Files
NightSpire/web-next/app/api/character/[service]/checkout/route.ts
T
Inna 548fca16e6 Añade gold y transfer: patrón de pago unificado con fulfill + metadata
- lib/stripe.ts: createCheckoutSession acepta metadata; claimPaidCheckout la
  recupera de la sesión Stripe y la devuelve.
- lib/paid-services.ts: config unificado con fulfill(character, meta) + extraFields.
  gold -> UPDATE characters money (BD directa, no SOAP), transfer -> SOAP
  .char changeaccount. Los 5 simples usan soapFulfill.
- checkout [service]: lee extraFields -> metadata, precio depende de metadata (gold),
  valida precio>0. service-success llama cfg.fulfill(name, metadata).
- prices.ts: getTransferPrice, getGoldOptions/goldPriceFor (home_goldprice).
- GoldForm (personaje + cantidad) y TransferForm (personaje + destino); páginas
  /gold y /transfer. Catálogos Paid.gold/transfer.

Verificado: /gold /transfer redirigen a login, checkout 401 sin sesión, home OK.
NOTA: transfer no valida aún el token de seguridad ni reglas AC (nivel>=55, DK).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-12 23:32:12 +00:00

57 lines
2.2 KiB
TypeScript

import { getSession } from '@/lib/session'
import { getGameCharacters } from '@/lib/characters'
import { createCheckoutSession } from '@/lib/stripe'
import { getPaidService } from '@/lib/paid-services'
export async function POST(request: Request, { params }: { params: Promise<{ service: string }> }) {
const { service } = await params
const cfg = getPaidService(service)
if (!cfg) return Response.json({ success: false, error: 'invalidService' }, { status: 404 })
const session = await getSession()
if (!session.accountId) return Response.json({ success: false, error: 'notAuthenticated' }, { status: 401 })
let body: Record<string, string> = {}
try {
body = await request.json()
} catch {
return Response.json({ success: false, error: 'invalidRequest' }, { status: 400 })
}
const character = String(body.character ?? '')
if (!character) return Response.json({ success: false, error: 'invalidCharacter' })
const chars = await getGameCharacters(session.accountId)
if (!chars.find((c) => c.name === character)) {
return Response.json({ success: false, error: 'invalidCharacter' })
}
// Campos extra del servicio (gold_amount, destination_account...) -> metadata
const metadata: Record<string, string> = {}
for (const f of cfg.extraFields) {
const v = String(body[f] ?? '').trim()
if (!v) return Response.json({ success: false, error: 'missingFields' })
metadata[f] = v
}
const price = await cfg.price(metadata)
if (!price || price <= 0) return Response.json({ success: false, error: 'invalidRequest' })
const site = process.env.SITE_URL || ''
const ip = (request.headers.get('x-forwarded-for') || '').split(',')[0].trim() || '0.0.0.0'
const r = await createCheckoutSession({
accountId: session.accountId,
username: session.username || '',
email: session.bnetEmail || '',
acoreIp: ip,
amount: price,
characterName: character,
productName: cfg.productName(character, metadata),
successUrl: `${site}/service-success?service=${service}`,
cancelUrl: `${site}/${service}`,
metadata,
})
if (!r.success || !r.url) return Response.json({ success: false, error: 'stripeError' })
return Response.json({ success: true, url: r.url })
}