Add notification savings + webhook validation

src/app/api/send-notification/route.ts

@@ -1,14 +1,12 @@
-import {
-  SendNotificationRequest,
-  sendNotificationResponseSchema,
-} from "@farcaster/frame-sdk";
+import { notificationDetailsSchema } from "@farcaster/frame-sdk";
 import { NextRequest } from "next/server";
 import { z } from "zod";
+import { setUserNotificationDetails } from "~/lib/kv";
+import { sendFrameNotification } from "~/lib/notifs";
 
 const requestSchema = z.object({
-  token: z.string(),
-  url: z.string(),
-  targetUrl: z.string(),
+  fid: z.number(),
+  notificationDetails: notificationDetailsSchema,
 });
 
 export async function POST(request: NextRequest) {
@@ -22,45 +20,28 @@ export async function POST(request: NextRequest) {
     );
   }
 
-  const response = await fetch(requestBody.data.url, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-    },
-    body: JSON.stringify({
-      notificationId: crypto.randomUUID(),
-      title: "Hello from Frames v2!",
-      body: "This is a test notification",
-      targetUrl: requestBody.data.targetUrl,
-      tokens: [requestBody.data.token],
-    } satisfies SendNotificationRequest),
+  await setUserNotificationDetails(
+    requestBody.data.fid,
+    requestBody.data.notificationDetails
+  );
+
+  const sendResult = await sendFrameNotification({
+    fid: requestBody.data.fid,
+    title: "Test notification",
+    body: "Sent at " + new Date().toISOString(),
   });
 
-  const responseJson = await response.json();
-
-  if (response.status === 200) {
-    // Ensure correct response
-    const responseBody = sendNotificationResponseSchema.safeParse(responseJson);
-    if (responseBody.success === false) {
-      return Response.json(
-        { success: false, errors: responseBody.error.errors },
-        { status: 500 }
-      );
-    }
-
-    // Fail when rate limited
-    if (responseBody.data.result.rateLimitedTokens.length) {
-      return Response.json(
-        { success: false, error: "Rate limited" },
-        { status: 429 }
-      );
-    }
-
-    return Response.json({ success: true });
-  } else {
+  if (sendResult.state === "error") {
     return Response.json(
-      { success: false, error: responseJson },
+      { success: false, error: sendResult.error },
       { status: 500 }
     );
+  } else if (sendResult.state === "rate_limit") {
+    return Response.json(
+      { success: false, error: "Rate limited" },
+      { status: 429 }
+    );
   }
+
+  return Response.json({ success: true });
 }

src/app/api/webhook/route.ts

@@ -1,39 +1,35 @@
-import {
-  encodedJsonFarcasterSignatureSchema,
-  eventPayloadSchema,
-  jsonFarcasterSignatureHeaderSchema,
-} from "@farcaster/frame-sdk";
+import { eventPayloadSchema } from "@farcaster/frame-sdk";
 import { NextRequest } from "next/server";
+import { verifyJsonFarcasterSignature } from "~/lib/jfs";
+import {
+  deleteUserNotificationDetails,
+  setUserNotificationDetails,
+} from "~/lib/kv";
+import { sendFrameNotification } from "~/lib/notifs";
 
 export async function POST(request: NextRequest) {
   const requestJson = await request.json();
 
-  const requestBody =
-    encodedJsonFarcasterSignatureSchema.safeParse(requestJson);
-
-  if (requestBody.success === false) {
-    return Response.json(
-      { success: false, errors: requestBody.error.errors },
-      { status: 400 }
+  let data;
+  try {
+    const verifySignatureResult = await verifyJsonFarcasterSignature(
+      requestJson
     );
+    if (verifySignatureResult.success === false) {
+      return Response.json(
+        { success: false, error: verifySignatureResult.error },
+        { status: 401 }
+      );
+    }
+
+    data = verifySignatureResult;
+  } catch {
+    return Response.json({ success: false }, { status: 500 });
   }
 
-  // TODO: verify signature
-
-  const headerData = JSON.parse(
-    Buffer.from(requestBody.data.header, "base64url").toString("utf-8")
-  );
-  const header = jsonFarcasterSignatureHeaderSchema.safeParse(headerData);
-  if (header.success === false) {
-    return Response.json(
-      { success: false, errors: header.error.errors },
-      { status: 400 }
-    );
-  }
-  const fid = header.data.fid;
-
+  const fid = data.fid;
   const payloadData = JSON.parse(
-    Buffer.from(requestBody.data.payload, "base64url").toString("utf-8")
+    Buffer.from(data.payload, "base64url").toString("utf-8")
   );
   const payload = eventPayloadSchema.safeParse(payloadData);
 
@@ -46,26 +42,34 @@ export async function POST(request: NextRequest) {
 
   switch (payload.data.event) {
     case "frame_added":
-      console.log(
-        payload.data.notificationDetails
-          ? `Got frame-added event for fid ${fid} with notification token ${payload.data.notificationDetails.token} and url ${payload.data.notificationDetails.url}`
-          : `Got frame-added event for fid ${fid} with no notification details`
-      );
+      if (payload.data.notificationDetails) {
+        await setUserNotificationDetails(fid, payload.data.notificationDetails);
+        await sendFrameNotification({
+          fid,
+          title: "Welcome to Frames v2",
+          body: "Frame is now added to your client",
+        });
+      } else {
+        await deleteUserNotificationDetails(fid);
+      }
+
       break;
     case "frame_removed":
-      console.log(`Got frame-removed event for fid ${fid}`);
+      await deleteUserNotificationDetails(fid);
+
       break;
     case "notifications_enabled":
-      console.log(
-        `Got notifications-enabled event for fid ${fid} with token ${
-          payload.data.notificationDetails.token
-        } and url ${payload.data.notificationDetails.url} ${JSON.stringify(
-          payload.data
-        )}`
-      );
+      await setUserNotificationDetails(fid, payload.data.notificationDetails);
+      await sendFrameNotification({
+        fid,
+        title: "Ding ding ding",
+        body: "Notifications are now enabled",
+      });
+
       break;
     case "notifications_disabled":
-      console.log(`Got notifications-disabled event for fid ${fid}`);
+      await deleteUserNotificationDetails(fid);
+
       break;
   }