feat: implement "create admin session" capability

billing/utils/stripe.js

@@ -6,6 +6,15 @@ import * as DidMailto from '@web3-storage/did-mailto'
  * @typedef {import('stripe').Stripe.CustomerSubscriptionCreatedEvent} CustomerSubscriptionCreatedEvent
  */
 
+/**
+ * 
+ * @param {string} stripeID 
+ * @returns {AccountID}
+ */
+export function stripeIDToAccountID(stripeID) {
+  return /** @type {AccountID} */(`stripe:${stripeID}`)
+}
+
 /**
  *
  * @param {Stripe} stripe
@@ -21,7 +30,7 @@ export async function handleCustomerSubscriptionCreated(stripe, event, customerS
     return { error: new Error(`Invalid product: ${product}`) }
   }
 
-  const account = /** @type {AccountID} */ (`stripe:${customerId}`)
+  const account = stripeIDToAccountID(customerId)
   const stripeCustomer = await stripe.customers.retrieve(customerId)
   if (stripeCustomer.deleted) {
     return {

upload-api/billing.js

@@ -35,10 +35,11 @@ export class BillingProviderUpdateError extends Failure {
 
 /**
  * 
- * @param {import('stripe').Stripe} stripe 
+ * @param {import('stripe').Stripe} stripe
+ * @param {import("@web3-storage/w3infra-billing/lib/api").CustomerStore} customerStore
  * @returns {import("./types").BillingProvider}
  */
-export function createStripeBillingProvider(stripe) {
+export function createStripeBillingProvider(stripe, customerStore) {
   return {
     async hasCustomer(customer) {
       const customersResponse = await stripe.customers.list({ email: toEmail(/** @type {import('@web3-storage/did-mailto').DidMailto} */(customer)) })
@@ -84,6 +85,29 @@ export function createStripeBillingProvider(stripe) {
       } catch (/** @type {any} */ err) {
         return { error: new BillingProviderUpdateError(err.message, { cause: err }) }
       }
+    },
+
+    async createAdminSession(account, returnURL) {
+      const response = await customerStore.get({ customer: account })
+      if (response.error) {
+        return {
+          error: {
+            name: 'CustomerNotFound',
+            message: 'Error getting customer',
+            cause: response.error
+          }
+        }
+      }
+      const customer = response.ok.account.slice('stripe:'.length)
+      const session = await stripe.billingPortal.sessions.create({
+        customer,
+        return_url: returnURL
+      })
+      return {
+        ok: {
+          url: session.url
+        }
+      }
     }
   }
 }

upload-api/functions/ucan-invocation-router.js

@@ -186,7 +186,7 @@ export async function ucanInvocationRouter(request) {
   const customerStore = createCustomerStore({ region: AWS_REGION }, { tableName: customerTableName })
   if (!STRIPE_SECRET_KEY) throw new Error('missing secret: STRIPE_SECRET_KEY')
   const stripe = new Stripe(STRIPE_SECRET_KEY, { apiVersion: '2023-10-16' })
-  const plansStorage = usePlansStore(customerStore, createStripeBillingProvider(stripe))
+  const plansStorage = usePlansStore(customerStore, createStripeBillingProvider(stripe, customerStore))
   const rateLimitsStorage = createRateLimitTable(AWS_REGION, rateLimitTableName)
   const spaceMetricsTable = createSpaceMetricsTable(AWS_REGION, spaceMetricsTableName)
 

upload-api/stores/plans.js

@@ -90,8 +90,6 @@ export function usePlansStore(customerStore, billingProvider) {
       return { ok: {} }
     },
 
-    createAdminSession: (account, returnURL) => {
-      throw new Error('not implemented')
-    }
+    createAdminSession: async (account, returnURL) => billingProvider.createAdminSession(account, returnURL)
   }
 }