Paystack with Strapi

// src/api/payment/routes/payment.js (Strapi v4)
module.exports = {
  routes: [
    { method: 'POST', path: '/payments/initialize', handler: 'payment.initialize', config: { auth: false } },
    { method: 'POST', path: '/payments/webhook', handler: 'payment.webhook', config: { auth: false } },
  ],
};

// src/api/payment/controllers/payment.js (Strapi v4)
const crypto = require('crypto');

module.exports = {
  async initialize(ctx) {
    var { productId, email } = ctx.request.body;

    // Fetch price from Strapi Product content type
    var product = await strapi.entityService.findOne('api::product.product', productId, { fields: ['name', 'price'] });
    if (!product) return ctx.notFound('Product not found');

    var reference = 'order_' + productId + '_' + Date.now();

    // Create order record in Strapi
    await strapi.entityService.create('api::order.order', {
      data: { reference, product: productId, customer_email: email, status: 'pending' },
    });

    var res = await fetch('https://api.paystack.co/transaction/initialize', {
      method: 'POST',
      headers: { Authorization: 'Bearer ' + process.env.PAYSTACK_SECRET_KEY, 'Content-Type': 'application/json' },
      body: JSON.stringify({ email, amount: Math.round(product.price * 100), reference, currency: 'NGN' }),
    });
    var data = await res.json();
    ctx.body = { url: data.data.authorization_url };
  },

  async webhook(ctx) {
    var rawBody = ctx.request.rawBody; // requires Strapi raw body config
    var signature = ctx.request.headers['x-paystack-signature'];
    var expected = crypto.createHmac('sha512', process.env.PAYSTACK_WEBHOOK_SECRET).update(rawBody).digest('hex');
    if (expected !== signature) return ctx.unauthorized();

    var event = ctx.request.body;
    if (event.event === 'charge.success') {
      var orders = await strapi.entityService.findMany('api::order.order', {
        filters: { reference: event.data.reference },
      });
      if (orders.length > 0) {
        await strapi.entityService.update('api::order.order', orders[0].id, { data: { status: 'paid' } });
      }
    }
    ctx.status = 200;
  },
};

See the Paystack with headless CMS checkout guide for the full architecture.

Sign up for the McTaba newsletter