[WIP] Stripe Payment

api/.env.example

@@ -94,3 +94,7 @@ GOOGLE_AUTH_REDIRECT_URL=http://localhost:3000/oauth/google/callback
 GOOGLE_FONTS_API_KEY=
 
 ZAPIER_ENABLED=false
+
+STRIPE_CLIENT_ID=
+STRIPE_CLIENT_SECRET=
+STRIPE_REDIRECT_URI=http://localhost:3000/settings/connections/callback/stripe

api/app/Http/Controllers/Content/FeatureFlagsController.php

@@ -28,6 +28,9 @@ public function index()
                         'fonts' => !empty(config('services.google.fonts_api_key')),
                         'auth' => !empty(config('services.google.client_id')) && !empty(config('services.google.client_secret')),
                     ],
+                    'stripe' => [
+                        'currencies' => config('services.stripe.currencies'),
+                    ],
                 ],
                 'integrations' => [
                     'zapier' => config('services.zapier.enabled'),

api/app/Http/Controllers/Forms/FormPaymentController.php

@@ -0,0 +1,118 @@
+<?php
+
+namespace App\Http\Controllers\Forms;
+
+use App\Http\Controllers\Controller;
+use App\Models\OAuthProvider;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Log;
+use Stripe\Stripe;
+use Stripe\PaymentIntent;
+
+class FormPaymentController extends Controller
+{
+    public function getAccount(Request $request)
+    {
+        $form = $request->form;
+
+        // Get payment block (only one allowed)
+        $paymentBlock = collect($form->properties)->first(fn ($prop) => $prop['type'] === 'payment');
+        if (!$paymentBlock) {
+            Log::warning('Form without payment block', [
+                'form_id' => $form->id
+            ]);
+            return $this->error(['message' => 'Form does not have a payment block.']);
+        }
+
+        // Get provider
+        $provider = OAuthProvider::find($paymentBlock['stripe_account_id']);
+        if ($provider === null) {
+            Log::error('Failed to find Stripe account', [
+                'stripe_account_id' => $paymentBlock['stripe_account_id']
+            ]);
+            return $this->error(['message' => 'Failed to find Stripe account']);
+        }
+
+        return $this->success(['stripeAccount' => $provider->provider_user_id]);
+    }
+
+    public function createIntent(Request $request)
+    {
+        $form = $request->form;
+
+        // Verify form exists and is accessible
+        if ($form->workspace === null || $form->visibility !== 'public') {
+            Log::warning('Attempt to create payment for invalid form', [
+                'form_id' => $form->id
+            ]);
+            return $this->error(['message' => 'Form not found.'], 404);
+        }
+
+        // Get payment block (only one allowed)
+        $paymentBlock = collect($form->properties)->first(fn ($prop) => $prop['type'] === 'payment');
+        if (!$paymentBlock) {
+            Log::warning('Attempt to create payment for form without payment block', [
+                'form_id' => $form->id
+            ]);
+            return $this->error(['message' => 'Form does not have a payment block.']);
+        }
+
+        // Get provider
+        $provider = OAuthProvider::find($paymentBlock['stripe_account_id']);
+        if ($provider === null) {
+            Log::error('Failed to find Stripe account', [
+                'stripe_account_id' => $paymentBlock['stripe_account_id']
+            ]);
+            return $this->error(['message' => 'Failed to find Stripe account']);
+        }
+
+        try {
+            Log::info('Creating payment intent', [
+                'form_id' => $form->id,
+                'amount' => $paymentBlock['amount'],
+                'currency' => $paymentBlock['currency']
+            ]);
+
+            Stripe::setApiKey(config('cashier.secret'));
+
+            $intent = PaymentIntent::create([
+                'description' => 'Form - ' . $form->title,
+                'amount' => (int) ($paymentBlock['amount'] * 100),  // Stripe requires amount in cents
+                'currency' => strtolower($paymentBlock['currency']),
+                'payment_method_types' => ['card'],
+                'metadata' => [
+                    'form_id' => $form->id,
+                    'workspace_id' => $form->workspace_id,
+                    'form_name' => $form->title,
+                ],
+            ], [
+                'stripe_account' => $provider->provider_user_id
+            ]);
+
+            Log::info('Payment intent created', [
+                'form_id' => $form->id,
+                'intent' => $intent
+            ]);
+
+            if ($intent->id) {
+                return $this->success([
+                    'intent' => ['id' => $intent->id, 'secret' => $intent->client_secret]
+                ]);
+            } else {
+                return $this->error(['message' => 'Failed to create payment intent']);
+            }
+        } catch (\Stripe\Exception\CardException $e) {
+            Log::warning('Failed to create payment intent', [
+                'form_id' => $form->id,
+                'message' => $e->getMessage()
+            ]);
+            return $this->error(['message' => $e->getMessage()]);
+        } catch (\Exception $e) {
+            Log::error('Failed to create payment intent', [
+                'form_id' => $form->id,
+                'error' => $e->getMessage()
+            ]);
+            return $this->error(['message' => 'Failed to initialize payment.']);
+        }
+    }
+}

