import { Body, Controller, HttpCode, HttpStatus, Post, UseGuards, } from "@nestjs/common"; import { ApiOperation, ApiTags } from "@nestjs/swagger"; import { ServiceAuthGuard } from "../../common/guards/service-auth.guard"; import { PaymentEventDto, MarkPaidResponseDto } from "./internal-payment.dto"; import { PaymentService } from "./payment.service"; /** * Consumer side of the payment microservice's outbox relay. * Only the payment service may call this (shared SERVICE_AUTH_TOKEN). * Idempotent by design — the relay delivers at-least-once, so duplicates must be harmless. * Becomes a queue consumer via PaymentEventsConsumer when RabbitMQ is available; * this HTTP endpoint remains as a transport-agnostic fallback. */ @ApiTags("Internal Payments") @UseGuards(ServiceAuthGuard) @Controller("internal/payments") export class InternalPaymentController { constructor(private readonly paymentService: PaymentService) { } @Post("mark-paid") @HttpCode(HttpStatus.OK) @ApiOperation({ summary: "Apply a payment.succeeded / payment.failed event from the payment service (idempotent)", }) async markPaid(@Body() event: PaymentEventDto): Promise { return this.paymentService.handlePaymentEvent(event); } }