stripe webhook key from billing settings

src/Billing/BillingSettings.cs

@@ -0,0 +1,7 @@
+namespace Bit.Billing
+{
+    public class BillingSettings
+    {
+        public virtual string StripeWebhookKey { get; set; }
+    }
+}

src/Billing/Controllers/StripeController.cs

@@ -1,14 +1,27 @@
 using Microsoft.AspNetCore.Mvc;
+using Microsoft.Extensions.Options;
 
 namespace Bit.Billing.Controllers
 {
     [Route("stripe")]
     public class StripeController : Controller
     {
-        [HttpPost("webhook")]
-        public void PostWebhook([FromBody]dynamic body, [FromQuery] string key)
-        {
+        private readonly BillingSettings _billingSettings;
 
+        public StripeController(IOptions<BillingSettings> billingSettings)
+        {
+            _billingSettings = billingSettings?.Value;
+        }
+
+        [HttpPost("webhook")]
+        public IActionResult PostWebhook([FromBody]dynamic body, [FromQuery] string key)
+        {
+            if(key != _billingSettings.StripeWebhookKey)
+            {
+                return new BadRequestResult();
+            }
+
+            return new OkResult();
         }
     }
 }

src/Billing/Startup.cs

@@ -7,6 +7,7 @@ using Microsoft.AspNetCore.Hosting;
 using Microsoft.Extensions.Configuration;
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
+using Bit.Core;
 
 namespace Bit.Billing
 {
@@ -33,6 +34,15 @@ namespace Bit.Billing
 
         public void ConfigureServices(IServiceCollection services)
         {
+            // Options
+            services.AddOptions();
+
+            // Settings
+            //var globalSettings = new GlobalSettings();
+            //ConfigurationBinder.Bind(Configuration.GetSection("GlobalSettings"), globalSettings);
+            //services.AddSingleton(s => globalSettings);
+            services.Configure<BillingSettings>(Configuration.GetSection("BillingSettings"));
+
             services.AddMvc();
         }
 

src/Billing/settings.json

@@ -4,5 +4,11 @@
     "LogLevel": {
       "Default": "Warning"
     }
+  },
+  "globalSettings": {
+
+  },
+  "billingSettings": {
+    "stripeWebhookKey": "SECRET"
   }
 }