Evergreen farms (pos)

# Stripe Connections Documentation

This document lists all Stripe connections in the codebase, including which endpoints use which .env variables for secret keys and webhook secrets.

---

## 1. Stripe Configuration Files

### `evergreen_pos_be/src/config/stripe.config.js`

- **Secret Key**: `STRIPE_SECRET_KEY_NUS_ECOM`

- **Usage**: Default Stripe instance exported and used across multiple controllers

- **API Version**: `2025-03-31.basil`

---

## 2. Routes and Endpoints

### 2.1. `/api/v1/stripe/*` (via `routes/Stripe.js`)

**File**: `evergreen_pos_be/src/routes/Stripe.js`

| Endpoint | Method | Secret Key | Webhook Secret |

|----------|--------|------------|----------------|

| `/create-checkout-session` | POST | `STRIPE_SECRET_KEY` | - |

| `/webhook` | POST | `STRIPE_SECRET_KEY` | `STRIPE_WEBHOOK_SECRET` |

| `/checkout-success` | POST | `STRIPE_SECRET_KEY` | - |

| `/payments` | GET | `STRIPE_SECRET_KEY` | - |

| `/overall` | GET | `STRIPE_SECRET_KEY` | - |

| `/today` | GET | `STRIPE_SECRET_KEY` | - |

| `/monthly` | GET | `STRIPE_SECRET_KEY` | - |

| `/weekly` | GET | `STRIPE_SECRET_KEY` | - |

| `/client-transactions` | GET | `STRIPE_SECRET_KEY` | - |

**Note**: This route file creates its own Stripe instance using `STRIPE_SECRET_KEY` (different from the config file).

---

### 2.2. `/api/v1/stripe-router/*` (via `routes/StripeRouter.js`)

**File**: `evergreen_pos_be/src/routes/StripeRouter.js`

**Controller**: `controllers/Stripe/Stripe-Controller.js`

| Endpoint | Method | Secret Key | Webhook Secret |

|----------|--------|-----------|----------------|

| `/create-checkout-session` | POST | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

| `/webhook` | POST | `STRIPE_SECRET_KEY_NUS_ECOM` | `STRIPE_WEBHOOK_SECRET` |

| `/checkout-success` | POST | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

| `/payments` | GET | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

| `/overall` | GET | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

| `/today` | GET | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

| `/monthly` | GET | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

| `/weekly` | GET | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

| `/client-transactions` | GET | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

| `/readers` | GET | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

| `/payment-status/:intentId` | POST | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

| `/intiate-reader-payment` | POST | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

| `/connection_token` | POST | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

| `/termial-readers` | GET | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

**Note**: Controller creates its own Stripe instance using `STRIPE_SECRET_KEY_NUS_ECOM` (line 8).

---

### 2.3. `/api/v1/nus-shop/*` (via `routes/nursery/shop.route.js`)

**File**: `evergreen_pos_be/src/routes/nursery/shop.route.js`

**Controller**: `controllers/nursery/shop-controller.js`

| Endpoint | Method | Secret Key | Webhook Secret |

|----------|--------|-----------|----------------|

| `/stripe-webhook` | POST | `STRIPE_SECRET_KEY_NUS_ECOM` | `STRIPE_WEBHOOK_SECRET_ECOM` |

| `/create-payment-intent` | POST | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

| `/create-session-product-plan` | POST | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

**Note**: Uses `stripe.config.js` (which uses `STRIPE_SECRET_KEY_NUS_ECOM`). Webhook handler uses `STRIPE_WEBHOOK_SECRET_ECOM`.

**Also registered in**: `app.js` at `/api/v1/nus-shop/stripe-webhook`

---

### 2.4. `/api/v1/nus-sale/*` (via `routes/nursery/sale.route.js`)

**File**: `evergreen_pos_be/src/routes/nursery/sale.route.js`

**Controller**: `controllers/nursery/nursery.product.controller.js`

| Endpoint | Method | Secret Key | Webhook Secret |

|----------|--------|-----------|----------------|

| `/payment-webhook` | POST | `STRIPE_SECRET_KEY_NUS_ECOM` | `STRIPE_WEBHOOK_SECRET_ECOM` |

| `/create-payment-intent` | POST | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

| `/initiate-reader-payment` | POST | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

| `/cancel-reader-payment` | POST | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

| `/get-payment-webhook-verify/:id` | GET | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

**Note**: Uses `stripe.config.js` (which uses `STRIPE_SECRET_KEY_NUS_ECOM`). Webhook handler uses `STRIPE_WEBHOOK_SECRET_ECOM`.

