Update routes/subscription.py

routes/subscription.py

@@ -39,6 +39,10 @@ SUPABASE_ROLE_HEADERS = {
     "Content-Type": "application/json"
 }
 
+class UpdateSubscriptionRequest(BaseModel):
+    subscription_id: str  # ID da assinatura a ser modificada
+    new_price_id: str  # Novo preço para a assinatura
+
 class EmergencyPaymentRequest(BaseModel):
     id: str  # ID do estilista
 
@@ -89,6 +93,54 @@ def verify_token(user_token: str) -> str:
     else:
         raise HTTPException(status_code=401, detail="Invalid or expired token")
 
+@router.post("/update_subscription")
+async def update_subscription(
+    data: UpdateSubscriptionRequest,
+    user_token: str = Header(None, alias="User-key")
+):
+    try:
+        if not user_token:
+            raise HTTPException(status_code=401, detail="Missing User-key header")
+
+        user_id = verify_token(user_token)
+        logger.info(f"🔹 User verified. user_id: {user_id}")
+
+        subscription_id = data.subscription_id
+        new_price_id = data.new_price_id
+
+        # 🔹 1. Buscar assinatura específica pelo ID
+        subscription = stripe.Subscription.retrieve(subscription_id)
+
+        if not subscription:
+            raise HTTPException(status_code=404, detail="Subscription not found.")
+
+        # 🔹 2. Verificar se a assinatura pertence ao usuário (se houver um campo identificador)
+        # Se o modelo de dados do Stripe salvar o user_id no metadata, podemos validar assim:
+        if subscription.get("metadata", {}).get("user_id") != user_id:
+            raise HTTPException(status_code=403, detail="You are not authorized to modify this subscription.")
+
+        # 🔹 3. Atualizar a assinatura para o novo preço
+        updated_subscription = stripe.Subscription.modify(
+            subscription_id,
+            items=[{"id": subscription["items"]["data"][0]["id"], "price": new_price_id}]
+        )
+
+        logger.info(f"✅ Subscription {subscription_id} updated to new price {new_price_id}")
+
+        return {
+            "message": "Subscription updated successfully!",
+            "subscription_id": subscription_id,
+            "new_price_id": new_price_id
+        }
+
+    except stripe.error.StripeError as e:
+        logger.error(f"❌ Stripe error: {e}")
+        raise HTTPException(status_code=500, detail=f"Stripe error: {str(e)}")
+
+    except Exception as e:
+        logger.error(f"❌ Error updating subscription: {e}")
+        raise HTTPException(status_code=500, detail=f"Error updating subscription: {str(e)}")
+
 @router.post("/sync_emergency_payments")
 async def sync_emergency_payments(request: Request, data: EmergencyPaymentRequest):
     try: