move validation to apiadmin

Author: howardchung

routes/keyManagement.ts

@@ -245,12 +245,6 @@ keys
         return res.status(402).json(err);
       }
     }
-    // Validate the payment source
-    const card = await stripe.sources.retrieve(token.id);
-    const BANNED_CARDS: string[] = [];
-    if (BANNED_CARDS.includes(card.card?.fingerprint ?? '')) {
-      return res.status(402).json({ error: 'This card is not allowed' });
-    }
 
     const apiKey = uuid.v4();
     const sub = await stripe.subscriptions.create({

svc/apiadmin.ts

@@ -107,6 +107,18 @@ async function updateStripeUsage(cb: ErrorCb) {
         );
         continue;
       }
+      // Deactivate any keys belonging to an invalid card
+      const BANNED_CARDS: string[] = [];
+      const sourceId = sub.default_source;
+      if (sourceId) {
+        const source = await stripe.sources.retrieve(sourceId as string);
+        if (source.card?.fingerprint && BANNED_CARDS.includes(source.card?.fingerprint)) {
+          await db.raw(
+            `UPDATE api_keys SET is_canceled = true WHERE subscription_id = ?`,
+            [sub.id]
+          );
+        }
+      }
       const startTime = moment
         .unix(sub.current_period_end - 1)
         .startOf('month');