Skip to main content

​
Endpoint

GET /api/polar/portal

​
Overview

Redirects the authenticated user to their Polar customer portal where they can manage their subscription, update payment methods, and view invoices.

​
Request

Requires authentication via Bearer token. User must have a DROP service entitlement with a Polar customer ID.

​
Response

307 redirect to Polar customer portal URL.

​
Implementation Details

​
Code Reference

export const GET = async (req: NextRequest) => {
  const corsResponse = handleCors(req)
  if (corsResponse) return corsResponse

  const blocked = await protectRoute(req, { requested: 2 })
  if (blocked) return blocked

  const auth = await requireAuth(req)
  if ('error' in auth) return auth.error
  
  const entitlement = await prisma.userServiceEntitlement.findUnique({
    where: {
      userId_service: {
        userId: auth.userId,
        service: 'DROP',
      },
    },
    select: { polarCustomerId: true },
  })

  if (!entitlement?.polarCustomerId) {
    return errorResponse('No Polar customer ID found. Please contact support.', 400, req.headers.get('origin'))
  }

  try {
    const response = await fetch(`https://api.polar.sh/v1/customers/${entitlement.polarCustomerId}`, {
      headers: {
        'Authorization': `Bearer ${process.env.POLAR_ACCESS_TOKEN}`,
        'Content-Type': 'application/json'
      }
    })
    
    if (!response.ok) {
      return errorResponse('Customer not found in Polar. Please contact support to resolve this issue.', 400, req.headers.get('origin'))
    }
  } catch (error) {
    return errorResponse('Failed to verify customer. Please contact support.', 500, req.headers.get('origin'))
  }

  const polarServer = process.env.POLAR_SERVER === 'sandbox' ? 'sandbox-' : ''
  const portalUrl = `https://${polarServer}polar.sh/portal/${entitlement.polarCustomerId}`

  return NextResponse.redirect(portalUrl, 307)
}

​
Status Codes

​
307
Temporary Redirect
Redirect to Polar portal
​
400
Bad Request
No Polar customer ID found or customer not found in Polar
​
401
Unauthorized
Missing or invalid authentication token
​
500
Internal Server Error
Failed to verify customer with Polar

​
Example Request

curl -X GET https://auth.nullpass.xyz/api/polar/portal \
  -H "Authorization: Bearer YOUR_TOKEN"

​
Portal Features

The Polar customer portal allows users to:
  • View subscription details
  • Update payment methods
  • View invoices and billing history
  • Cancel subscriptions
  • Update billing information

​
Environment Variables

​
POLAR_ACCESS_TOKEN
string
required
Polar API access token
​
POLAR_SERVER
string
default:"production"
Polar server: "sandbox" or "production". Affects portal URL.

​
Notes

  • Only works for DROP service
  • Requires existing Polar customer ID
  • Customer is verified with Polar before redirect
  • Portal URL depends on POLAR_SERVER environment variable