@cocalc/server/licenses/purchase/index.ts

CoCalc server functionality: functions used by either the hub and the next.js server

/*
 *  This file is part of CoCalc: Copyright © 2020 Sagemath, Inc.
 *  License: AGPLv3 s.t. "Commons Clause" – see LICENSE.md for details
 */

/*
Handle purchasing a licenses by customers. This is the server side of
   @cocalc/frontend/site-licenses/purchase/

What this does:

- stores the request object in a table in the database
- if the request is for a quote, sends an email
- if the request is to make a purchase, makes that purchase and creates the license
*/

import { db } from "@cocalc/database";
import getPool from "@cocalc/database/pool";
import { sanity_checks } from "@cocalc/util/licenses/purchase/sanity-checks";
import { chargeUserForLicense, setPurchaseMetadata } from "./charge";
import createLicense from "./create-license";
import { StripeClient } from "@cocalc/server/stripe/client";
import { callback2 } from "@cocalc/util/async-utils";
import { delay } from "awaiting";
import { getLogger } from "@cocalc/backend/logger";
import { PurchaseInfo } from "@cocalc/util/licenses/purchase/types";
const logger = getLogger("purchase-license");

// Does what should be done, and returns the license_id of the license that was created
// and has user added to as a manager.

// We don't allow a user to attempt a purchase more than once every THROTTLE_S seconds.
// This is just standard good practice, and avoids "double clicks" and probably some
// sort of attacks...
const THROTTLE_S = 15;
const last_attempt: { [account_id: string]: number } = {};

export default async function purchaseLicense(
  account_id: string,
  info: PurchaseInfo,
  noThrottle?: boolean
): Promise<string> {
  logger.debug("purchase_license: info=", info, ", account_id=", account_id);

  if (!noThrottle) {
    const now = Date.now();
    if (now - (last_attempt[account_id] ?? 0) <= THROTTLE_S * 1000) {
      throw Error(
        "You must wait at least " +
          THROTTLE_S.toString() +
          " seconds between license purchases."
      );
    }
    last_attempt[account_id] = now;
  }

  logger.debug("purchase_license: running sanity checks...");
  await sanity_checks(getPool(), info);

  logger.debug("purchase_license: charging user for license...");
  const stripe = new StripeClient({ account_id });
  const purchase = await chargeUserForLicense(stripe, info);

  logger.debug("purchase_license: creating the license...");
  const database = db();
  const license_id = await createLicense(database, account_id, info);

  logger.debug("purchase_license: set metadata on purchase...");
  await setPurchaseMetadata(purchase, { license_id, account_id });

  // We have to try a few times, since the metadata sometimes doesn't appear
  // when querying stripe for the customer, even after it was written in the
  // above line.  Also, this gives the credit card a first chance to work.
  // This is ONLY for subscriptions.
  if (info.subscription != "no") {
    let done = false;
    let delay_s = 1;
    for (let i = 0; i < 20; i++) {
      const customer = await callback2(database.stripe_update_customer, {
        account_id,
      });
      const data = customer?.subscriptions?.data;
      if (data != null) {
        for (const sub of data) {
          if (
            sub.metadata?.license_id == license_id &&
            sub.status == "active"
          ) {
            // metadata is set and status is active -- yes
            done = true;
            break;
          }
        }
      }
      if (done) {
        logger.debug(
          "purchase_license: successfully verified metadata properly set and sub is active..."
        );
        break;
      } else {
        logger.debug(
          "purchase_license: trying again to verify metadata properly set and sub is active..."
        );
      }
      await delay(delay_s * 1000);
      delay_s *= 1.1;
    }
    // Sets the license expire date if the subscription is NOT
    // active at this point (e.g., due to credit card failure).
    await database.sync_site_license_subscriptions(account_id);
  }

  return license_id;
}