From 12bf0c93d17d191a7bb58cfa72f9f94ee2c4d2af Mon Sep 17 00:00:00 2001
From: Adam Soltys <asoltys@gmail.com>
Date: Wed, 15 Feb 2023 19:58:29 -0800
Subject: messages endpoint

---
 routes/payments.js | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

(limited to 'routes/payments.js')

diff --git a/routes/payments.js b/routes/payments.js
index 60e3bdd2..6619c031 100644
--- a/routes/payments.js
+++ b/routes/payments.js
@@ -253,4 +253,34 @@ export default {
 
     res.send({ txid });
   },
+
+  async buy({ body: { amount, number, month, year, cvc } }, res) {
+    let stripe = "https://api.stripe.com/v1";
+    let { STRIPE: username } = process.env;
+
+    let { id: source } = await got.post(`${stripe}/tokens`, {
+      form: {
+        "card[number]": number,
+        "card[exp_month]": month,
+        "card[exp_year]": year,
+        "card[cvc]": cvc
+      },
+      username
+    });
+
+    let { status } = await got.post(`${stripe}/charges`, {
+      form: {
+        amount,
+        currency: "cad",
+        source,
+        description: "starter coupon"
+      },
+      username
+    });
+
+    if (status !== "succeeded")
+      throw error(500, { message: "Card payment failed" });
+
+    res.send(status);
+  }
 };
-- 
cgit v1.2.3