documenso/packages/trpc/server/enterprise-router/manage-subscription.ts

import { createCustomer } from '@documenso/ee/server-only/stripe/create-customer';
import { getPortalSession } from '@documenso/ee/server-only/stripe/get-portal-session';
import { IS_BILLING_ENABLED, NEXT_PUBLIC_WEBAPP_URL } from '@documenso/lib/constants/app';
import { ORGANISATION_MEMBER_ROLE_PERMISSIONS_MAP } from '@documenso/lib/constants/organisations';
import { AppError, AppErrorCode } from '@documenso/lib/errors/app-error';
import { buildOrganisationWhereQuery } from '@documenso/lib/utils/organisations';
import { prisma } from '@documenso/prisma';

import { authenticatedProcedure } from '../trpc';
import { ZManageSubscriptionRequestSchema } from './manage-subscription.types';

export const manageSubscriptionRoute = authenticatedProcedure
  .input(ZManageSubscriptionRequestSchema)
  .mutation(async ({ ctx, input }) => {
    const { organisationId } = input;

    ctx.logger.info({
      input: {
        organisationId,
      },
    });

    const userId = ctx.user.id;

    if (!IS_BILLING_ENABLED()) {
      throw new AppError(AppErrorCode.INVALID_REQUEST, {
        message: 'Billing is not enabled',
      });
    }

    const organisation = await prisma.organisation.findFirst({
      where: buildOrganisationWhereQuery({
        organisationId,
        userId,
        roles: ORGANISATION_MEMBER_ROLE_PERMISSIONS_MAP['MANAGE_BILLING'],
      }),
      include: {
        subscription: true,
        owner: {
          select: {
            email: true,
            name: true,
          },
        },
      },
    });

    if (!organisation) {
      throw new AppError(AppErrorCode.UNAUTHORIZED);
    }

    let customerId = organisation.customerId;

    // If for some reason customer ID is missing in the organisation but
    // exists in the subscription take it from the subscription.
    if (!customerId && organisation.subscription?.customerId) {
      customerId = organisation.subscription.customerId;

      await prisma.organisation
        .update({
          where: {
            id: organisationId,
          },
          data: {
            customerId,
          },
        })
        .catch((err) => {
          // Todo: Logger
          console.error('Critical error, potential conflicting data');
          console.error(err.message);

          throw err;
        });
    }

    // If the customer ID is still missing create a new customer.
    if (!customerId) {
      const customer = await createCustomer({
        name: organisation.owner.name || organisation.owner.email,
        email: organisation.owner.email,
      });

      customerId = customer.id;

      await prisma.organisation.update({
        where: {
          id: organisationId,
        },
        data: {
          customerId: customer.id,
        },
      });
    }

    const redirectUrl = await getPortalSession({
      customerId,
      returnUrl: `${NEXT_PUBLIC_WEBAPP_URL()}/o/${organisation.url}/settings/billing`,
    });

    return {
      redirectUrl,
    };
  });