Update routes/subscription.py

routes/subscription.py

@@ -3,10 +3,8 @@ import logging
 import json
 import os
 import requests
-import jwt
-from fastapi import APIRouter, HTTPException, Request
+from fastapi import APIRouter, HTTPException, Header
 from pydantic import BaseModel
-from fastapi import Header
 
 router = APIRouter()
 
@@ -30,16 +28,32 @@ SUPABASE_HEADERS = {
     "Content-Type": "application/json"
 }
 
-class CheckSubscriptionRequest(BaseModel):
-    user_id: str
-    stylist_id: str
-
 class SubscriptionRequest(BaseModel):
     id: str  # ID do estilista
 
 class CreatePriceRequest(BaseModel):
     amount: int  # Valor em centavos (ex: 2500 para R$25,00)
-    user_id: str  # ID do usuário que está criando o preço
+
+def verify_token(user_token: str) -> str:
+    """
+    Valida o token JWT no Supabase e retorna o `user_id` se for válido.
+    """
+    headers = {
+        "Authorization": f"Bearer {user_token}",
+        "apikey": SUPABASE_KEY,
+        "Content-Type": "application/json"
+    }
+
+    response = requests.get(f"{SUPABASE_URL}/auth/v1/user", headers=headers)
+
+    if response.status_code == 200:
+        user_data = response.json()
+        user_id = user_data.get("id")
+        if not user_id:
+            raise HTTPException(status_code=400, detail="Invalid token: User ID not found")
+        return user_id
+    else:
+        raise HTTPException(status_code=401, detail="Invalid or expired token")
 
 @router.post("/create_price")
 async def create_price(
@@ -50,33 +64,17 @@ async def create_price(
         if not user_token:
             raise HTTPException(status_code=401, detail="Missing User-key header")
 
-        # 🔹 Verificação do token JWT no Supabase
-        supabase_url = f"{SUPABASE_URL}/auth/v1/user"
-        response = requests.get(supabase_url, headers={"Authorization": f"Bearer {user_token}"})
-
-        if response.status_code != 200:
-            raise HTTPException(status_code=401, detail="Invalid token")
-
-        user_data = response.json()
-        user_id = user_data.get("id")
-        if not user_id:
-            raise HTTPException(status_code=400, detail="Invalid token: User ID not found")
+        # 🔹 1. Validar o token e obter `user_id`
+        user_id = verify_token(user_token)
 
         amount = data.amount
-        user_id_request = data.user_id
-
-        if not amount or not user_id_request:
-            raise HTTPException(status_code=400, detail="Amount and user_id are required")
 
-        # 🔹 Buscar `price_id` do usuário no Supabase
-        supabase_url = f"{SUPABASE_URL}/rest/v1/User?id=eq.{user_id_request}"
-        supabase_headers = {
-            "apikey": SUPABASE_KEY,
-            "Authorization": f"Bearer {user_token}",
-            "Content-Type": "application/json"
-        }
+        if not amount:
+            raise HTTPException(status_code=400, detail="Amount is required")
 
-        response = requests.get(supabase_url, headers=supabase_headers)
+        # 🔹 2. Buscar `price_id` do usuário no Supabase
+        supabase_url = f"{SUPABASE_URL}/rest/v1/User?id=eq.{user_id}"
+        response = requests.get(supabase_url, headers=SUPABASE_HEADERS)
         user_data = response.json()
 
         if not user_data:
@@ -85,23 +83,21 @@ async def create_price(
         user = user_data[0]
         existing_price_id = user.get("price_id")
 
-        # 🔹 Se já existir um price_id, tentar atualizar
+        # 🔹 3. Atualizar ou criar um novo `price_id`
+        updated_price_id = None
+
         if existing_price_id:
             try:
                 stripe.Price.modify(
                     existing_price_id,
                     unit_amount=amount,
-                    metadata={"updated_at": "now"}  # Apenas para gerar um evento de atualização
+                    metadata={"updated_at": "now"}
                 )
                 logger.info(f"✅ Price {existing_price_id} updated successfully.")
                 updated_price_id = existing_price_id
             except stripe.error.InvalidRequestError:
                 logger.warning(f"⚠️ Failed to update price {existing_price_id}, creating a new one instead.")
-                updated_price_id = None
-        else:
-            updated_price_id = None
 
-        # 🔹 Se não conseguiu atualizar, criar um novo preço
         if not updated_price_id:
             price = stripe.Price.create(
                 unit_amount=amount,
@@ -112,7 +108,7 @@ async def create_price(
             updated_price_id = price.id
             logger.info(f"✅ New price created: {updated_price_id}")
 
-            # 🔹 Pausar todas as assinaturas associadas ao preço antigo
+            # 🔹 4. Pausar assinaturas antigas e desativar o preço antigo
             if existing_price_id:
                 subscriptions = stripe.Subscription.list(status="active")
                 for sub in subscriptions.auto_paging_iter():
@@ -120,14 +116,13 @@ async def create_price(
                         stripe.Subscription.modify(sub.id, pause_collection={"behavior": "void"})
                         logger.info(f"🔹 Subscription {sub.id} paused.")
 
-                # 🔹 Desativar o preço antigo
                 stripe.Price.modify(existing_price_id, active=False)
                 logger.info(f"🚫 Price {existing_price_id} deactivated.")
 
-        # 🔹 Atualizar Supabase com o novo `price_id`
+        # 🔹 5. Atualizar Supabase com o novo `price_id`
         update_response = requests.patch(
             supabase_url,
-            headers=supabase_headers,
+            headers=SUPABASE_HEADERS,
             json={"price_id": updated_price_id}
         )
 
@@ -149,17 +144,8 @@ def create_checkout_session(
         if not user_token:
             raise HTTPException(status_code=401, detail="Missing User-key header")
 
-        # 🔹 1. Verificação do token JWT no Supabase
-        supabase_url = f"{SUPABASE_URL}/auth/v1/user"
-        response = requests.get(supabase_url, headers={"Authorization": f"Bearer {user_token}"})
-
-        if response.status_code != 200:
-            raise HTTPException(status_code=401, detail="Invalid token")
-
-        user_data = response.json()
-        user_id = user_data.get("id")
-        if not user_id:
-            raise HTTPException(status_code=400, detail="Invalid token: User ID not found")
+        # 🔹 1. Validar o token e obter `user_id`
+        user_id = verify_token(user_token)
 
         # 🔹 2. Buscar estilista no Supabase
         response = requests.get(
@@ -178,7 +164,7 @@ def create_checkout_session(
         if not consultations or not stylist_stripe_id:
             raise HTTPException(status_code=400, detail="Stylist profile is incomplete")
 
-        # 🔹 3. Buscar o stripe_id e price_id do usuário autenticado
+        # 🔹 3. Buscar `stripe_id` e `price_id` do usuário autenticado
         response_user = requests.get(
             f"{SUPABASE_URL}/rest/v1/User?id=eq.{user_id}",
             headers=SUPABASE_HEADERS
@@ -213,7 +199,7 @@ def create_checkout_session(
             ],
             metadata={
                 "stylist_id": stylist_stripe_id,
-                "user_id": user_id,  # 🔹 Continua no metadata para rastreamento interno
+                "user_id": user_id,  
                 "consultations_per_month": consultations
             }
         )