fix: transaction mismatch

Author: imrim12

package.json

@@ -1,7 +1,7 @@
 {
   "name": "@thecodeorigin/nuxt",
   "type": "module",
-  "version": "2.4.7",
+  "version": "2.4.8",
   "publishConfig": {
     "registry": "https://registry.npmjs.org",
     "access": "public"

server/api/payments/payos/webhook.post.ts

@@ -31,6 +31,18 @@ export default defineEventHandler(async (event) => {
 
     logger.log(`[PayOS Webhook] Processing transaction: orderCode=${webhookData.orderCode}, status=${transactionStatus}`)
 
+    const priceDiscount = Number(paymentTransactionOfProvider.payment.order.package.price_discount)
+    const price = Number(paymentTransactionOfProvider.payment.order.package.price)
+
+    if (priceDiscount !== Number(webhookData.amount) && price !== Number(webhookData.amount)) {
+      logger.error(`[PayOS Webhook] Amount mismatch, transaction [${paymentTransactionOfProvider.id}]: expected=${price}, received=${webhookData.amount}`)
+
+      throw createError({
+        statusCode: 400,
+        message: 'Amount mismatch!',
+      })
+    }
+
     const creditAmount = Number(paymentTransactionOfProvider.payment.order.package.amount)
     const userId = paymentTransactionOfProvider.payment.order.user_id