35 lines
1.2 KiB
TypeScript
35 lines
1.2 KiB
TypeScript
import { NextRequest, NextResponse } from "next/server";
|
|
import { db } from "@/lib/db";
|
|
import { getApiUser } from "@/lib/apiAuth";
|
|
import { requestPayment } from "@/lib/zarinpal";
|
|
|
|
export async function POST(req: NextRequest) {
|
|
const apiUser = await getApiUser(req);
|
|
if (!apiUser) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
|
|
|
|
const { packageId } = await req.json();
|
|
const userId = apiUser.id;
|
|
|
|
const pkg = await db.package.findUnique({ where: { id: packageId } });
|
|
if (!pkg || !pkg.isActive) return NextResponse.json({ error: "پکیج پیدا نشد" }, { status: 404 });
|
|
|
|
const callbackUrl = `${process.env.NEXTAUTH_URL}/api/payment/verify`;
|
|
|
|
const result = await requestPayment(pkg.price, `خرید ${pkg.name} - فانتزی جام جهانی`, callbackUrl);
|
|
|
|
if (!result.success) return NextResponse.json({ error: result.error }, { status: 400 });
|
|
|
|
// ذخیره پرداخت در دیتابیس
|
|
await db.payment.create({
|
|
data: {
|
|
userId,
|
|
packageId,
|
|
amount: pkg.price,
|
|
authority: result.authority,
|
|
status: "PENDING",
|
|
},
|
|
});
|
|
|
|
return NextResponse.json({ paymentUrl: result.paymentUrl });
|
|
}
|