Add POS service

services/pos/app/api/webhooks.py

@@ -0,0 +1,179 @@
+# services/pos/app/api/webhooks.py
+"""
+POS Webhook API Endpoints
+Handles incoming webhooks from POS systems
+"""
+
+from fastapi import APIRouter, Request, HTTPException, Header, Path
+from typing import Optional, Dict, Any
+import structlog
+import json
+from datetime import datetime
+
+from app.core.database import get_db
+
+router = APIRouter(tags=["webhooks"])
+logger = structlog.get_logger()
+
+
+@router.post("/webhooks/{pos_system}")
+async def receive_webhook(
+    request: Request,
+    pos_system: str = Path(..., description="POS system name"),
+    content_type: Optional[str] = Header(None),
+    x_signature: Optional[str] = Header(None),
+    x_webhook_signature: Optional[str] = Header(None),
+    authorization: Optional[str] = Header(None)
+):
+    """
+    Receive webhooks from POS systems
+    Supports Square, Toast, and Lightspeed webhook formats
+    """
+    try:
+        # Validate POS system
+        supported_systems = ["square", "toast", "lightspeed"]
+        if pos_system.lower() not in supported_systems:
+            raise HTTPException(status_code=400, detail=f"Unsupported POS system: {pos_system}")
+        
+        # Get request details
+        method = request.method
+        url_path = str(request.url.path)
+        query_params = dict(request.query_params)
+        headers = dict(request.headers)
+        
+        # Get client IP
+        client_ip = None
+        if hasattr(request, 'client') and request.client:
+            client_ip = request.client.host
+        
+        # Read payload
+        try:
+            body = await request.body()
+            raw_payload = body.decode('utf-8') if body else ""
+            payload_size = len(body) if body else 0
+            
+            # Parse JSON if possible
+            parsed_payload = None
+            if raw_payload:
+                try:
+                    parsed_payload = json.loads(raw_payload)
+                except json.JSONDecodeError:
+                    logger.warning("Failed to parse webhook payload as JSON", 
+                                 pos_system=pos_system, payload_size=payload_size)
+        except Exception as e:
+            logger.error("Failed to read webhook payload", error=str(e))
+            raise HTTPException(status_code=400, detail="Failed to read request payload")
+        
+        # Determine signature from various header formats
+        signature = x_signature or x_webhook_signature or authorization
+        
+        # Log webhook receipt
+        logger.info("Webhook received",
+                   pos_system=pos_system,
+                   method=method,
+                   url_path=url_path,
+                   payload_size=payload_size,
+                   client_ip=client_ip,
+                   has_signature=bool(signature),
+                   content_type=content_type)
+        
+        # TODO: Store webhook log in database
+        # TODO: Verify webhook signature
+        # TODO: Extract tenant_id from payload
+        # TODO: Process webhook based on POS system type
+        # TODO: Queue for async processing if needed
+        
+        # Parse webhook type based on POS system
+        webhook_type = None
+        event_id = None
+        
+        if parsed_payload:
+            if pos_system.lower() == "square":
+                webhook_type = parsed_payload.get("type")
+                event_id = parsed_payload.get("event_id")
+            elif pos_system.lower() == "toast":
+                webhook_type = parsed_payload.get("eventType")
+                event_id = parsed_payload.get("guid")
+            elif pos_system.lower() == "lightspeed":
+                webhook_type = parsed_payload.get("action")
+                event_id = parsed_payload.get("id")
+        
+        logger.info("Webhook processed successfully",
+                   pos_system=pos_system,
+                   webhook_type=webhook_type,
+                   event_id=event_id)
+        
+        # Return appropriate response based on POS system requirements
+        if pos_system.lower() == "square":
+            return {"status": "success"}
+        elif pos_system.lower() == "toast":
+            return {"success": True}
+        elif pos_system.lower() == "lightspeed":
+            return {"received": True}
+        else:
+            return {"status": "received"}
+            
+    except HTTPException:
+        raise
+    except Exception as e:
+        logger.error("Webhook processing failed", 
+                    error=str(e), 
+                    pos_system=pos_system)
+        
+        # Return 500 to trigger POS system retry
+        raise HTTPException(status_code=500, detail="Webhook processing failed")
+
+
+@router.get("/webhooks/{pos_system}/status")
+async def get_webhook_status(pos_system: str = Path(..., description="POS system name")):
+    """Get webhook endpoint status for a POS system"""
+    try:
+        supported_systems = ["square", "toast", "lightspeed"]
+        if pos_system.lower() not in supported_systems:
+            raise HTTPException(status_code=400, detail=f"Unsupported POS system: {pos_system}")
+        
+        return {
+            "pos_system": pos_system,
+            "status": "active",
+            "endpoint": f"/api/v1/webhooks/{pos_system}",
+            "supported_events": _get_supported_events(pos_system),
+            "last_received": None,  # TODO: Get from database
+            "total_received": 0     # TODO: Get from database
+        }
+    except Exception as e:
+        logger.error("Failed to get webhook status", error=str(e), pos_system=pos_system)
+        raise HTTPException(status_code=500, detail=f"Failed to get webhook status: {str(e)}")
+
+
+def _get_supported_events(pos_system: str) -> Dict[str, Any]:
+    """Get supported webhook events for each POS system"""
+    events = {
+        "square": [
+            "payment.created",
+            "payment.updated", 
+            "order.created",
+            "order.updated",
+            "order.fulfilled",
+            "inventory.count.updated"
+        ],
+        "toast": [
+            "OrderCreated",
+            "OrderUpdated",
+            "OrderPaid",
+            "OrderCanceled",
+            "OrderVoided"
+        ],
+        "lightspeed": [
+            "order.created",
+            "order.updated",
+            "order.paid",
+            "sale.created",
+            "sale.updated"
+        ]
+    }
+    
+    return {
+        "events": events.get(pos_system.lower(), []),
+        "format": "JSON",
+        "authentication": "signature_verification"
+    }