feat(router): Add webhooks for network tokenization

crates/api_models/src/webhooks.rs

@@ -119,6 +119,10 @@ pub enum WebhookResponseTracker {
         mandate_id: String,
         status: common_enums::MandateStatus,
     },
+    PaymentMethod {
+        payment_method_id: String,
+        status: common_enums::PaymentMethodStatus,
+    },
     NoEffect,
 }
 
@@ -129,7 +133,22 @@ impl WebhookResponseTracker {
             Self::Payment { payment_id, .. }
             | Self::Refund { payment_id, .. }
             | Self::Dispute { payment_id, .. } => Some(payment_id.to_owned()),
-            Self::NoEffect | Self::Mandate { .. } => None,
+            Self::NoEffect | Self::Mandate { .. } | Self::PaymentMethod { .. } => None,
+            #[cfg(feature = "payouts")]
+            Self::Payout { .. } => None,
+        }
+    }
+
+    pub fn get_payment_method_id(&self) -> Option<String> {
+        match self {
+            Self::PaymentMethod {
+                payment_method_id, ..
+            } => Some(payment_method_id.to_owned()),
+            Self::Payment { .. }
+            | Self::Refund { .. }
+            | Self::Dispute { .. }
+            | Self::NoEffect
+            | Self::Mandate { .. } => None,
             #[cfg(feature = "payouts")]
             Self::Payout { .. } => None,
         }

crates/common_utils/src/events.rs

@@ -65,6 +65,9 @@ pub enum ApiEventsType {
         connector: String,
         payment_id: Option<id_type::PaymentId>,
     },
+    NetworkTokenWebhook {
+        payment_method_id: Option<String>,
+    },
     #[cfg(feature = "v2")]
     Webhooks {
         connector: id_type::MerchantConnectorAccountId,

crates/diesel_models/src/callback_mapper.rs

@@ -0,0 +1,27 @@
+use common_utils::pii;
+use diesel::{Identifiable, Insertable, Queryable, Selectable};
+use serde::{self, Deserialize, Serialize};
+
+use crate::schema::callback_mapper;
+
+#[derive(
+    Clone, Debug, Eq, PartialEq, Identifiable, Queryable, Selectable, Serialize, Deserialize,
+)]
+#[diesel(table_name = callback_mapper,  primary_key(id), check_for_backend(diesel::pg::Pg))]
+pub struct CallBackMapper {
+    pub id: String,
+    #[serde(rename = "type")]
+    pub type_: String,
+    pub data: pii::SecretSerdeValue,
+    pub created_at: time::PrimitiveDateTime,
+    pub last_modified_at: time::PrimitiveDateTime,
+}
+
+#[derive(Clone, Debug, Eq, PartialEq, Serialize, Deserialize, Insertable)]
+#[diesel(table_name = callback_mapper)]
+pub struct CallBackMapperNew {
+    pub id: String,
+    #[serde(rename = "type")]
+    pub type_: String,
+    pub data: pii::SecretSerdeValue,
+}

crates/diesel_models/src/lib.rs

@@ -10,6 +10,7 @@ pub mod authentication;
 pub mod authorization;
 pub mod blocklist;
 pub mod blocklist_fingerprint;
+pub mod callback_mapper;
 pub mod customers;
 pub mod dispute;
 pub mod enums;
@@ -59,11 +60,11 @@ use diesel_impl::{DieselArray, OptionalDieselArray};
 pub type StorageResult<T> = error_stack::Result<T, errors::DatabaseError>;
 pub type PgPooledConn = async_bb8_diesel::Connection<diesel::PgConnection>;
 pub use self::{
-    address::*, api_keys::*, cards_info::*, configs::*, customers::*, dispute::*, ephemeral_key::*,
-    events::*, file::*, generic_link::*, locker_mock_up::*, mandate::*, merchant_account::*,
-    merchant_connector_account::*, payment_attempt::*, payment_intent::*, payment_method::*,
-    payout_attempt::*, payouts::*, process_tracker::*, refund::*, reverse_lookup::*,
-    user_authentication_method::*,
+    address::*, api_keys::*, callback_mapper::*, cards_info::*, configs::*, customers::*,
+    dispute::*, ephemeral_key::*, events::*, file::*, generic_link::*, locker_mock_up::*,
+    mandate::*, merchant_account::*, merchant_connector_account::*, payment_attempt::*,
+    payment_intent::*, payment_method::*, payout_attempt::*, payouts::*, process_tracker::*,
+    refund::*, reverse_lookup::*, user_authentication_method::*,
 };
 
