Verifica delle email prima di Stripe Checkout

npm install stripe

# .env
MAILBEAM_KEY=mb_live_xxxxxxxxxxxxxxxxxxxx
STRIPE_SECRET_KEY=sk_test_xxxxxxxxxxxxxxxxxxxx

// server/routes/checkout.ts
import Stripe from "stripe";
import { Router } from "express";
// Non ci sono ancora SDK: questo è il wrapper di 12 righe di /docs/quickstart.
import { verifyEmail } from "./lib/mailbeam";

const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!);
const router = Router();

router.post("/api/checkout/create-session", async (req, res) => {
  const { email, priceId } = req.body;

  if (!email || !priceId) {
    return res.status(400).json({ error: "email e priceId sono obbligatori" });
  }

  // Passo 1: verifica l'email prima di toccare Stripe
  try {
    const { valid, score, reason } = await verifyEmail(email);

    if (!valid || score < 60) {
      return res.status(422).json({
        error:
          reason === "disposable_domain"
            ? "Usa un indirizzo email permanente per completare l'acquisto."
            : "Inserisci un indirizzo email valido.",
        code: reason,
      });
    }
  } catch {
    // Lascia passare: non bloccare un pagamento per un errore di Mailbeam
    console.error("[Mailbeam] verifica fallita, proseguiamo con il checkout");
  }

  // Passo 2: crea o recupera il Customer di Stripe
  let customerId: string;

  const existingCustomers = await stripe.customers.list({
    email,
    limit: 1,
  });

  if (existingCustomers.data.length > 0) {
    customerId = existingCustomers.data[0].id;
  } else {
    const customer = await stripe.customers.create({ email });
    customerId = customer.id;
  }

  // Passo 3: crea la Checkout Session
  const session = await stripe.checkout.sessions.create({
    customer: customerId,
    payment_method_types: ["card"],
    line_items: [{ price: priceId, quantity: 1 }],
    mode: "subscription",
    success_url: `${req.headers.origin}/success?session_id={CHECKOUT_SESSION_ID}`,
    cancel_url: `${req.headers.origin}/pricing`,
  });

  res.json({ url: session.url });
});

export default router;

// components/CheckoutButton.tsx
"use client";

import { useState } from "react";

export function CheckoutButton({ email, priceId }: { email: string; priceId: string }) {
  const [error, setError] = useState<string | null>(null);
  const [loading, setLoading] = useState(false);

  async function handleCheckout() {
    setLoading(true);
    setError(null);

    const res = await fetch("/api/checkout/create-session", {
      method: "POST",
      headers: { "Content-Type": "application/json" },
      body: JSON.stringify({ email, priceId }),
    });

    const data = await res.json();

    if (!res.ok) {
      setError(data.error);
      setLoading(false);
      return;
    }

    // Reindirizza a Stripe Checkout
    window.location.href = data.url;
  }

  return (
    <div>
      {error && (
        <p className="mb-3 text-sm text-destructive" role="alert">{error}</p>
      )}
      <button
        onClick={handleCheckout}
        disabled={loading}
        className="rounded-lg bg-primary px-4 py-2 text-sm font-medium text-primary-foreground disabled:opacity-60"
      >
        {loading ? "Reindirizzamento…" : "Abbonati →"}
      </button>
    </div>
  );
}