feat: check paddle supported product ids in function webhook

Author: danshuitaihejie

functions/README.md

@@ -25,4 +25,9 @@ Paddle---POST-Request-->Firebase
 
 ### Webhook
 
-https://console.firebase.google.com/u/0/project/staging-zenuml-27954/functions
+find the webhook : https://console.firebase.google.com/u/0/project/staging-zenuml-27954/functions
+
+### Webhook Support paddle product ids
+
+- `firebase -P staging functions:config:set paddle.product_ids=552378,882893,882890,882891`
+- `firebase -P prod functions:config:set paddle.product_ids=879334,551167,879927,883078,883082`

functions/index.js

@@ -48,6 +48,16 @@ exports.sync_diagram = functions.https.onRequest(async (req, res) => {
   console.log('using LaraSite URL:', baseUrlHttps);
   console.log('using publicBaseUrl:', publicBaseUrl);
 
+  const supportedProductIds = (functions.config().paddle.product_ids || '')
+    .split(',')
+    .filter(Boolean);
+  const checkSupportedProductIds = (productId) =>
+    Boolean(productId && supportedProductIds.includes(productId));
+
+  exports.supportedProductIds = functions.https.onRequest(async (req, res) => {
+    res.status(200).send(JSON.stringify(supportedProductIds));
+  });
+
   const replaceBaseUrlInShareLink = (responseData) => {
     const data = JSON.parse(responseData);
     data.page_share = data.page_share
@@ -122,6 +132,12 @@ exports.webhook = functions.https.onRequest(async (req, res) => {
     if (valid) {
       if (alertParser.supports(req)) {
         const subscription = alertParser.parse(req);
+        if (!checkSupportedProductIds(subscription.subscription_plan_id)) {
+          res.send(
+            `subscription_plan_id:${subscription.subscription_plan_id} not supported`,
+          );
+          return;
+        }
         const userId = getUserIdFromPassthrough(subscription.passthrough);
         const user = await db.collection('users').doc(userId).get();
         if (user.exists) {