upfynai-code 2.6.0 → 2.6.1

package/server/routes/payments.js

@@ -1,172 +0,0 @@
-import express from 'express';
-import crypto from 'crypto';
-import { subscriptionDb, paymentDb, userDb, PLAN_DURATIONS } from '../database/db.js';
-
-const router = express.Router();
-
-// Plan prices in paise (INR × 100) — source of truth
-const PLAN_PRICES = {
-  monthly:       { amount: 49900,  original: 49900  },  // ₹499
-  'half-yearly': { amount: 249900, original: 249900 },  // ₹2,499
-  yearly:        { amount: 49900,  original: 499900 },  // ₹499 offer (original ₹4,999)
-};
-
-// Lazy-load Razorpay instance
-let _razorpay = null;
-async function getRazorpay() {
-  if (_razorpay) return _razorpay;
-  const keyId = process.env.RAZORPAY_KEY_ID?.trim();
-  const keySecret = process.env.RAZORPAY_KEY_SECRET?.trim();
-  if (!keyId || !keySecret) throw new Error('Razorpay credentials not configured');
-  const Razorpay = (await import('razorpay')).default;
-  _razorpay = new Razorpay({ key_id: keyId, key_secret: keySecret });
-  return _razorpay;
-}
-
-// ─── Create Order ───────────────────────────────────────────────────────────────
-router.post('/create-order', async (req, res) => {
-  try {
-    const userId = req.user.id;
-    const { planId } = req.body;
-
-    const plan = PLAN_PRICES[planId];
-    if (!planId || !plan) {
-      return res.status(400).json({ error: 'Invalid plan' });
-    }
-
-    const amountPaise = plan.amount;
-    const razorpay = await getRazorpay();
-
-    const notes = { userId: String(userId), planId };
-    if (plan.original !== plan.amount) {
-      notes.originalPrice = String(plan.original);
-      notes.offerPrice = String(plan.amount);
-    }
-
-    const order = await razorpay.orders.create({
-      amount: amountPaise,
-      currency: 'INR',
-      receipt: `upfyn_${userId}_${planId}_${Date.now()}`,
-      notes,
-    });
-
-    // Record pending payment
-    await paymentDb.createPayment(userId, planId, amountPaise, 'INR', order.id);
-
-    res.json({
-      orderId: order.id,
-      amount: amountPaise,
-      originalAmount: plan.original,
-      currency: 'INR',
-    });
-  } catch (error) {
-    // order creation error
-    res.status(500).json({ error: 'Could not create order' });
-  }
-});
-
-// ─── Verify Payment ─────────────────────────────────────────────────────────────
-router.post('/verify', async (req, res) => {
-  try {
-    const userId = req.user.id;
-    const { orderId, paymentId, signature, planId } = req.body;
-
-    if (!orderId || !paymentId || !signature || !planId) {
-      return res.status(400).json({ error: 'Missing payment details' });
-    }
-
-    // Verify Razorpay signature
-    const keySecret = process.env.RAZORPAY_KEY_SECRET?.trim();
-    if (!keySecret) return res.status(500).json({ error: 'Server payment config missing' });
-
-    const expectedSig = crypto
-      .createHmac('sha256', keySecret)
-      .update(`${orderId}|${paymentId}`)
-      .digest('hex');
-
-    if (expectedSig !== signature) {
-      await paymentDb.markFailed(orderId);
-      return res.status(400).json({ error: 'Invalid payment signature' });
-    }
-
-    // Look up the pending payment to get the amount
-    const payment = await paymentDb.getByOrderId(orderId);
-    if (!payment) {
-      return res.status(404).json({ error: 'Order not found' });
-    }
-
-    // Ensure this payment belongs to the authenticated user
-    if (payment.user_id !== userId) {
-      return res.status(403).json({ error: 'Order does not belong to this user' });
-    }
-
-    // Create subscription (extends existing if active)
-    const sub = await subscriptionDb.createSub(
-      userId, planId, payment.amount, payment.currency,
-      orderId, paymentId, signature
-    );
-
-    // Mark payment as paid
-    await paymentDb.markPaid(orderId, paymentId, signature, sub.id);
-
-    // Grant paid access — unlocks gated features
-    await userDb.setAccessOverride(userId, 'paid');
-
-    res.json({
-      success: true,
-      subscription: {
-        id: sub.id,
-        planId: sub.planId,
-        status: sub.status,
-        startsAt: sub.startsAt,
-        expiresAt: sub.expiresAt,
-      },
-    });
-  } catch (error) {
-    // payment verify error
-    res.status(500).json({ error: 'Payment verification failed' });
-  }
-});
-
-// ─── Get Current Subscription ───────────────────────────────────────────────────
-router.get('/subscription', async (req, res) => {
-  try {
-    // Expire overdue subscriptions first
-    await subscriptionDb.expireOverdue();
-
-    const sub = await subscriptionDb.getActiveSub(req.user.id);
-    res.json({ subscription: sub || null });
-  } catch (error) {
-    // subscription fetch error
-    res.status(500).json({ error: 'Could not fetch subscription' });
-  }
-});
-
-// ─── Get Payment History ────────────────────────────────────────────────────────
-router.get('/history', async (req, res) => {
-  try {
-    const payments = await paymentDb.getUserPayments(req.user.id);
-    const subscriptions = await subscriptionDb.getAllSubs(req.user.id);
-    res.json({ payments, subscriptions });
-  } catch (error) {
-    // history fetch error
-    res.status(500).json({ error: 'Could not fetch payment history' });
-  }
-});
-
-// ─── Cancel Subscription ────────────────────────────────────────────────────────
-router.post('/cancel', async (req, res) => {
-  try {
-    const sub = await subscriptionDb.getActiveSub(req.user.id);
-    if (!sub) {
-      return res.status(404).json({ error: 'No active subscription found' });
-    }
-    const cancelled = await subscriptionDb.cancelSub(req.user.id, sub.id);
-    res.json({ success: cancelled });
-  } catch (error) {
-    // cancel error
-    res.status(500).json({ error: 'Could not cancel subscription' });
-  }
-});
-
-export default router;