Readme

New Stripe Subscription Handler

This val processes new Stripe subscribers to Val Town Pro. It sends our team a Discord notifcation and sends a welcome email to the new subscriber. It takes a couple of steps if you'd like to set up something similar for your own Stripe account.

Setup

  1. Fork this HTTP val
  2. Create a new webhook in Stripe
  3. Add your val's HTTP endpoint URL into the Stripe webhook
  4. Select customer.subscription.updated as the only event to listen to (more on this below)
  5. Add your stripe_sk_customer_readonly to your Val Town Env Variables
  6. Add your webhook's signing secret as STRIPE_WEBHOOK_SECRET to you Val Town Env Variables

How the code is structured

  1. Verifies the signature to make sure it's really from Stripe
  2. Filters out only newly created subscriptions
  3. Sends off the Discord message & email

Which Stripe event type to listen to

Stripe sends webhooks for many different kinds of events. Relevant for us here are:

  • customer.subscription.created (what we used to listen for)
  • customer.subscription.updated (what we're currently listening for)

The issue with customer.subscription.created is that it triggers too early, before the user's payment actually goes through. This is a problem because in early Nov 2024 we started getting credit card fraudsters testing cards using our service. We started getting lots of notifications for new subscriptions that never actually became active.

Note: if anyone knows good ways to prevent that sort of behavior at the root, please let me know by commenting on this val!

In order to only get notified on a valid subscription, we now subscribe to customer.subscription.updated. This event happens on any subscription change, including renewals and cancellations, so now we have to filter those events to only get new subscriptions, ie where:

event.data.previous_attributes.status === 'incomplete' && event.data.object.status === 'active'
Val Town is a social website to write and deploy JavaScript.
Build APIs and schedule functions from your browser.
Comments
2
csl_ avatar

Hey, I was going to add a PR for this but you can't create PRs if there aren't any code changes - there's a typo in the readme, String -> Stripe on the second last line :D

stevekrouse avatar

Fixed, thanks!

stevekrouse-newstripesubscriber.web.val.run
Updated: December 13, 2024