Verificación de email antes de Stripe Checkout

npm install stripe

# .env
MAILBEAM_KEY=mb_live_xxxxxxxxxxxxxxxxxxxx
STRIPE_SECRET_KEY=sk_test_xxxxxxxxxxxxxxxxxxxx

// server/routes/checkout.ts
import Stripe from "stripe";
import { Router } from "express";
// Todavía no hay SDK: este es el envoltorio de 12 líneas de /docs/quickstart.
import { verifyEmail } from "./lib/mailbeam";

const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!);
const router = Router();

router.post("/api/checkout/create-session", async (req, res) => {
  const { email, priceId } = req.body;

  if (!email || !priceId) {
    return res.status(400).json({ error: "email y priceId son obligatorios" });
  }

  // Paso 1: verifica el email antes de tocar Stripe
  try {
    const { valid, score, reason } = await verifyEmail(email);

    if (!valid || score < 60) {
      return res.status(422).json({
        error:
          reason === "disposable_domain"
            ? "Usa una dirección de email permanente para completar la compra."
            : "Escribe una dirección de email válida.",
        code: reason,
      });
    }
  } catch {
    // Falla en abierto: no bloquees un pago por un error de Mailbeam
    console.error("[Mailbeam] ha fallado la verificación, seguimos con el checkout");
  }

  // Paso 2: crea o recupera el Customer de Stripe
  let customerId: string;

  const existingCustomers = await stripe.customers.list({
    email,
    limit: 1,
  });

  if (existingCustomers.data.length > 0) {
    customerId = existingCustomers.data[0].id;
  } else {
    const customer = await stripe.customers.create({ email });
    customerId = customer.id;
  }

  // Paso 3: crea la Checkout Session
  const session = await stripe.checkout.sessions.create({
    customer: customerId,
    payment_method_types: ["card"],
    line_items: [{ price: priceId, quantity: 1 }],
    mode: "subscription",
    success_url: `${req.headers.origin}/success?session_id={CHECKOUT_SESSION_ID}`,
    cancel_url: `${req.headers.origin}/pricing`,
  });

  res.json({ url: session.url });
});

export default router;

// components/CheckoutButton.tsx
"use client";

import { useState } from "react";

export function CheckoutButton({ email, priceId }: { email: string; priceId: string }) {
  const [error, setError] = useState<string | null>(null);
  const [loading, setLoading] = useState(false);

  async function handleCheckout() {
    setLoading(true);
    setError(null);

    const res = await fetch("/api/checkout/create-session", {
      method: "POST",
      headers: { "Content-Type": "application/json" },
      body: JSON.stringify({ email, priceId }),
    });

    const data = await res.json();

    if (!res.ok) {
      setError(data.error);
      setLoading(false);
      return;
    }

    // Redirige a Stripe Checkout
    window.location.href = data.url;
  }

  return (
    <div>
      {error && (
        <p className="mb-3 text-sm text-destructive" role="alert">{error}</p>
      )}
      <button
        onClick={handleCheckout}
        disabled={loading}
        className="rounded-lg bg-primary px-4 py-2 text-sm font-medium text-primary-foreground disabled:opacity-60"
      >
        {loading ? "Redirigiendo…" : "Suscribirse →"}
      </button>
    </div>
  );
}