fix: match payer email with registered email (#1552)

Connect the payer session with the currently logged in user.

src/controllers/StripeController/StripeController.ts

@@ -0,0 +1,49 @@
+import express from 'express';
+import { getIndexFileContents } from '../IndexController/getIndexFileContents';
+import { getDatabase } from '../../data_layer';
+import { useDefaultEmailService } from '../../services/EmailService/EmailService';
+import UsersRepository from '../../data_layer/UsersRepository';
+import UsersService from '../../services/UsersService';
+import TokenRepository from '../../data_layer/TokenRepository';
+import AuthenticationService from '../../services/AuthenticationService';
+import { getStripe } from '../../lib/integrations/stripe';
+import { extractTokenFromCookies } from './extractTokenFromCookies';
+
+export class StripeController {
+  async getSuccessfulCheckout(req: express.Request, res: express.Response) {
+    const cookies = req.get('cookie');
+    const token = extractTokenFromCookies(cookies);
+
+    if (!token) {
+      return res.send(getIndexFileContents());
+    }
+
+    const database = getDatabase();
+    const emailService = useDefaultEmailService();
+    const userRepository = new UsersRepository(database);
+    const usersService = new UsersService(userRepository, emailService);
+    const tokenRepository = new TokenRepository(database);
+    const authService = new AuthenticationService(
+      tokenRepository,
+      userRepository
+    );
+
+    const loggedInUser = await authService.getUserFrom(token);
+    const sessionId = req.query.session_id as string;
+
+    if (loggedInUser && sessionId) {
+      const stripe = getStripe();
+      const session = await stripe.checkout.sessions.retrieve(sessionId);
+      const email = session.customer_email;
+
+      if (loggedInUser.email !== email && email) {
+        await usersService.updateSubScriptionEmailUsingPrimaryEmail(
+          email.toLowerCase(),
+          loggedInUser.email.toLowerCase()
+        );
+      }
+    }
+
+    res.send(getIndexFileContents());
+  }
+}

src/controllers/StripeController/extractTokenFromCookies.ts

@@ -0,0 +1,13 @@
+export function extractTokenFromCookies(
+  cookies: string | undefined
+): string | null {
+  if (!cookies) {
+    return null;
+  }
+
+  const cookiesArray = cookies.split('; ');
+  const tokenCookie = cookiesArray.find((cookie) =>
+    cookie.startsWith('token=')
+  );
+  return tokenCookie ? tokenCookie.split('=')[1] : null;
+}

src/data_layer/UsersRepository.ts

@@ -68,15 +68,19 @@ class UsersRepository {
     ]);
   }
 
-  async updateSubscriptionLinkedEmail(owner: string, email: string) {
+  async linkCurrentUserWithEmail(owner: string, email: string) {
     const user = await this.database(this.table).where({ id: owner }).first();
     if (!user) {
       return null;
     }
 
+    return this.updateSubScriptionEmailUsingPrimaryEmail(user.email, email);
+  }
+
+  updateSubScriptionEmailUsingPrimaryEmail(email: string, newEmail: string) {
     return this.database('subscriptions')
-      .where({ email: user.email })
-      .update({ linked_email: email.toLowerCase() });
+      .where({ email: email.toLowerCase() })
+      .update({ linked_email: newEmail.toLowerCase() });
   }
 
   async getSubscriptionLinkedEmail(owner: string) {
@@ -86,7 +90,7 @@ class UsersRepository {
     }
 
     const subscription: Subscriptions = await this.database('subscriptions')
-      .where({ email: user.email })
+      .where({ email: user.email.toLowerCase() })
       .select('linked_email')
       .first();
     return subscription?.linked_email;

src/routes/WebhookRouter.ts

@@ -7,9 +7,11 @@ import {
   updateStoreSubscription,
 } from '../lib/integrations/stripe';
 import { getDatabase } from '../data_layer';
+import { StripeController } from '../controllers/StripeController/StripeController';
 
 const WebhooksRouter = () => {
   const router = express.Router();
+  const controller = new StripeController();
 
   router.post(
     '/webhook',
@@ -73,6 +75,10 @@ const WebhooksRouter = () => {
       response.send();
     }
   );
+
+  router.get('/successful-checkout', (req, res) =>
+    controller.getSuccessfulCheckout(req, res)
+  );
   return router;
 };
 

src/services/AuthenticationService.ts

@@ -120,7 +120,7 @@ class AuthenticationService {
   async getIsSubscriber(owner: string, db: Knex, email: string) {
     const linkedEmail = await db('subscriptions')
       .select('active')
-      .where({ linked_email: email })
+      .where({ linked_email: email.toLowerCase() })
       .first();
 
     if (linkedEmail) {
@@ -129,7 +129,7 @@ class AuthenticationService {
 
     const result = await db('subscriptions')
       .select('active')
-      .where({ email: email })
+      .where({ email: email.toLowerCase() })
       .first();
 
     return result?.active ?? false;

src/services/UsersService.ts

@@ -50,7 +50,14 @@ class UsersService {
   }
 
   updateSubscriptionLinkedEmail(owner: string, email: string) {
-    return this.repository.updateSubscriptionLinkedEmail(owner, email);
+    return this.repository.linkCurrentUserWithEmail(owner, email);
+  }
+
+  updateSubScriptionEmailUsingPrimaryEmail(email: string, newEmail: string) {
+    return this.repository.updateSubScriptionEmailUsingPrimaryEmail(
+      email,
+      newEmail
+    );
   }
 
   getSubscriptionLinkedEmail(owner: string) {