api/app/Http/Controllers/Settings/OAuthProviderController.php

@@ -47,7 +47,7 @@ public function handleRedirect(OAuthProviderService $service)
                 [
                     'access_token' => $driverUser->token,
                     'refresh_token' => $driverUser->refreshToken,
-                    'name' => $driverUser->getName(),
+                    'name' => ($driverUser->getName()) ? $driverUser->getName() : $driverUser->getNickname(),
                     'email' => $driverUser->getEmail(),
                     'scopes' => $driverUser->approvedScopes
                 ]

api/app/Http/Requests/UserFormRequest.php

@@ -5,6 +5,7 @@
 use App\Http\Requests\Workspace\CustomDomainRequest;
 use App\Models\Forms\Form;
 use App\Rules\FormPropertyLogicRule;
+use App\Rules\PaymentBlockConfigurationRule;
 use Illuminate\Validation\Rule;
 
 /**
@@ -70,7 +71,7 @@ public function rules()
             'properties' => 'required|array',
             'properties.*.id' => 'required',
             'properties.*.name' => 'required',
-            'properties.*.type' => 'required',
+            'properties.*.type' => ['required', new PaymentBlockConfigurationRule($this->properties)],
             'properties.*.placeholder' => 'sometimes|nullable',
             'properties.*.prefill' => 'sometimes|nullable',
             'properties.*.help' => 'sometimes|nullable',

api/app/Integrations/OAuth/Drivers/OAuthStripeDriver.php

@@ -0,0 +1,78 @@
+<?php
+
+namespace App\Integrations\OAuth\Drivers;
+
+use App\Integrations\OAuth\Drivers\Contracts\OAuthDriver;
+use Laravel\Socialite\Contracts\User;
+use Laravel\Socialite\Facades\Socialite;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Log;
+use SocialiteProviders\Stripe\Provider as StripeProvider;
+
+class OAuthStripeDriver implements OAuthDriver
+{
+    private ?string $redirectUrl = null;
+    private ?array $scopes = [];
+
+    protected StripeProvider $provider;
+
+    public function __construct()
+    {
+        $this->provider = Socialite::driver('stripe');
+    }
+
+    public function getRedirectUrl(): string
+    {
+        $user = Auth::user();
+
+        $params = [
+            'stripe_user[email]' => $user->email,
+            'stripe_user[url]' => config('app.url'),
+            'stripe_user[business_name]' => $user->name,
+        ];
+
+        Log::info('Initiating Stripe Connect flow', [
+            'user_id' => $user->id
+        ]);
+
+        return $this->provider
+            ->scopes($this->scopes ?? [])
+            ->stateless()
+            ->redirectUrl($this->redirectUrl ?? config('services.stripe.redirect'))
+            ->with($params)
+            ->redirect()
+            ->getTargetUrl();
+    }
+
+    public function getUser(): User
+    {
+        return $this->provider
+            ->stateless()
+            ->redirectUrl($this->redirectUrl ?? config('services.stripe.redirect'))
+            ->user();
+    }
+
+    public function canCreateUser(): bool
+    {
+        return true;
+    }
+
+    public function setRedirectUrl(string $url): OAuthDriver
+    {
+        $this->redirectUrl = $url;
+        return $this;
+    }
+
+    public function setScopes(array $scopes): OAuthDriver
+    {
+        $this->scopes = $scopes;
+        return $this;
+    }
+
+    public function fullScopes(): OAuthDriver
+    {
+        return $this->setScopes([
+            'read_write',
+        ]);
+    }
+}

api/app/Integrations/OAuth/OAuthProviderService.php

@@ -4,15 +4,18 @@
 
 use App\Integrations\OAuth\Drivers\Contracts\OAuthDriver;
 use App\Integrations\OAuth\Drivers\OAuthGoogleDriver;
+use App\Integrations\OAuth\Drivers\OAuthStripeDriver;
 
 enum OAuthProviderService: string
 {
     case Google = 'google';
+    case Stripe = 'stripe';
 
     public function getDriver(): OAuthDriver
     {
-        return match($this) {
-            self::Google =>  new OAuthGoogleDriver()
+        return match ($this) {
+            self::Google =>  new OAuthGoogleDriver(),
+            self::Stripe =>  new OAuthStripeDriver()
         };
     }
 }

api/app/Policies/OAuthProviderPolicy.php

@@ -2,6 +2,7 @@
 
 namespace App\Policies;
 