 /// The types and implementations provided by this module are required for the schema generated by

crates/diesel_models/src/query.rs

@@ -10,6 +10,7 @@ pub mod authentication;
 pub mod authorization;
 pub mod blocklist;
 pub mod blocklist_fingerprint;
+pub mod callback_mapper;
 pub mod customers;
 pub mod dashboard_metadata;
 pub mod dispute;

crates/diesel_models/src/query/callback_mapper.rs

@@ -0,0 +1,24 @@
+use diesel::{associations::HasTable, ExpressionMethods};
+
+use super::generics;
+use crate::{
+    callback_mapper::{CallBackMapper, CallBackMapperNew},
+    schema::callback_mapper::dsl,
+    PgPooledConn, StorageResult,
+};
+
+impl CallBackMapperNew {
+    pub async fn insert(self, conn: &PgPooledConn) -> StorageResult<CallBackMapper> {
+        generics::generic_insert(conn, self).await
+    }
+}
+
+impl CallBackMapper {
+    pub async fn find_by_id(conn: &PgPooledConn, id: &str) -> StorageResult<Self> {
+        generics::generic_find_one::<<Self as HasTable>::Table, _, _>(
+            conn,
+            dsl::id.eq(id.to_owned()),
+        )
+        .await
+    }
+}

crates/diesel_models/src/schema.rs

@@ -216,6 +216,22 @@ diesel::table! {
     }
 }
 
+diesel::table! {
+    use diesel::sql_types::*;
+    use crate::enums::diesel_exports::*;
+
+    callback_mapper (id) {
+        #[max_length = 128]
+        id -> Varchar,
+        #[sql_name = "type"]
+        #[max_length = 64]
+        type_ -> Varchar,
+        data -> Jsonb,
+        created_at -> Timestamp,
+        last_modified_at -> Timestamp,
+    }
+}
+
 diesel::table! {
     use diesel::sql_types::*;
     use crate::enums::diesel_exports::*;
@@ -1404,6 +1420,7 @@ diesel::allow_tables_to_appear_in_same_query!(
     blocklist_fingerprint,
     blocklist_lookup,
     business_profile,
+    callback_mapper,
     captures,
     cards_info,
     configs,

crates/diesel_models/src/schema_v2.rs

@@ -224,6 +224,22 @@ diesel::table! {
     }
 }
 
+diesel::table! {
+    use diesel::sql_types::*;
+    use crate::enums::diesel_exports::*;
+
+    callback_mapper (id) {
+        #[max_length = 128]
+        id -> Varchar,
+        #[sql_name = "type"]
+        #[max_length = 64]
+        type_ -> Varchar,
+        data -> Jsonb,
+        created_at -> Timestamp,
+        last_modified_at -> Timestamp,
+    }
+}
+
 diesel::table! {
     use diesel::sql_types::*;
     use crate::enums::diesel_exports::*;
@@ -1352,6 +1368,7 @@ diesel::allow_tables_to_appear_in_same_query!(
     blocklist_fingerprint,
     blocklist_lookup,
     business_profile,
+    callback_mapper,
     captures,
     cards_info,
     configs,

crates/hyperswitch_domain_models/src/callback_mapper.rs

@@ -0,0 +1,30 @@
+use common_utils::{id_type, pii};
+use serde::{self, Deserialize, Serialize};
+
+#[derive(Clone, Debug, Eq, PartialEq, Serialize, Deserialize)]
+pub struct CallBackMapper {
+    pub id: String,
+    #[serde(rename = "type")]
+    pub type_: String,
+    pub data: pii::SecretSerdeValue,
+    pub created_at: time::PrimitiveDateTime,
+    pub last_modified_at: time::PrimitiveDateTime,
+}
+
+#[derive(Clone, Debug, Eq, PartialEq, Serialize, Deserialize)]
+pub struct CallBackMapperNew {
+    pub id: String,
+    #[serde(rename = "type")]
+    pub type_: String,
+    pub data: pii::SecretSerdeValue,
+}
+
+#[derive(Clone, Debug, Eq, PartialEq, Serialize, Deserialize)]
+#[serde(tag = "type", content = "data")]
+pub enum CallBackMapperData {
+    NetworkTokenWebhook {
+        merchant_id: id_type::MerchantId,
+        payment_method_id: String,
+        customer_id: id_type::CustomerId,
+    },
+}

crates/hyperswitch_domain_models/src/lib.rs

@@ -1,6 +1,7 @@
 pub mod api;
 pub mod behaviour;
 pub mod business_profile;
+pub mod callback_mapper;
 pub mod consts;
 pub mod customer;
 pub mod disputes;

crates/router/src/configs/secrets_transformers.rs

@@ -333,11 +333,15 @@ impl SecretsHandler for settings::NetworkTokenizationService {
         let private_key = secret_management_client
             .get_secret(network_tokenization.private_key.clone())
             .await?;
+        let webhook_source_verification_key = secret_management_client
+            .get_secret(network_tokenization.webhook_source_verification_key.clone())
+            .await?;
 
         Ok(value.transition_state(|network_tokenization| Self {
             public_key,
             private_key,
             token_service_api_key,
+            webhook_source_verification_key,
             ..network_tokenization
         }))
     }

crates/router/src/configs/settings.rs

@@ -421,6 +421,7 @@ pub struct NetworkTokenizationService {
     pub key_id: String,
     pub delete_token_url: url::Url,
     pub check_token_status_url: url::Url,
+    pub webhook_source_verification_key: Secret<String>,
 }
 
 #[derive(Debug, Deserialize, Clone)]

crates/router/src/configs/validations.rs

@@ -232,7 +232,16 @@ impl super::settings::NetworkTokenizationService {
             Err(ApplicationError::InvalidConfigurationValueError(
                 "private_key must not be empty".into(),
             ))
-        })
+        })?;
+
+        when(
+            self.webhook_source_verification_key.is_default_or_empty(),
+            || {
+                Err(ApplicationError::InvalidConfigurationValueError(
+                    "webhook_source_verification_key must not be empty".into(),
+                ))
+            },
+        )
     }
 }