Update routes/hello.py

routes/hello.py

@@ -1,8 +1,9 @@
-import os  # <- Adicione esta linha no topo do arquivo
+import os
 import stripe
-from fastapi import APIRouter, HTTPException
-from pydantic import BaseModel
 import requests
+import logging
+from fastapi import APIRouter, HTTPException, Header
+from pydantic import BaseModel
 
 router = APIRouter()
 
@@ -21,20 +22,49 @@ SUPABASE_HEADERS = {
     "Content-Type": "application/json"
 }
 
-class AccountRequest(BaseModel):
-    email: str
-    name: str  # Name of the individual account owner
+logging.basicConfig(level=logging.INFO)
+logger = logging.getLogger(__name__)
 
 class CreateCustomerRequest(BaseModel):
     email: str
     phone: str
     name: str
-    user_id: str  # ID do usuário no Supabase
+
+def verify_token(user_token: str) -> str:
+    """
+    Valida o token JWT no Supabase e retorna o user_id se for válido.
+    """
+    headers = {
+        "Authorization": f"Bearer {user_token}",
+        "apikey": SUPABASE_KEY,
+        "Content-Type": "application/json"
+    }
+
+    response = requests.get(f"{SUPABASE_URL}/auth/v1/user", headers=headers)
+
+    if response.status_code == 200:
+        user_data = response.json()
+        user_id = user_data.get("id")
+        if not user_id:
+            raise HTTPException(status_code=400, detail="Invalid token: User ID not found")
+        return user_id
+    else:
+        raise HTTPException(status_code=401, detail="Invalid or expired token")
 
 @router.post("/create_customer")
-def create_customer(data: CreateCustomerRequest):
+def create_customer(
+    data: CreateCustomerRequest, 
+    user_token: str = Header(None, alias="User-token")  # Token JWT do usuário no cabeçalho
+):
     try:
-        # Criar o cliente no Stripe
+        if not user_token:
+            raise HTTPException(status_code=401, detail="Missing User-token header")
+        
+        # 🔹 Validar o token e obter user_id
+        user_id = verify_token(user_token)
+        logger.info(f"🔹 User verified. user_id: {user_id}")
+
+        # 🔹 Criar o cliente no Stripe
         customer = stripe.Customer.create(
             email=data.email,
             phone=data.phone,
@@ -42,21 +72,27 @@ def create_customer(data: CreateCustomerRequest):
         )
         stripe_id = customer.id
 
-        # Atualizar o usuário no Supabase com o stripe_id
+        # 🔹 Atualizar o usuário no Supabase com o stripe_id
         update_data = {"stripe_id": stripe_id}
+        update_headers = {
+            "Authorization": f"Bearer {user_token}",
+            **SUPABASE_HEADERS
+        }
+
         response = requests.patch(
-            f"{SUPABASE_URL}/rest/v1/users?id=eq.{data.user_id}",
-            headers=SUPABASE_HEADERS,
+            f"{SUPABASE_URL}/rest/v1/users?id=eq.{user_id}",
+            headers=update_headers,
             json=update_data
         )
 
         if response.status_code not in [200, 204]:
             raise HTTPException(status_code=500, detail=f"Erro ao atualizar o Supabase: {response.text}")
 
+        logger.info(f"✅ Successfully created customer {stripe_id} and updated Supabase user {user_id}")
         return {"customer_id": stripe_id}
     
     except Exception as e:
-        logger.error(f"Erro ao criar cliente: {str(e)}")
+        logger.error(f"❌ Error creating customer: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error creating customer: {str(e)}")
         
 @router.post("/create_account")