feat: add razorpay

[bajrangCoder]

ENV to be Updated before Merger.

• PG_KEY_ID
• PG_KEY_SECRET
• PG_WEBHOOK_SECRET

[gemini-code-assist]

Summary of Changes

Hello @bajrangCoder, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request significantly enhances the platform's monetization capabilities by integrating Razorpay as a new payment gateway for web-based plugin purchases. It provides a complete end-to-end solution, from a user-friendly "Buy" button on the client-side to robust server-side APIs for secure transaction processing, payment verification, and webhook handling. The underlying database schema has been extended to support user-specific purchase records across different payment providers, ensuring that once a plugin is bought, it's permanently linked to the user's account for seamless access and download.

Highlights

• Razorpay Integration: Introduced a new payment gateway for web-based plugin purchases.
• Client-Side Purchase UI: Added a "BuyButton" component and logic to display purchase status (owned, buy, login) on plugin pages.
• Server-Side Payment APIs: Implemented API endpoints for creating Razorpay orders, verifying payments, checking plugin ownership, and handling webhooks.
• Database Enhancements: Updated the purchase_order schema to link purchases to user accounts and support multiple payment providers (Google Play, Razorpay).
• Dynamic Plugin Download: Modified the plugin download API to recognize user-linked purchases from any provider, allowing access to paid plugins.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	/gemini review	Performs a code review for the current pull request in its current state.
Pull Request Summary	/gemini summary	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	/gemini help	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

[gemini-code-assist]

Code Review

This pull request introduces Razorpay integration to allow users to purchase plugins via the web. The changes are comprehensive, including a new client-side checkout component, backend APIs for creating and verifying Razorpay orders, and database schema updates to support web purchases. The implementation correctly handles security aspects like payment signature verification and uses webhooks for robustness. I've identified a few areas for improvement related to error handling, client-side logic robustness, and code duplication on the server side.

[gemini-code-assist]

Code Review

This pull request introduces Razorpay as a payment gateway for purchasing plugins, a significant feature enhancement. The implementation covers both client-side checkout flow and a robust, secure server-side implementation with order creation, verification, and webhook handling. The database schema is updated accordingly with a migration script, and existing Google Play payment flows are correctly integrated to allow for cross-platform purchase recognition.

My review has identified a critical security vulnerability in the webhook signature verification that must be addressed. I've also included suggestions for improving user experience and making the database migration script more robust. Overall, this is a well-structured contribution, and with the recommended changes, it will be a solid addition to the platform.