✨ Add Stripe sources endpoints

src/config/configuration.interface.ts

@@ -1,3 +1,5 @@
+import Stripe from 'stripe';
+
 export interface Configuration {
   frontendUrl: string;
 
@@ -41,5 +43,8 @@ export interface Configuration {
   payments: {
     stripeApiKey: string;
     stripeProductId: string;
+    paymentMethodTypes: Array<
+      Stripe.Checkout.SessionCreateParams.PaymentMethodType
+    >;
   };
 }

src/config/configuration.ts

@@ -44,6 +44,7 @@ const configuration: Configuration = {
   payments: {
     stripeApiKey: process.env.STRIPE_API_KEY ?? '',
     stripeProductId: process.env.STRIPE_PRODUCT_ID ?? '',
+    paymentMethodTypes: ['card'],
   },
 };
 

src/modules/stripe/stripe-sources.controller.ts

@@ -0,0 +1,55 @@
+import {
+  Controller,
+  Delete,
+  Get,
+  Param,
+  ParseIntPipe,
+  Post,
+  Query,
+} from '@nestjs/common';
+import Stripe from 'stripe';
+import { CursorPipe } from '../../pipes/cursor.pipe';
+import { OptionalIntPipe } from '../../pipes/optional-int.pipe';
+import { Scopes } from '../auth/scope.decorator';
+import { StripeService } from './stripe.service';
+
+@Controller('groups/:groupId/sources')
+export class StripeBillingController {
+  constructor(private stripeService: StripeService) {}
+
+  @Post()
+  @Scopes('group-{groupId}:write-source')
+  async create(
+    @Param('groupId', ParseIntPipe) groupId: number,
+  ): Promise<Stripe.Checkout.Session> {
+    return this.stripeService.createSession(groupId, 'setup');
+  }
+
+  @Get()
+  @Scopes('group-{groupId}:read-source')
+  async getAll(
+    @Param('groupId', ParseIntPipe) groupId: number,
+    @Query('take', OptionalIntPipe) take?: number,
+    @Query('cursor', CursorPipe) cursor?: { id: string },
+  ): Promise<Stripe.CustomerSource[]> {
+    return this.stripeService.getSources(groupId, { take, cursor });
+  }
+
+  @Get(':id')
+  @Scopes('group-{groupId}:read-source-{id}')
+  async get(
+    @Param('groupId', ParseIntPipe) groupId: number,
+    @Param('id') id: string,
+  ): Promise<Stripe.Source> {
+    return this.stripeService.getSource(groupId, id);
+  }
+
+  @Delete(':id')
+  @Scopes('group-{groupId}:delete-source-{id}')
+  async remove(
+    @Param('groupId', ParseIntPipe) groupId: number,
+    @Param('id') id: string,
+  ): Promise<void> {
+    return this.stripeService.deleteSource(groupId, id);
+  }
+}

src/modules/stripe/stripe.service.ts

@@ -94,6 +94,54 @@ export class StripeService {
     return result;
   }
 
+  async getSources(
+    groupId: number,
+    params: {
+      take?: number;
+      cursor?: { id: string };
+    },
+  ): Promise<Stripe.CustomerSource[]> {
+    const stripeId = await this.stripeId(groupId);
+    const result = await this.stripe.customers.listSources(stripeId, {
+      limit: params.take,
+      starting_after: params.cursor?.id,
+    });
+    return this.list<Stripe.CustomerSource>(result);
+  }
+
+  async getSource(groupId: number, sourceId: string): Promise<Stripe.Source> {
+    const stripeId = await this.stripeId(groupId);
+    const result = await this.stripe.sources.retrieve(sourceId);
+    if (result.customer !== stripeId)
+      throw new NotFoundException('Source not found');
+    return result;
+  }
+
+  async deleteSource(groupId: number, sourceId: string): Promise<void> {
+    const stripeId = await this.stripeId(groupId);
+    const result = await this.stripe.sources.retrieve(sourceId);
+    if (result.customer !== stripeId)
+      throw new NotFoundException('Source not found');
+    await this.stripe.customers.deleteSource(stripeId, sourceId);
+  }
+
+  async createSession(
+    groupId: number,
+    mode: Stripe.Checkout.SessionCreateParams.Mode,
+  ): Promise<Stripe.Checkout.Session> {
+    const stripeId = await this.stripeId(groupId);
+    const result = await this.stripe.checkout.sessions.create({
+      customer: stripeId,
+      mode,
+      payment_method_types: this.configService.get<
+        Array<Stripe.Checkout.SessionCreateParams.PaymentMethodType>
+      >('payments.paymentMethodTypes') ?? ['card'],
+      success_url: '',
+      cancel_url: '',
+    });
+    return result;
+  }
+
   private list<T>(result: Stripe.Response<Stripe.ApiList<T>>) {
     return result.data;
   }