Polar Portal

GET /api/polar/portal

export const GET = async (req: NextRequest) => {
  const corsResponse = handleCors(req)
  if (corsResponse) return corsResponse

  const blocked = await protectRoute(req, { requested: 2 })
  if (blocked) return blocked

  const auth = await requireAuth(req)
  if ('error' in auth) return auth.error
  
  const entitlement = await prisma.userServiceEntitlement.findUnique({
    where: {
      userId_service: {
        userId: auth.userId,
        service: 'DROP',
      },
    },
    select: { polarCustomerId: true },
  })

  if (!entitlement?.polarCustomerId) {
    return errorResponse('No Polar customer ID found. Please contact support.', 400, req.headers.get('origin'))
  }

  try {
    const response = await fetch(`https://api.polar.sh/v1/customers/${entitlement.polarCustomerId}`, {
      headers: {
        'Authorization': `Bearer ${process.env.POLAR_ACCESS_TOKEN}`,
        'Content-Type': 'application/json'
      }
    })
    
    if (!response.ok) {
      return errorResponse('Customer not found in Polar. Please contact support to resolve this issue.', 400, req.headers.get('origin'))
    }
  } catch (error) {
    return errorResponse('Failed to verify customer. Please contact support.', 500, req.headers.get('origin'))
  }

  const polarServer = process.env.POLAR_SERVER === 'sandbox' ? 'sandbox-' : ''
  const portalUrl = `https://${polarServer}polar.sh/portal/${entitlement.polarCustomerId}`

  return NextResponse.redirect(portalUrl, 307)
}

curl -X GET https://auth.nullpass.xyz/api/polar/portal \
  -H "Authorization: Bearer YOUR_TOKEN"