Function handler

src/pages/api/checkout_sessions/index.ts:14–72

(req: NextApiRequest, res: NextApiResponse)

const prisma = new PrismaClient();

export default async function handler(req: NextApiRequest, res: NextApiResponse) {
  const session = await getServerSession(req, res, authOptions);

  if (!session?.user?.email) {
    res.status(401).json({ statusCode: 401, message: "Unauthorized" });
    return;
  }

  if (req.method === "POST") {
    const email = session?.user?.email!;
    const user = await prisma.user.findUniqueOrThrow({
      where: { email: email },
    });
    try {
      // Create Checkout Sessions from body params.
      const params: Stripe.Checkout.SessionCreateParams = {
        submit_type: "pay",
        mode: "payment",
        payment_method_types: ["affirm", "alipay", "card", "cashapp", "klarna", "link", "wechat_pay"],
        line_items: [
          {
            price: req.body.price,
            quantity: 1,
          },
        ],
        payment_method_options: {
          wechat_pay: {
            client: "web",
          },
        },
        payment_intent_data: {
          // not compatiable with affirm, alipay, klarna, wechat_pay
          // setup_future_usage: "off_session",
          metadata: {
            email: session?.user?.email!,
            plan: "PRO",
            price: req.body.price,
          },
        },
        // Link customer if present otherwise pass email and let Stripe create a new customer.
        // customer and customer_email can't be set at the same time.
        customer: user.stripeId || undefined,
        customer_email: user.stripeId ? undefined : email,
        customer_creation: user.stripeId ? undefined : "always",
        success_url: `${req.headers.origin}/setting?session_id={CHECKOUT_SESSION_ID}`,
        cancel_url: `${req.headers.origin}/setting`,
      };
      const checkoutSession: Stripe.Checkout.Session = await stripe.checkout.sessions.create(params);

      res.status(200).json(checkoutSession);
    } catch (err) {
      const errorMessage = err instanceof Error ? err.message : "Internal server error";
      res.status(500).json({ statusCode: 500, message: errorMessage });
    }
  } else {
    res.setHeader("Allow", "POST");
    res.status(405).end("Method Not Allowed");
  }