cccb3123ed
- Add Redis-based sliding window rate limiting on login, register, forgot-password, reset-password - Fix user enumeration: register returns generic 200 for both new and existing emails - Add Redis authentication (requirepass) and password in .env - Docker network isolation: postgres/redis on internal-only network - Whitelist Stripe redirect origins (prevent open redirect) - Add 10MB request size limit on trace ingestion - Limit API keys to 10 per user - Add CORS headers via middleware (whitelist agentlens.vectry.tech + localhost) - Reduce JWT max age from 30 days to 7 days
48 lines
1.4 KiB
TypeScript
48 lines
1.4 KiB
TypeScript
import { NextResponse } from "next/server";
|
|
import { auth } from "@/auth";
|
|
import { prisma } from "@/lib/prisma";
|
|
import { getStripe } from "@/lib/stripe";
|
|
|
|
export async function POST(request: Request) {
|
|
try {
|
|
const session = await auth();
|
|
if (!session?.user?.id) {
|
|
return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
|
|
}
|
|
|
|
const subscription = await prisma.subscription.findUnique({
|
|
where: { userId: session.user.id },
|
|
select: { stripeCustomerId: true },
|
|
});
|
|
|
|
if (!subscription?.stripeCustomerId) {
|
|
return NextResponse.json(
|
|
{ error: "No active subscription to manage" },
|
|
{ status: 400 }
|
|
);
|
|
}
|
|
|
|
const ALLOWED_ORIGINS = [
|
|
"https://agentlens.vectry.tech",
|
|
"http://localhost:3000",
|
|
];
|
|
const requestOrigin = request.headers.get("origin");
|
|
const origin = ALLOWED_ORIGINS.includes(requestOrigin ?? "")
|
|
? requestOrigin!
|
|
: "https://agentlens.vectry.tech";
|
|
|
|
const portalSession = await getStripe().billingPortal.sessions.create({
|
|
customer: subscription.stripeCustomerId,
|
|
return_url: `${origin}/dashboard/settings`,
|
|
});
|
|
|
|
return NextResponse.json({ url: portalSession.url }, { status: 200 });
|
|
} catch (error) {
|
|
console.error("Error creating portal session:", error);
|
|
return NextResponse.json(
|
|
{ error: "Internal server error" },
|
|
{ status: 500 }
|
|
);
|
|
}
|
|
}
|