d-points: dejar sólo Stripe y SumUp con compra de PD funcional

Elimina las pestañas de PayPal/dLocal/Crypto/Skrill y por país; deja Información + Stripe + SumUp (las dos únicas pasarelas que se usarán). - Stripe: totalmente funcional reutilizando createCheckoutSession + webhook + página de éxito. Nueva ruta /api/dpoints/checkout crea la sesión con importe elegido por el usuario (1 unidad = 100 PD). - SumUp: integración real (lib/sumup.ts) mediante checkout hospedado, habilitada al definir SUMUP_API_KEY/SUMUP_MERCHANT_CODE; si no, avisa. - Nuevo servicio de entrega `dpoints` (lib/paid-services.ts) que acredita PD en home_api_points; entrega idempotente vía reclamo atómico. - Página /d-points-success entrega ambos proveedores (session_id/ref). - Iconos SVG generados para cada pasarela (stripe/sumup, marca + wordmark). - Moneda configurable con DP_CURRENCY (por defecto EUR). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-13 17:14:29 +00:00
parent 44fcedbe62
commit 89f6e5689f
13 changed files with 453 additions and 693 deletions
@@ -0,0 +1,54 @@
+import { setRequestLocale } from 'next-intl/server'
+import { Link } from '@/i18n/navigation'
+import { fulfillCheckoutSession } from '@/lib/fulfill'
+import { isSessionPaid } from '@/lib/stripe'
+import { fulfillSumUpCheckout } from '@/lib/sumup'
+import { PageShell } from '@/components/PageShell'
+
+export const dynamic = 'force-dynamic'
+
+export default async function DPointsSuccessPage({
+  params,
+  searchParams,
+}: {
+  params: Promise<{ locale: string }>
+  searchParams: Promise<{ provider?: string; session_id?: string; ref?: string }>
+}) {
+  const { locale } = await params
+  setRequestLocale(locale)
+  const { provider, session_id, ref } = await searchParams
+
+  // Entrega compartida con el webhook/return (idempotente vía reclamo atómico).
+  let status: 'ok' | 'already' | 'error' = 'error'
+
+  if (provider === 'sumup' && ref) {
+    const r = await fulfillSumUpCheckout(ref)
+    if (r.ok) status = 'ok'
+    else if (r.paid) status = 'already'
+  } else if (session_id) {
+    const r = await fulfillCheckoutSession(session_id)
+    if (r.ok) status = 'ok'
+    else if (await isSessionPaid(session_id)) status = 'already'
+  }
+
+  return (
+    <PageShell title="Adquirir PD">
+      <div className="box-content">
+        <div className="body-box-content centered">
+          {status === 'ok' ? (
+            <span className="ok-form-response">¡Pago completado! Tus PD ya fueron acreditados a tu cuenta.</span>
+          ) : status === 'already' ? (
+            <span className="ok-form-response">Este pago ya había sido procesado. Tus PD están acreditados.</span>
+          ) : (
+            <span className="red-form-response">No pudimos confirmar tu pago. Si se realizó el cargo, contacta con soporte.</span>
+          )}
+          <br />
+          <br />
+          <p>
+            <Link href="/account">← Regresar a mi cuenta</Link>
+          </p>
+        </div>
+      </div>
+    </PageShell>
+  )
+}
@@ -1,5 +1,4 @@
 import type { Metadata } from 'next'
-import { headers } from 'next/headers'
 import { setRequestLocale } from 'next-intl/server'
 import { redirect } from '@/i18n/navigation'
 import { getSession } from '@/lib/session'
@@ -20,25 +19,11 @@ export default async function DPointsPage({ params }: { params: Promise<{ locale
  if (!session.username) redirect({ href: '/select-account', locale })

  const realm = await getRealmName()
-  const h = await headers()
-  const ip = (h.get('x-forwarded-for') || '').split(',')[0].trim() || '0.0.0.0'
-  const host = h.get('x-forwarded-host') || h.get('host') || ''
-  const proto = h.get('x-forwarded-proto') || 'https'
-  const origin = host ? `${proto}://${host}` : ''
-
-  // Pasarelas automáticas: se habilitan al configurar sus credenciales por entorno.
-  const paypalBusiness = process.env.PAYPAL_BUSINESS_EMAIL || ''
+  const currency = (process.env.DP_CURRENCY || 'eur').toLowerCase()