+use App\Integrations\OAuth\OAuthProviderService;
 use App\Models\Integration\FormIntegration;
 use App\Models\OAuthProvider;
 use App\Models\User;
@@ -62,6 +63,20 @@ public function delete(User $user, OAuthProvider $provider)
         if ($integrations->count() > 0) {
             return $this->denyWithStatus(400, 'This connection cannot be removed because there is already an integration using it.');
         }
+
+        if ($provider->provider->value === OAuthProviderService::Stripe->value) {
+            $formsUsingStripe = $user->forms()
+                ->get()
+                ->filter(function ($form) use ($provider) {
+                    return collect($form->properties)
+                        ->some(fn ($prop) => ($prop['stripe_account_id'] ?? null) === $provider->id);
+                })
+                ->isNotEmpty();
+            if ($formsUsingStripe) {
+                return $this->denyWithStatus(400, 'This Stripe connection cannot be removed because it is being used in a form payment field.');
+            }
+        }
+
         return $provider->user()->is($user);
     }
 

api/app/Providers/AppServiceProvider.php

@@ -8,6 +8,7 @@
 use Illuminate\Support\Facades\Storage;
 use Illuminate\Support\Facades\URL;
 use Illuminate\Support\Facades\Validator;
+use Illuminate\Support\Facades\Event;
 use Illuminate\Support\ServiceProvider;
 use Laravel\Cashier\Cashier;
 use Laravel\Dusk\DuskServiceProvider;
@@ -40,6 +41,10 @@ public function boot()
         }
 
         Validator::includeUnvalidatedArrayKeys();
+
+        Event::listen(function (\SocialiteProviders\Manager\SocialiteWasCalled $event) {
+            $event->extendSocialite('stripe', \SocialiteProviders\Stripe\Provider::class);
+        });
     }
 
     /**

api/app/Rules/PaymentBlockConfigurationRule.php

@@ -0,0 +1,73 @@
+<?php
+
+namespace App\Rules;
+
+use App\Models\OAuthProvider;
+use Closure;
+use Illuminate\Support\Facades\Log;
+use Illuminate\Contracts\Validation\ValidationRule;
+
+class PaymentBlockConfigurationRule implements ValidationRule
+{
+    protected array $properties;
+    protected array $field;
+
+    public function __construct(array $properties)
+    {
+        $this->properties = $properties;
+    }
+
+    public function validate(string $attribute, mixed $value, Closure $fail): void
+    {
+        // Set the field
+        $fieldIndex = explode('.', $attribute)[1];
+        $this->field = $this->properties[$fieldIndex];
+
+        if ($this->field['type'] !== 'payment') {
+            return; // If not a payment block, validation passes
+        }
+
+        // Only one payment block allowed
+        $paymentBlocks = collect($this->properties)
+            ->filter(fn ($prop) => $prop['type'] === 'payment')
+            ->count();
+
+        if ($paymentBlocks > 1) {
+            $fail('Only one payment block allowed');
+            return;
+        }
+
+
+        // Amount validation
+        if (!isset($this->field['amount']) || !is_numeric($this->field['amount']) || $this->field['amount'] < 0.5) {
+            $fail('Amount must be a number greater than 0.5');
+            return;
+        }
+
+        // Currency validation
+        if (!isset($this->field['currency']) || !in_array(strtoupper($this->field['currency']), array_keys(config('services.stripe.currencies')))) {
+            $fail('Currency must be a valid currency');
+            return;
+        }
+
+        // Stripe account validation
+        if (!isset($this->field['stripe_account_id']) || empty($this->field['stripe_account_id'])) {
+            $fail('Stripe account is required');
+            return;
+        }
+        try {
+            $provider = OAuthProvider::find($this->field['stripe_account_id']);
+            if ($provider === null) {
+                $fail('Failed to validate Stripe account');
+                return;
+            }
+        } catch (\Exception $e) {
+            Log::error('Failed to validate Stripe account', [
+                'error' => $e->getMessage(),
+                'account_id' => $this->field['stripe_account_id']
+            ]);
+            $fail('Failed to validate Stripe account');
+            return;
+        }
+    }
+}