Adapt to webhook-ui

package.json

@@ -10,7 +10,7 @@
   },
   "dependencies": {
     "@pusher/push-notifications-server": "^1.2.5",
-    "@snapshot-labs/snapshot.js": "^0.3.68",
+    "@snapshot-labs/snapshot.js": "^0.4.43",
     "bluebird": "^3.7.2",
     "body-parser": "^1.19.0",
     "connection-string": "^1.0.1",

src/api.ts

@@ -1,6 +1,8 @@
 import express from 'express';
 import { sendEvent } from './events';
 import pkg from '../package.json';
+import { getSubscribers, addSubscriber, deactivateSubscriber } from './subscribers';
+import { verifySignature } from './helpers/utils';
 
 const router = express.Router();
 
@@ -28,4 +30,29 @@ router.get('/test', async (req, res) => {
   }
 });
 
+router.get('/subscriptions/:owner', async (req, res) => {
+  // TODO: Currently this endpoint is open to anyone. Implement verification to secure the urls in the db, should be accessible only by their owner.
+  const { owner } = req.params;
+  const subscribers = await getSubscribers(owner);
+
+  return res.json({ subscribers });
+});
+
+router.post('/subscribers', async (req, res) => {
+  const body: any = req.body;
+  try {
+    await verifySignature(body);
+    const params = body.data.message;
+
+    params.active === 1
+      ? await addSubscriber(params.from, params.url, params.space, params.active, params.timestamp)
+      : await deactivateSubscriber(params.id);
+
+    return res.json({ status: true });
+  } catch (error) {
+    console.log(error);
+    return res.json({ error: 'Failed to update subscription', message: error });
+  }
+});
+
 export default router;

src/events.ts

@@ -5,6 +5,7 @@ import { sendPushNotification } from './helpers/beams';
 import db from './helpers/mysql';
 import { sha256 } from './helpers/utils';
 import { getProposal, getProposalScores } from './helpers/proposal';
+import { getSubscribers } from './subscribers';
 
 const delay = 5;
 const interval = 15;
@@ -127,7 +128,7 @@ async function processEvents(subscribers) {
 
 async function run() {
   try {
-    const subscribers = await db.queryAsync('SELECT * FROM subscribers');
+    const subscribers = await getSubscribers();
     console.log('[events] Subscribers', subscribers.length);
     await processEvents(subscribers);
   } catch (e) {

src/helpers/beams.ts

@@ -8,7 +8,7 @@ const beams = new PushNotifications({
   secretKey: process.env.SERVICE_PUSHER_BEAMS_SECRET_KEY ?? ''
 });
 
-async function getSubscribers(space) {
+async function getSubscribersFromSnapshot(space) {
   let subscriptions: { [key: string]: any } = [];
   const query = {
     subscriptions: {
@@ -28,7 +28,7 @@ async function getSubscribers(space) {
 }
 
 export const sendPushNotification = async event => {
-  const subscribedWallets = await getSubscribers(event.space);
+  const subscribedWallets = await getSubscribersFromSnapshot(event.space);
   const walletsChunks = chunk(subscribedWallets, 100);
   const proposal = await getProposal(event.id.replace('proposal/', ''));
   if (!proposal) {

src/helpers/utils.ts

@@ -1,4 +1,5 @@
 import { createHash } from 'crypto';
+import snapshot from '@snapshot-labs/snapshot.js';
 
 export function shortenAddress(str = '') {
   return `${str.slice(0, 6)}...${str.slice(str.length - 4)}`;
@@ -9,3 +10,13 @@ export function sha256(str) {
     .update(str)
     .digest('hex');
 }
+
+export async function verifySignature(body) {
+  try {
+    const isValidSig = await snapshot.utils.verify(body.address, body.sig, body.data);
+    if (!isValidSig) return Promise.reject('invalid signature');
+  } catch (e) {
+    console.warn(`signature validation failed for ${body.address}`);
+    return Promise.reject('signature validation failed');
+  }
+}

src/subscribers.ts

@@ -0,0 +1,33 @@
+import db from './helpers/mysql';
+
+export async function getSubscribers(owner?: string) {
+  if (owner)
+    return db.queryAsync(
+      'SELECT * FROM subscribers WHERE active = 1 AND owner = ? ORDER BY created DESC',
+      owner
+    );
+
+  return db.queryAsync('SELECT * FROM subscribers');
+}
+
+export async function addSubscriber(
+  owner: string,
+  url: string,
+  space: string,
+  active: number,
+  created: string
+) {
+  const params = {
+    owner,
+    url,
+    space,
+    active,
+    created
+  };
+
+  return await db.queryAsync('INSERT IGNORE INTO subscribers SET ?', params);
+}
+
+export async function deactivateSubscriber(id: string) {
+  return await db.queryAsync('UPDATE subscribers SET active = 0 WHERE id = ?', id);
+}