---

### 2.5. `/api/v1/product-quotation/*` (via `routes/ProductQuotation/product-quote.routes.js`)

**File**: `evergreen_pos_be/src/routes/ProductQuotation/product-quote.routes.js`

**Controller**: `controllers/ProductQuotation/product-quote.controller.js`

| Endpoint | Method | Secret Key | Webhook Secret |

|----------|--------|-----------|----------------|

| `/webhook` | POST | `STRIPE_SECRET_KEY_PROD_QUOTE` | `STRIPE_WEBHOOK_PROD_QUOTE` |

| `/create-quote` | POST | `STRIPE_SECRET_KEY_PROD_QUOTE` | - |

| `/send-acceptance-link/:quoteId` | POST | `STRIPE_SECRET_KEY_PROD_QUOTE` | - |

| `/accept-quote/:token` | POST | `STRIPE_SECRET_KEY_PROD_QUOTE` | - |

| `/:quoteId/create-payment-link` | POST | `STRIPE_SECRET_KEY_PROD_QUOTE` | - |

| `/add-installment-customer` | POST | `STRIPE_SECRET_KEY_PROD_QUOTE` | - |

| `/add-installment-admin` | POST | `STRIPE_SECRET_KEY_PROD_QUOTE` | - |

| `/create_product_payment_link/:invoiceId` | POST | `STRIPE_SECRET_KEY_PROD_QUOTE` | - |

| `/create_payment_link_for_customers_product/:invoiceId` | POST | `STRIPE_SECRET_KEY_PROD_QUOTE` | - |

**Note**: Controller creates its own Stripe instance using `STRIPE_SECRET_KEY_PROD_QUOTE` (line 2).

---

### 2.6. `/api/v1/product-quote/*` (via `routes/productQuoteRoute.js`)

**File**: `evergreen_pos_be/src/routes/productQuoteRoute.js`

| Endpoint | Method | Secret Key | Webhook Secret |

|----------|--------|-----------|----------------|

| `/webhook` | POST | `STRIPE_SECRET_KEY_PROD_QUOTE` | `STRIPE_WEBHOOK_PROD_QUOTE` |

**Note**: Creates its own Stripe instance using `STRIPE_SECRET_KEY_PROD_QUOTE` (line 19).

---

### 2.7. `/api/v1/product-invoice/*` (via `routes/productInvoiceRoute.js`)

**File**: `evergreen_pos_be/src/routes/productInvoiceRoute.js`

| Endpoint | Method | Secret Key | Webhook Secret |

|----------|--------|-----------|----------------|

| Various checkout endpoints | POST | `STRIPE_SECRET_KEY_PROD_QUOTE` | - |

**Note**: Creates its own Stripe instance using `STRIPE_SECRET_KEY_PROD_QUOTE` (line 9).

---

### 2.8. `/api/v1/invoicee/*` (via `routes/EvergreenInvoice/evergreen-invoice-routers.js`)

**File**: `evergreen_pos_be/src/routes/EvergreenInvoice/evergreen-invoice-routers.js`

**Controller**: `routes/EvergreenInvoice/EverGreen-invoice-controller.js`

| Endpoint | Method | Secret Key | Webhook Secret |

|----------|--------|-----------|----------------|

| `/invoice-payment-webhook` | POST | `STRIPE_SECRET_KEY_NUS_ECOM` | `STRIPE_WEBHOOK_SECRET_ECOM_INVOICE` |

| `/stripe/webhook` | POST | `STRIPE_SECRET_KEY_NUS_ECOM` | `STRIPE_WEBHOOK_SECRET_ECOM_INVOICE` |

| `/stripe/verify-payment/:sessionId` | GET | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

**Note**: Uses `stripe.config.js` (which uses `STRIPE_SECRET_KEY_NUS_ECOM`). Webhook handlers use `STRIPE_WEBHOOK_SECRET_ECOM_INVOICE`.

