@dotted-labs/ngx-supabase-stripe 0.4.1 → 0.5.0

package/fesm2022/dotted-labs-ngx-supabase-stripe.mjs

@@ -24,6 +24,11 @@ function provideStripeConfig(config) {
     ];
 }
 
+/**
+ * Optional shared browser `SupabaseClient` (e.g. the same instance passed to ngx-supabase-auth).
+ * When provided, {@link SupabaseClientService} uses it instead of creating a new client.
+ */
+const SUPABASE_BROWSER_CLIENT = new InjectionToken('SUPABASE_BROWSER_CLIENT');
 const SUPABASE_CONFIG = new InjectionToken('SUPABASE_CONFIG');
 /**
  * Provides the Supabase configuration
@@ -60,9 +65,12 @@ function provideNgxSupabaseStripeConfig(config) {
 
 class SupabaseClientService {
     config = inject(SUPABASE_CONFIG);
+    browserClient = inject(SUPABASE_BROWSER_CLIENT, { optional: true });
     client;
     constructor() {
-        this.client = createClient(this.config.supabaseUrl, this.config.supabaseKey);
+        this.client =
+            this.browserClient ??
+                createClient(this.config.supabaseUrl, this.config.supabaseKey);
         console.log('🚀 [SupabaseClientService]: this.client', this.client);
     }
     /**
@@ -324,6 +332,48 @@ class StripeClientService {
         this.stripe = loadStripe(this.config.publishableKey);
         console.log('🔌 [StripeClientService]: Loaded Stripe Client from @stripe/stripe-js');
     }
+    /**
+     * Edge functions use JWT verification (e.g. getClaims). Requires a logged-in Supabase Auth user.
+     */
+    async resolveFunctionsAuth() {
+        const client = this.supabase.getClient();
+        const { data: sessionData, error: sessionError } = await client.auth.getSession();
+        if (sessionError) {
+            return { ok: false, error: new Error(sessionError.message) };
+        }
+        let accessToken = sessionData.session?.access_token;
+        if (!accessToken) {
+            const { data: refreshed, error: refreshError } = await client.auth.refreshSession();
+            if (refreshError) {
+                return { ok: false, error: new Error(refreshError.message) };
+            }
+            accessToken = refreshed.session?.access_token;
+        }
+        if (!accessToken) {
+            return {
+                ok: false,
+                error: new Error('No Supabase Auth session. Sign in before checkout (e.g. signInWithPassword, signInWithOAuth, or magic link).'),
+            };
+        }
+        return { ok: true, headers: { Authorization: `Bearer ${accessToken}` } };
+    }
+    async invokeWithAuth(name, options = {}) {
+        const auth = await this.resolveFunctionsAuth();
+        if (!auth.ok) {
+            return { data: null, error: auth.error };
+        }
+        const { data, error } = await this.supabase.getClient().functions.invoke(name, {
+            ...options,
+            headers: {
+                ...options.headers,
+                ...auth.headers,
+            },
+        });
+        if (error) {
+            return { data: null, error: error };
+        }
+        return { data, error: null };
+    }
     /**
      * Get the Stripe instance
      */
@@ -373,20 +423,19 @@ class StripeClientService {
      */
     async createCheckoutSession(priceId, resultPagePath, customer) {
         try {
-            const { data, error } = await this.supabase.getClient()
-                .functions.invoke('checkout_session', {
+            const { data, error } = await this.invokeWithAuth('checkout_session', {
                 body: {
                     priceId,
                     resultPagePath,
-                    customer
-                }
+                    customer,
+                },
             });
             if (error) {
                 throw error;
             }
             return {
                 clientSecret: data?.client_secret ?? null,
-                error: null
+                error: null,
             };
         }
         catch (error) {
@@ -399,13 +448,12 @@ class StripeClientService {
      */
     async createSubscription(priceId, returnPath, customer) {
         try {
-            const { data, error } = await this.supabase.getClient()
-                .functions.invoke('create_subscription', {
+            const { data, error } = await this.invokeWithAuth('create_subscription', {
                 body: {
                     priceId,
                     resultPagePath: returnPath,
-                    customer
-                }
+                    customer,
+                },
             });
             if (error) {
                 throw error;
@@ -423,12 +471,11 @@ class StripeClientService {
      */
     async updateSubscription(subscriptionId, params) {
         try {
-            const { data, error } = await this.supabase.getClient()
-                .functions.invoke('update_subscription', {
+            const { data, error } = await this.invokeWithAuth('update_subscription', {
                 body: {
                     subscriptionId,
-                    params
-                }
+                    params,
+                },
             });
             if (error) {
                 throw error;
@@ -445,11 +492,10 @@ class StripeClientService {
      */
     async getSubscription(subscriptionId) {
         try {
-            const { data, error } = await this.supabase.getClient()
-                .functions.invoke('get_subscription', {
+            const { data, error } = await this.invokeWithAuth('get_subscription', {
                 body: {
-                    subscriptionId
-                }
+                    subscriptionId,
+                },
             });
             if (error) {
                 throw error;
@@ -465,8 +511,7 @@ class StripeClientService {
      */
     async listSubscriptions() {
         try {
-            const { data, error } = await this.supabase.getClient()
-                .functions.invoke('list_subscriptions');
+            const { data, error } = await this.invokeWithAuth('list_subscriptions');
             if (error) {
                 throw error;
             }
@@ -482,11 +527,10 @@ class StripeClientService {
      */
     async cancelSubscription(subscriptionId) {
         try {
-            const { data, error } = await this.supabase.getClient()
