Update app.js

app.js

@@ -5,16 +5,20 @@ import crypto from "crypto";
 const app = express();
 app.use(bodyParser.json());
 
-/* ===== ENV (dari HF Spaces) ===== */
+/* ===== ENV ===== */
 const PROJECT = process.env.PAKASIR_PROJECT;
 const API_KEY = process.env.PAKASIR_API_KEY;
 const WEBHOOK_SECRET = process.env.WEBHOOK_SECRET || "pakasir";
 
-/* ===== In-memory storage (cukup untuk HF Space) ===== */
-const transactions = new Map(); // order_id => data
-const clients = new Map();      // order_id => [res,res]
+if (!PROJECT || !API_KEY) {
+  throw new Error("PAKASIR_PROJECT & PAKASIR_API_KEY wajib diisi");
+}
+
+/* ===== MEMORY STORE ===== */
+const transactions = new Map(); // order_id => { amount, status }
+const clients = new Map();      // order_id => [res]
 
-/* ===== Helper ===== */
+/* ===== SSE HELPER ===== */
 function sendEvent(order_id, payload) {
   const arr = clients.get(order_id) || [];
   for (const res of arr) {
@@ -22,12 +26,12 @@ function sendEvent(order_id, payload) {
   }
 }
 
-/* ===== CREATE TRANSACTION ===== */
+/* ===== CREATE ===== */
 app.post("/create", async (req, res) => {
   try {
     const { amount } = req.body;
     if (!amount || amount < 1000) {
-      return res.status(400).json({ error: "amount invalid" });
+      return res.status(400).json({ error: "amount minimal 1000" });
     }
 
     const order_id = `INV-${Date.now()}`;
@@ -46,15 +50,12 @@ app.post("/create", async (req, res) => {
     const j = await r.json();
     const payment = j.payment || j;
 
-    const code = j.code || payment.code || "";
-    const qris_string = payment.payment_number || j.qris_string || "";
-
-    const qr_url = code
-      ? `https://app.pakasir.com/qris/${code}.png`
-      : `https://quickchart.io/qr?text=${encodeURIComponent(qris_string)}&size=500`;
+    const qris = payment.payment_number || j.qris_string;
+    if (!qris) {
+      return res.status(500).json({ error: "gagal create qris", raw: j });
+    }
 
     transactions.set(order_id, {
-      order_id,
       amount,
       status: "PENDING"
     });
@@ -62,12 +63,12 @@ app.post("/create", async (req, res) => {
     res.json({
       success: true,
       order_id,
-      qr_url,
-      raw: j
+      amount,
+      qr_url: `https://quickchart.io/qr?text=${encodeURIComponent(qris)}&size=500`
     });
   } catch (e) {
     console.error(e);
-    res.status(500).json({ error: "failed create transaction" });
+    res.status(500).json({ error: "create error" });
   }
 });
 
@@ -87,25 +88,27 @@ app.get("/events/:order_id", (req, res) => {
   clients.set(order_id, arr);
 
   req.on("close", () => {
-    const updated = (clients.get(order_id) || []).filter(r => r !== res);
-    if (updated.length === 0) clients.delete(order_id);
-    else clients.set(order_id, updated);
+    const left = (clients.get(order_id) || []).filter(r => r !== res);
+    if (left.length === 0) clients.delete(order_id);
+    else clients.set(order_id, left);
   });
 });
 
-/* ===== WEBHOOK PAKASIR ===== */
-app.post("/webhook", async (req, res) => {
+/* ===== WEBHOOK ===== */
+app.post("/webhook", (req, res) => {
   try {
     const body = req.body;
-    const order_id = body.payment?.order_id || body.order_id;
-    const status = (body.payment?.status || body.status || "").toUpperCase();
+    const order_id = body.order_id || body.payment?.order_id;
+    let status = body.status || body.payment?.status;
+
+    if (!order_id || !status) {
+      return res.status(400).send("invalid payload");
+    }
 
-    if (!order_id) return res.status(400).send("no order_id");
+    status = status.toUpperCase();
 
     if (transactions.has(order_id)) {
-      const tx = transactions.get(order_id);
-      tx.status = status;
-      transactions.set(order_id, tx);
+      transactions.get(order_id).status = status;
     }
 
     sendEvent(order_id, { order_id, status });
@@ -116,23 +119,40 @@ app.post("/webhook", async (req, res) => {
   }
 });
 
-/* ===== POLLING FALLBACK ===== */
+/* ===== STATUS (FIXED) ===== */
 app.get("/status/:order_id", async (req, res) => {
   try {
     const { order_id } = req.params;
+    const tx = transactions.get(order_id);
 
-    const url = `https://app.pakasir.com/api/transactiondetail?project=${PROJECT}&order_id=${order_id}&api_key=${API_KEY}`;
-    const r = await fetch(url);
-    const j = await r.json();
-
-    const tx = j.transaction || j;
-    const status = (tx.status || "UNKNOWN").toUpperCase();
+    if (!tx) {
+      return res.json({ order_id, status: "NOT_FOUND" });
+    }
 
-    if (transactions.has(order_id)) {
-      transactions.get(order_id).status = status;
+    // kalau sudah PAID dari webhook → langsung return
+    if (tx.status === "PAID" || tx.status === "SUCCESS") {
+      return res.json({ order_id, status: tx.status });
     }
 
-    res.json({ order_id, status, raw: j });
+    // fallback polling (WAJIB amount)
+    const params = new URLSearchParams({
+      project: PROJECT,
+      api_key: API_KEY,
+      order_id,
+      amount: tx.amount
+    });
+
+    const r = await fetch(
+      `https://app.pakasir.com/api/transactiondetail?${params}`
+    );
+    const j = await r.json();
+    const data = j.transaction || j;
+    const status = (data.status || "PENDING").toUpperCase();
+
+    tx.status = status;
+    transactions.set(order_id, tx);
+
+    res.json({ order_id, status });
   } catch (e) {
     console.error(e);
     res.status(500).json({ error: "status error" });
@@ -142,10 +162,11 @@ app.get("/status/:order_id", async (req, res) => {
 /* ===== HEALTH ===== */
 app.get("/", (req, res) => {
   res.json({
-    name: "Pakasir Real-Time API",
+    name: "Pakasir Realtime Gateway",
     status: "running"
   });
 });
 
+/* ===== START ===== */
 const PORT = process.env.PORT || 7860;
 app.listen(PORT, () => console.log("RUNNING ON", PORT));