**Also registered in**: `app.js` at `/api/v1/invoicee/stripe/webhook`

---

### 2.9. `/api/v1/subscription/*` (via `routes/subscripiton/subscription.route.js`)

**File**: `evergreen_pos_be/src/routes/subscripiton/subscription.route.js`

**Controllers**:

- `controllers/subscription.controller.js`

- `controllers/webhook.controller.js`

| Endpoint | Method | Secret Key | Webhook Secret |

|----------|--------|-----------|----------------|

| `/webhook` | POST | `STRIPE_SECRET_KEY_NUS_ECOM` | `STRIPE_SUBSCRIPTION_WEBHOOK_SECRET` |

| `/stripe/webhook` | POST | `STRIPE_SECRET_KEY_NUS_ECOM` | `STRIPE_SUBSCRIPTION_WEBHOOK_SECRET_PRODUCT` |

| `/create` | POST | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

| `/admin-create-session-product-plan` | POST | `STRIPE_SECRET_KEY_NUS_ECOM` | - |

**Note**:

- Uses `stripe.config.js` (which uses `STRIPE_SECRET_KEY_NUS_ECOM`)

- `/webhook` uses `subscriptionService.constructWebhookEvent()` which uses `STRIPE_SUBSCRIPTION_WEBHOOK_SECRET`

- `/stripe/webhook` uses `subscriptionService.constructWebhookEventForProduct()` which uses `STRIPE_SUBSCRIPTION_WEBHOOK_SECRET_PRODUCT`

---

## 3. Services Using Stripe

### 3.1. `services/stripe.service.js`

- **Secret Key**: `STRIPE_SECRET_KEY_NUS_ECOM` (via `stripe.config.js`)

- **Functions**:

- `ensureStripeCustomer()` - Creates/retrieves Stripe customers

- `createCompositePrice()` - Creates Stripe prices

---

### 3.2. `services/nursery/payment.service.js`

- **Secret Key**: `STRIPE_SECRET_KEY_NUS_ECOM` (via `stripe.config.js`)

- **Functions**:

- `handleStripeCheckout()` - Creates Stripe checkout sessions

- `handleStripeCheckoutForOrder()` - Creates Stripe checkout sessions for orders

---

### 3.3. `services/subscripiton.service.js`

- **Secret Key**: `STRIPE_SECRET_KEY_NUS_ECOM` (via `stripe.config.js`)

- **Webhook Secrets**:

- `STRIPE_SUBSCRIPTION_WEBHOOK_SECRET` (for subscription webhooks)

- `STRIPE_SUBSCRIPTION_WEBHOOK_SECRET_PRODUCT` (for product plan webhooks)

- **Functions**:

- `constructWebhookEvent()` - Uses `STRIPE_SUBSCRIPTION_WEBHOOK_SECRET`

- `constructWebhookEventForProduct()` - Uses `STRIPE_SUBSCRIPTION_WEBHOOK_SECRET_PRODUCT`

- Various subscription management functions

---

### 3.4. `config/stripe.termianl.js`

- **Secret Key**: `STRIPE_SECRET_KEY_NUS_ECOM` (via `stripe.config.js`)

- **Functions**:

- `createTerminalPayment()` - Creates terminal payment intents

---

## 4. Summary of .env Variables Required

### Secret Keys:

1. `STRIPE_SECRET_KEY` - Used by `routes/Stripe.js`

2. `STRIPE_SECRET_KEY_NUS_ECOM` - Used by most controllers/services (via `stripe.config.js`)

3. `STRIPE_SECRET_KEY_PROD_QUOTE` - Used by product quotation routes/controllers

### Webhook Secrets:

1. `STRIPE_WEBHOOK_SECRET` - Used by `routes/Stripe.js` and `controllers/Stripe/Stripe-Controller.js`