-                .functions.invoke('cancel_subscription', {
+            const { data, error } = await this.invokeWithAuth('cancel_subscription', {
                 body: {
-                    subscriptionId
-                }
+                    subscriptionId,
+                },
             });
             if (error) {
                 throw error;
@@ -504,12 +548,11 @@ class StripeClientService {
      */
     async resumeSubscription(subscriptionId, params) {
         try {
-            const { data, error } = await this.supabase.getClient()
-                .functions.invoke('resume_subscription', {
+            const { data, error } = await this.invokeWithAuth('resume_subscription', {
                 body: {
                     subscriptionId,
-                    params
-                }
+                    params,
+                },
             });
             if (error) {
                 throw error;
@@ -526,11 +569,10 @@ class StripeClientService {
      */
     async getCheckoutSessionStatus(sessionId) {
         try {
-            const { data, error } = await this.supabase.getClient()
-                .functions.invoke('session_status', {
+            const { data, error } = await this.invokeWithAuth('session_status', {
                 body: {
-                    sessionId
-                }
+                    sessionId,
+                },
             });
             if (error) {
                 throw error;
@@ -549,12 +591,11 @@ class StripeClientService {
      */
     async createPortalSession(customerId, returnUrl) {
         try {
-            const { data, error } = await this.supabase.getClient()
-                .functions.invoke('create_portal_session', {
+            const { data, error } = await this.invokeWithAuth('create_portal_session', {
                 body: {
                     customerId,
-                    returnUrl
-                }
+                    returnUrl,
+                },
             });
             if (error) {
                 throw error;
@@ -571,11 +612,10 @@ class StripeClientService {
      */
     async createCustomer(customerEmail) {
         try {
-            const { data, error } = await this.supabase.getClient()
-                .functions.invoke('create_customer', {
+            const { data, error } = await this.invokeWithAuth('create_customer', {
                 body: {
-                    customerEmail
-                }
+                    customerEmail,
+                },
             });
             if (error) {
                 throw error;
@@ -588,9 +628,8 @@ class StripeClientService {
     }
     async getCustomerPaymentMethods(customerId) {
         try {
-            const { data, error } = await this.supabase.getClient()
-                .functions.invoke('customer_payment_methods', {
-                body: { customerId }
+            const { data, error } = await this.invokeWithAuth('customer_payment_methods', {
+                body: { customerId },
             });
             if (error) {
                 throw error;
@@ -603,9 +642,8 @@ class StripeClientService {
     }
     async getCustomerPaymentMethod(customerId, paymentMethodId) {
         try {
-            const { data, error } = await this.supabase.getClient()
-                .functions.invoke('customer_payment_method', {
-                body: { customerId, paymentMethodId }
+            const { data, error } = await this.invokeWithAuth('customer_payment_method', {
+                body: { customerId, paymentMethodId },
             });
             if (error) {
                 throw error;
@@ -1320,6 +1358,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.0", ngImpor
 class EmbeddedCheckoutComponent {
     checkoutStore = inject(CheckoutStore);
     customerStore = inject(CustomerStore);
+    stripeConfig = inject(STRIPE_CONFIG);
     priceId = input.required(...(ngDevMode ? [{ debugName: "priceId" }] : []));
     returnPagePath = input('/return', ...(ngDevMode ? [{ debugName: "returnPagePath" }] : []));
     customer = computed(() => this.customerStore.customer().data, ...(ngDevMode ? [{ debugName: "customer" }] : []));
@@ -1327,8 +1366,10 @@ class EmbeddedCheckoutComponent {
         this.createCheckoutSession();
     }
     createCheckoutSession() {
-        const baseUrl = window.location.origin;
-        const returnPath = `${baseUrl}${this.returnPagePath()}`;
+        const base = (this.stripeConfig.embeddedCheckoutBaseUrl?.trim() ||
+            (typeof window !== 'undefined' ? window.location.origin : '')).replace(/\/$/, '');
+        const path = this.returnPagePath();
+        const returnPath = path.startsWith('/') ? `${base}${path}` : `${base}/${path}`;
         // Create the checkout session
         this.checkoutStore.createCheckoutSession({
             priceId: this.priceId(),
@@ -1527,6 +1568,7 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.0", ngImpor
 class EmbeddedSubscriptionComponent {
     subscriptionsStore = inject(SubscriptionsStore);
     customerStore = inject(CustomerStore);
+    stripeConfig = inject(STRIPE_CONFIG);
     priceId = input.required(...(ngDevMode ? [{ debugName: "priceId" }] : []));
     returnPagePath = input('/subscription-return', ...(ngDevMode ? [{ debugName: "returnPagePath" }] : []));
     customer = computed(() => this.customerStore.customer().data, ...(ngDevMode ? [{ debugName: "customer" }] : []));
@@ -1534,8 +1576,10 @@ class EmbeddedSubscriptionComponent {
         this.createSubscription();
     }
     createSubscription() {
-        const baseUrl = window.location.origin;
-        const returnPath = `${baseUrl}${this.returnPagePath()}`;
+        const base = (this.stripeConfig.embeddedCheckoutBaseUrl?.trim() ||
+            (typeof window !== 'undefined' ? window.location.origin : '')).replace(/\/$/, '');
+        const path = this.returnPagePath();
+        const returnPath = path.startsWith('/') ? `${base}${path}` : `${base}/${path}`;
         this.subscriptionsStore.createSubscription(this.priceId(), returnPath, this.customer());
     }
     ngOnDestroy() {
@@ -2005,5 +2049,5 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.0", ngImpor
  * Generated bundle index. Do not edit.
  */
 