  return (
    <PageShell title="Adquirir PD">
-      <DPointsTabs
-        realm={realm}
-        username={session.username!}
-        ip={ip}
-        locale={locale}
-        origin={origin}
-        paypalBusiness={paypalBusiness}
-      />
+      <DPointsTabs realm={realm} currency={currency} />
    </PageShell>
  )
 }
@@ -0,0 +1,78 @@
+import { randomUUID } from 'crypto'
+import { getSession } from '@/lib/session'
+import { createCheckoutSession } from '@/lib/stripe'
+import { createSumUpCheckout, sumupConfigured } from '@/lib/sumup'
+import { PD_PER_UNIT, DP_MIN_AMOUNT, DP_MAX_AMOUNT } from '@/lib/dpoints'
+
+/**
+ * Inicia la compra de PD por Stripe o SumUp. El importe lo elige el usuario
+ * (1 unidad = 100 PD). Devuelve la URL de checkout a la que redirigir.
+ */
+export async function POST(request: Request) {
+  const session = await getSession()
+  if (!session.accountId || !session.username) {
+    return Response.json({ success: false, error: 'notAuthenticated' }, { status: 401 })
+  }
+
+  let body: Record<string, unknown> = {}
+  try {
+    body = await request.json()
+  } catch {
+    return Response.json({ success: false, error: 'invalidRequest' }, { status: 400 })
+  }
+
+  const provider = String(body.provider ?? '')
+  if (provider !== 'stripe' && provider !== 'sumup') {
+    return Response.json({ success: false, error: 'invalidProvider' }, { status: 400 })
+  }
+
+  const amount = Number(body.amount)
+  if (!Number.isInteger(amount) || amount < DP_MIN_AMOUNT || amount > DP_MAX_AMOUNT) {
+    return Response.json({ success: false, error: 'invalidAmount' })
+  }
+
+  const points = amount * PD_PER_UNIT
+  const site = process.env.SITE_URL || ''
+  const ip = (request.headers.get('x-forwarded-for') || '').split(',')[0].trim() || '0.0.0.0'
+  const currency = process.env.DP_CURRENCY || 'eur'
+
+  if (provider === 'stripe') {
+    const r = await createCheckoutSession({
+      accountId: session.accountId,
+      username: session.username,
+      email: session.bnetEmail || '',
+      acoreIp: ip,
+      amount,
+      currency,
+      characterName: session.username,
+      productName: `${points} PD`,
+      successUrl: `${site}/d-points-success?provider=stripe`,
+      cancelUrl: `${site}/d-points`,
+      metadata: {
+        service: 'dpoints',
+        accountId: String(session.accountId),
+        points: String(points),
+        amount: String(amount),
+      },
+    })
+    if (!r.success || !r.url) return Response.json({ success: false, error: 'stripeError' })
+    return Response.json({ success: true, url: r.url })
+  }
+
+  // provider === 'sumup'
+  if (!sumupConfigured()) return Response.json({ success: false, error: 'notConfigured' })
+  const reference = randomUUID()
+  const r = await createSumUpCheckout({
+    accountId: session.accountId,
+    username: session.username,
+    email: session.bnetEmail || '',
+    acoreIp: ip,
+    amount,
+    points,
+    reference,
+    description: `${points} PD`,
+    returnUrl: `${site}/d-points-success?provider=sumup&ref=${reference}`,
+  })
+  if (!r.success || !r.url) return Response.json({ success: false, error: r.error || 'sumupError' })
+  return Response.json({ success: true, url: r.url })
+}
@@ -419,3 +419,11 @@ textarea:focus {
 .class-warlock { color: #9482c9; }
 .class-druid { color: #ff7d0a; }
 .class-unknown { color: #f0b100; }
+
+/* Logos en línea de las pasarelas de pago (lista de métodos en /d-points) */
+.pay-inline-logo {
+  height: 18px;
+  width: auto;
+  vertical-align: middle;
+  margin: 0 2px;
+}