Function authorizeSubscriptionReference

apps/sim/lib/billing/authorization.ts:20–38

(
  userId: string,
  referenceId: string,
  action?: string
)

 * - Personal subscriptions skip this check to allow upgrades.
 */
export async function authorizeSubscriptionReference(
  userId: string,
  referenceId: string,
  action?: string
): Promise<boolean> {
  if (!isOrgScopedSubscription({ referenceId }, userId)) {
    return true
  }

  if (action === 'upgrade-subscription' && (await hasPaidSubscription(referenceId))) {
    logger.warn('Blocking checkout - active subscription already exists for organization', {
      userId,
      referenceId,
    })
    return false
  }

  return isOrganizationOwnerOrAdmin(userId, referenceId)
}