payments

apps/edr-freight-api/src/modules/payment/internal-payment.controller.ts

@@ -0,0 +1,35 @@
+import {
+    Body,
+    Controller,
+    HttpCode,
+    HttpStatus,
+    Post,
+    UseGuards,
+} from "@nestjs/common";
+import { ApiOperation, ApiTags } from "@nestjs/swagger";
+import { ServiceAuthGuard } from "../../common/guards/service-auth.guard";
+import { PaymentEventDto, MarkPaidResponseDto } from "./internal-payment.dto";
+import { PaymentService } from "./payment.service";
+
+/**
+ * Consumer side of the payment microservice's outbox relay.
+ * Only the payment service may call this (shared SERVICE_AUTH_TOKEN).
+ * Idempotent by design — the relay delivers at-least-once, so duplicates must be harmless.
+ * Becomes a queue consumer via PaymentEventsConsumer when RabbitMQ is available;
+ * this HTTP endpoint remains as a transport-agnostic fallback.
+ */
+@ApiTags("Internal Payments")
+@UseGuards(ServiceAuthGuard)
+@Controller("internal/payments")
+export class InternalPaymentController {
+    constructor(private readonly paymentService: PaymentService) { }
+
+    @Post("mark-paid")
+    @HttpCode(HttpStatus.OK)
+    @ApiOperation({
+        summary: "Apply a payment.succeeded / payment.failed event from the payment service (idempotent)",
+    })
+    async markPaid(@Body() event: PaymentEventDto): Promise<MarkPaidResponseDto> {
+        return this.paymentService.handlePaymentEvent(event);
+    }
+}