buy page

1 files changed, 16 insertions, 8 deletions

diff --git a/src/routes/(app)/buy/+page.server.js b/src/routes/(app)/buy/+page.server.js
index e03d6c0a..8a88ed4e 100644
--- a/src/routes/(app)/buy/+page.server.js
+++ b/src/routes/(app)/buy/+page.server.js
@@ -1,5 +1,5 @@
 import { env } from '$env/dynamic/private';
-import { error, redirect } from '@sveltejs/kit';
+import { error, fail, redirect } from '@sveltejs/kit';
 import { post, auth } from '$lib/utils';
 import { createTicket } from '$lib/ticket';
 
@@ -7,13 +7,21 @@ export const actions = {
 	default: async ({ cookies, request }) => {
 		let form = await request.formData();
 
-		await post('/buy', {
-			number: form.get('number').replace(/\s+/g, ''),
-			month: form.get('expiry').slice(0, 2),
-			year: form.get('expiry').slice(-2),
-			cvc: form.get('cvc')
-		}, auth(cookies));
+		let amount = parseFloat(form.get('amount'));
+		if (!amount || amount < 0 || amount > 500) return fail(400, { message: 'Invalid amount' });
 
-		throw redirect(307, `/launch/thanks/${asset}`);
+		await post(
+			'/buy',
+			{
+        amount: form.get('amount'),
+				number: form.get('number').replace(/\s+/g, ''),
+				month: form.get('expiry').slice(0, 2),
+				year: form.get('expiry').slice(-2),
+				cvc: form.get('cvc')
+			},
+			auth(cookies)
+		);
+
+		throw redirect(307, `/${form.get('username')}/payments`);
 	}
 };