: supabase.raw(`credits + ${credits}`) 
    })
    .eq('id', user_id);
  
  // Log transaction
  await supabase.from('transactions').insert({
    user_id,
    amount: credits,
    type: 'purchase',
    payment_id: paymentId,
    details: {
      method: payment.payment_method_id,
      price: payment.transaction_amount,
      currency: payment.currency_id
    }
  });
  
  return new Response('OK', { status: 200 });
});

const handlePaymentReturn = () => {
  const params = new URLSearchParams(window.location.search);
  const status = params.get('payment');
  
  switch (status) {
    case 'success':
      showToast('✅ Pago aprobado. Créditos agregados.', 'success');
      fetchProfile(); // Refresh credit balance
      break;
    
    case 'pending':
      showToast('⏳ Pago pendiente. Te avisaremos cuando se apruebe.', 'info');
      break;
    
    case 'failure':
      showToast('❌ Pago rechazado. Intenta nuevamente.', 'error');
      break;
  }
};

const handleRetryPayment = async () => {
  // Clear previous error state
  setErrorMessage(null);
  
  // Reinitiate payment flow
  await handlePayment(previousPack);
};

const validateSignature = (signature: string, body: any): boolean => {
  const crypto = require('crypto');
  const secret = Deno.env.get('MERCADOPAGO_WEBHOOK_SECRET');
  
  const hash = crypto
    .createHmac('sha256', secret)
    .update(JSON.stringify(body))
    .digest('hex');
  
  return hash === signature;
};

// Check if payment already processed
const { data: existing } = await supabase
  .from('transactions')
  .select('id')
  .eq('payment_id', paymentId)
  .single();

if (existing) {
  return new Response('Already processed', { status: 200 });
}

# Sandbox access token
MERCADOPAGO_ACCESS_TOKEN=TEST-xxxxxxxxxxxx

# Sandbox public key  
MERCADOPAGO_PUBLIC_KEY=TEST-xxxxxxxxxxxx

ngrok http 54321

# Set webhook URL in MercadoPago
https://your-ngrok-url.ngrok.io/functions/v1/mercadopago-webhook

interface Transaction {
  id: string;
  user_id: string;
  amount: number;           // Credits purchased
  type: 'purchase';
  payment_id: string;       // MercadoPago payment ID
  details: {
    method: string;         // 'visa', 'master', 'rapipago', etc.
    price: number;          // Amount in currency
    currency: string;       // 'ARS', 'USD', etc.
    installments: number;   // Payment plan
  };
  created_at: timestamp;
}

const { data } = await supabase
  .from('transactions')
  .select('*, profiles(full_name, email)')
  .eq('type', 'purchase')
  .order('created_at', { ascending: false });