def create
  payload    = request.body.read
  sig_header = request.env["HTTP_STRIPE_SIGNATURE"]
  event      = Stripe::Webhook.construct_event(payload, sig_header, ENV["STRIPE_SECRET"])

  return head :ok if StripeEvent.exists?(stripe_id: event.id)

  StripeEvent.create!(stripe_id: event.id, payload: payload)
  HandleStripeEventJob.perform_later(event.id)
  head :ok
rescue Stripe::SignatureVerificationError
  head :unauthorized
rescue ActiveRecord::RecordNotUnique
  head :ok
end

class StripeWebhooksController < ApplicationController
  include WebhookInbox::Receiver
  receive_from :stripe, secret: -> { ENV["STRIPE_WEBHOOK_SECRET"] }

  def create
    receive_webhook!
  end
end

# Gemfile
gem "webhook_inbox"

# config/routes.rb
post "/webhooks/stripe", to: "stripe_webhooks#create"
mount WebhookInbox::Engine => "/webhook_inbox"

# config/initializers/webhook_inbox.rb
WebhookInbox.configure do |config|
  # Register handlers — block receives a WebhookInbox::Event object
  config.on(:stripe, "customer.subscription.created") do |event|
    CreateSubscriptionJob.perform_later(event.parsed_payload)
  end

  config.on(:stripe, "invoice.payment_failed") do |event|
    NotifyPaymentFailedJob.perform_later(event.parsed_payload)
  end

  # Catch-all — runs for every Stripe event with no exact match
  config.on(:stripe, "*") do |event|
    Rails.logger.info "[webhook] Unhandled #{event.event_type}"
  end

  # Queue name (default: "webhooks")
  config.queue_name = "webhooks"

  # Dashboard auth — return truthy to allow access. Required in production.
  config.dashboard_auth = ->(controller) { controller.current_user&.admin? }
end

class StripeWebhooksController < ApplicationController
  include WebhookInbox::Receiver
  receive_from :stripe, secret: -> { ENV["STRIPE_WEBHOOK_SECRET"] }

  def create
    receive_webhook!
    # receive_webhook! always responds — nothing needed after it
  end
end

# Query
WebhookInbox::Event.pending.count
WebhookInbox::Event.failed.each(&:retry!)
WebhookInbox::Event.for_provider(:stripe).where(event_type: "invoice.payment_failed")

# Event object passed to handlers
event.provider       # => "stripe"
event.event_id       # => "evt_1ABC..."
event.event_type     # => "customer.subscription.created"
event.parsed_payload # => Hash (parsed from stored JSON)
event.attempts       # => 1
event.status         # => "pending" | "processing" | "processed" | "failed"
event.error_message  # => "RuntimeError: handler exploded\n..." (on failure)

# Replay a specific event
WebhookInbox::Event.find_by(event_id: "evt_1ABC...").retry!

# spec/rails_helper.rb
require "webhook_inbox/rspec"

# In request specs (auto-included)
RSpec.describe "Stripe billing", type: :request do
  it "creates a subscription on webhook" do
    deliver_webhook(:stripe, "customer.subscription.created", payload: {
      data: { object: { id: "sub_123", customer: "cus_456" } }
    })

    perform_enqueued_jobs

    expect(Subscription.find_by(stripe_id: "sub_123")).to be_active
  end

  it "ignores duplicate deliveries" do
    2.times do
      deliver_webhook(:stripe, "customer.subscription.created",
                      event_id: "evt_fixed_id", payload: {})
    end
    expect(WebhookInbox::Event.count).to eq(1)
  end
end

mount WebhookInbox::Engine => "/webhook_inbox"

config.dashboard_auth = ->(controller) { controller.current_user&.admin? }

create_table :webhook_inbox_events do |t|
  t.string   :provider,      null: false
  t.string   :event_id,      null: false
  t.string   :event_type
  t.text     :payload,       null: false, default: "{}"
  t.string   :status,        null: false, default: "pending"
  t.integer  :attempts,      null: false, default: 0
  t.text     :error_message
  t.datetime :processed_at
  t.timestamps
end

add_index :webhook_inbox_events, [:provider, :event_id], unique: true
add_index :webhook_inbox_events, :status
add_index :webhook_inbox_events, :created_at