NightSpire/web-next/app/api/character/[service]/checkout/route.ts

import { getSession } from '@/lib/session'
import { getGameCharacters } from '@/lib/characters'
import { createCheckoutSession } from '@/lib/stripe'
import { getPaidService } from '@/lib/paid-services'

export async function POST(request: Request, { params }: { params: Promise<{ service: string }> }) {
  const { service } = await params
  const cfg = getPaidService(service)
  if (!cfg) return Response.json({ success: false, error: 'invalidService' }, { status: 404 })

  const session = await getSession()
  if (!session.accountId) return Response.json({ success: false, error: 'notAuthenticated' }, { status: 401 })

  let character = ''
  try {
    const body = await request.json()
    character = String(body.character ?? '')
  } catch {
    return Response.json({ success: false, error: 'invalidRequest' }, { status: 400 })
  }
  if (!character) return Response.json({ success: false, error: 'invalidCharacter' })

  const chars = await getGameCharacters(session.accountId)
  if (!chars.find((c) => c.name === character)) {
    return Response.json({ success: false, error: 'invalidCharacter' })
  }

  const price = await cfg.getPrice()
  const site = process.env.SITE_URL || ''
  const ip = (request.headers.get('x-forwarded-for') || '').split(',')[0].trim() || '0.0.0.0'

  const r = await createCheckoutSession({
    accountId: session.accountId,
    username: session.username || '',
    email: session.bnetEmail || '',
    acoreIp: ip,
    amount: price,
    characterName: character,
    productName: cfg.productName(character),
    successUrl: `${site}/service-success?service=${service}`,
    cancelUrl: `${site}/${service}`,
  })
  if (!r.success || !r.url) return Response.json({ success: false, error: 'stripeError' })
  return Response.json({ success: true, url: r.url })
}