2. `STRIPE_WEBHOOK_SECRET_ECOM` - Used by nursery shop and sale webhooks

3. `STRIPE_WEBHOOK_SECRET_ECOM_INVOICE` - Used by Evergreen invoice webhooks

4. `STRIPE_WEBHOOK_PROD_QUOTE` - Used by product quotation webhooks

5. `STRIPE_SUBSCRIPTION_WEBHOOK_SECRET` - Used by subscription webhooks

6. `STRIPE_SUBSCRIPTION_WEBHOOK_SECRET_PRODUCT` - Used by product plan subscription webhooks

---

## 5. Quick Reference by Feature

### E-commerce/Nursery Shop

- **Secret Key**: `STRIPE_SECRET_KEY_NUS_ECOM`

- **Webhook Secret**: `STRIPE_WEBHOOK_SECRET_ECOM`

- **Endpoints**: `/api/v1/nus-shop/stripe-webhook`, `/api/v1/nus-sale/payment-webhook`

### Product Quotations

- **Secret Key**: `STRIPE_SECRET_KEY_PROD_QUOTE`

- **Webhook Secret**: `STRIPE_WEBHOOK_PROD_QUOTE`

- **Endpoints**: `/api/v1/product-quotation/webhook`, `/api/v1/product-quote/webhook`

### Invoices (Evergreen)

- **Secret Key**: `STRIPE_SECRET_KEY_NUS_ECOM`

- **Webhook Secret**: `STRIPE_WEBHOOK_SECRET_ECOM_INVOICE`

- **Endpoints**: `/api/v1/invoicee/stripe/webhook`, `/api/v1/invoicee/invoice-payment-webhook`

### Subscriptions

- **Secret Key**: `STRIPE_SECRET_KEY_NUS_ECOM`

- **Webhook Secrets**:

- `STRIPE_SUBSCRIPTION_WEBHOOK_SECRET` (general subscriptions)

- `STRIPE_SUBSCRIPTION_WEBHOOK_SECRET_PRODUCT` (product plans)

- **Endpoints**: `/api/v1/subscription/webhook`, `/api/v1/subscription/stripe/webhook`

### Legacy Stripe Routes

- **Secret Key**: `STRIPE_SECRET_KEY`

- **Webhook Secret**: `STRIPE_WEBHOOK_SECRET`

- **Endpoints**: `/api/v1/stripe/*`

---

## 6. Important Notes

1. **Multiple Stripe Instances**: The codebase uses different Stripe instances for different features:

- `STRIPE_SECRET_KEY_NUS_ECOM` - Main e-commerce/nursery operations

- `STRIPE_SECRET_KEY_PROD_QUOTE` - Product quotations

- `STRIPE_SECRET_KEY` - Legacy routes

2. **Webhook Security**: All webhook endpoints use `express.raw({ type: 'application/json' })` middleware to ensure raw body parsing for signature verification.

3. **Terminal Operations**: Terminal-related operations (readers, connection tokens) use `STRIPE_SECRET_KEY_NUS_ECOM`.

4. **Configuration File**: Most controllers import from `config/stripe.config.js`, which uses `STRIPE_SECRET_KEY_NUS_ECOM`. Some routes create their own Stripe instances directly.

---

## 7. Environment Variables Checklist

Ensure these are set in your `.env` file:

```env

# Main E-commerce/Nursery

STRIPE_SECRET_KEY_NUS_ECOM=sk_...

STRIPE_WEBHOOK_SECRET_ECOM=whsec_...

# Product Quotations

STRIPE_SECRET_KEY_PROD_QUOTE=sk_...

STRIPE_WEBHOOK_PROD_QUOTE=whsec_...

# Invoices

STRIPE_WEBHOOK_SECRET_ECOM_INVOICE=whsec_...

# Subscriptions

STRIPE_SUBSCRIPTION_WEBHOOK_SECRET=whsec_...

STRIPE_SUBSCRIPTION_WEBHOOK_SECRET_PRODUCT=whsec_...

# Legacy (if still in use)

STRIPE_SECRET_KEY=sk_...

STRIPE_WEBHOOK_SECRET=whsec_...

```

---

**Last Updated**: Generated from codebase analysis

**Total Stripe Endpoints Found**: 50+ endpoints across multiple routes