-export { CheckoutStore, Currency, CustomerDashboardComponent, CustomerStore, EmbeddedCheckoutComponent, EmbeddedSubscriptionComponent, PaymentIntentsListComponent, PaymentIntentsTableComponent, PortalAccountStore, ProductItemButtonComponent, ProductListComponent, ProductsStore, ReturnPageComponent, STRIPE_CONFIG, SUPABASE_CONFIG, StripeClientService, SubscriptionCardComponent, SubscriptionReturnPageComponent, SubscriptionsListComponent, SubscriptionsStore, SupabaseClientService, parsePaymentIntent, parseProduct, parseSubscription, provideNgxSupabaseStripeConfig, provideStripeConfig, provideSupabaseConfig };
+export { CheckoutStore, Currency, CustomerDashboardComponent, CustomerStore, EmbeddedCheckoutComponent, EmbeddedSubscriptionComponent, PaymentIntentsListComponent, PaymentIntentsTableComponent, PortalAccountStore, ProductItemButtonComponent, ProductListComponent, ProductsStore, ReturnPageComponent, STRIPE_CONFIG, SUPABASE_BROWSER_CLIENT, SUPABASE_CONFIG, StripeClientService, SubscriptionCardComponent, SubscriptionReturnPageComponent, SubscriptionsListComponent, SubscriptionsStore, SupabaseClientService, parsePaymentIntent, parseProduct, parseSubscription, provideNgxSupabaseStripeConfig, provideStripeConfig, provideSupabaseConfig };
 //# sourceMappingURL=dotted-labs-ngx-supabase-stripe.mjs.map