SubscriptionController.js 26 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896
  1. // @ts-check
  2. const SessionManager = require('../Authentication/SessionManager')
  3. const SubscriptionHandler = require('./SubscriptionHandler')
  4. const SubscriptionHelper = require('./SubscriptionHelper')
  5. const SubscriptionViewModelBuilder = require('./SubscriptionViewModelBuilder')
  6. const LimitationsManager = require('./LimitationsManager')
  7. const RecurlyWrapper = require('./RecurlyWrapper')
  8. const Settings = require('@overleaf/settings')
  9. const logger = require('@overleaf/logger')
  10. const GeoIpLookup = require('../../infrastructure/GeoIpLookup')
  11. const FeaturesUpdater = require('./FeaturesUpdater')
  12. const GroupPlansData = require('./GroupPlansData')
  13. const V1SubscriptionManager = require('./V1SubscriptionManager')
  14. const AnalyticsManager = require('../Analytics/AnalyticsManager')
  15. const RecurlyEventHandler = require('./RecurlyEventHandler')
  16. const { expressify } = require('@overleaf/promise-utils')
  17. const OError = require('@overleaf/o-error')
  18. const {
  19. DuplicateAddOnError,
  20. AddOnNotPresentError,
  21. PaymentActionRequiredError,
  22. } = require('./Errors')
  23. const SplitTestHandler = require('../SplitTests/SplitTestHandler')
  24. const AuthorizationManager = require('../Authorization/AuthorizationManager')
  25. const Modules = require('../../infrastructure/Modules')
  26. const async = require('async')
  27. const HttpErrorHandler = require('../Errors/HttpErrorHandler')
  28. const RecurlyClient = require('./RecurlyClient')
  29. const { AI_ADD_ON_CODE } = require('./PaymentProviderEntities')
  30. const PlansLocator = require('./PlansLocator')
  31. const PaymentProviderEntities = require('./PaymentProviderEntities')
  32. const { User } = require('../../models/User')
  33. const UserGetter = require('../User/UserGetter')
  34. const PermissionsManager = require('../Authorization/PermissionsManager')
  35. const {
  36. sanitizeSessionUserForFrontEnd,
  37. } = require('../../infrastructure/FrontEndUser')
  38. const { IndeterminateInvoiceError } = require('../Errors/Errors')
  39. /**
  40. * @import { SubscriptionChangeDescription } from '../../../../types/subscription/subscription-change-preview'
  41. * @import { SubscriptionChangePreview } from '../../../../types/subscription/subscription-change-preview'
  42. * @import { PaymentProviderSubscriptionChange } from './PaymentProviderEntities'
  43. * @import { PaymentMethod } from './types'
  44. */
  45. const groupPlanModalOptions = Settings.groupPlanModalOptions
  46. function formatGroupPlansDataForDash() {
  47. return {
  48. plans: [...groupPlanModalOptions.plan_codes],
  49. sizes: [...groupPlanModalOptions.sizes],
  50. usages: [...groupPlanModalOptions.usages],
  51. priceByUsageTypeAndSize: JSON.parse(JSON.stringify(GroupPlansData)),
  52. }
  53. }
  54. async function userSubscriptionPage(req, res) {
  55. const user = SessionManager.getSessionUser(req.session)
  56. await SplitTestHandler.promises.getAssignment(req, res, 'pause-subscription')
  57. const groupPricingDiscount = await SplitTestHandler.promises.getAssignment(
  58. req,
  59. res,
  60. 'group-discount-10'
  61. )
  62. const showGroupDiscount = groupPricingDiscount.variant === 'enabled'
  63. const results =
  64. await SubscriptionViewModelBuilder.promises.buildUsersSubscriptionViewModel(
  65. user,
  66. req.i18n.language
  67. )
  68. const {
  69. personalSubscription,
  70. memberGroupSubscriptions,
  71. managedGroupSubscriptions,
  72. currentInstitutionsWithLicence,
  73. managedInstitutions,
  74. managedPublishers,
  75. } = results
  76. const { hasSubscription } =
  77. await LimitationsManager.promises.userHasSubscription(user)
  78. const userCanExtendTrial = (
  79. await Modules.promises.hooks.fire('userCanExtendTrial', user)
  80. )?.[0]
  81. const fromPlansPage = req.query.hasSubscription
  82. const isInTrial = SubscriptionHelper.isInTrial(
  83. personalSubscription?.payment?.trialEndsAt
  84. )
  85. const plansData =
  86. SubscriptionViewModelBuilder.buildPlansListForSubscriptionDash(
  87. personalSubscription?.plan,
  88. isInTrial
  89. )
  90. AnalyticsManager.recordEventForSession(req.session, 'subscription-page-view')
  91. const groupPlansDataForDash = formatGroupPlansDataForDash()
  92. // display the Group settings button only to admins of group subscriptions with either/or the Managed Users or Group SSO feature available
  93. let groupSettingsEnabledFor
  94. try {
  95. const managedGroups = await async.filter(
  96. managedGroupSubscriptions || [],
  97. async subscription => {
  98. const managedUsersResults = await Modules.promises.hooks.fire(
  99. 'hasManagedUsersFeature',
  100. subscription
  101. )
  102. const groupSSOResults = await Modules.promises.hooks.fire(
  103. 'hasGroupSSOFeature',
  104. subscription
  105. )
  106. const isGroupAdmin =
  107. (subscription.admin_id._id || subscription.admin_id).toString() ===
  108. user._id.toString()
  109. return (
  110. (managedUsersResults?.[0] === true ||
  111. groupSSOResults?.[0] === true) &&
  112. isGroupAdmin
  113. )
  114. }
  115. )
  116. groupSettingsEnabledFor = managedGroups.map(subscription =>
  117. subscription._id.toString()
  118. )
  119. } catch (error) {
  120. logger.error(
  121. { err: error },
  122. 'Failed to list groups with group settings enabled'
  123. )
  124. }
  125. let groupSettingsAdvertisedFor
  126. try {
  127. const managedGroups = await async.filter(
  128. managedGroupSubscriptions || [],
  129. async subscription => {
  130. const managedUsersResults = await Modules.promises.hooks.fire(
  131. 'hasManagedUsersFeatureOnNonProfessionalPlan',
  132. subscription
  133. )
  134. const groupSSOResults = await Modules.promises.hooks.fire(
  135. 'hasGroupSSOFeatureOnNonProfessionalPlan',
  136. subscription
  137. )
  138. const isGroupAdmin =
  139. (subscription.admin_id._id || subscription.admin_id).toString() ===
  140. user._id.toString()
  141. const plan = PlansLocator.findLocalPlanInSettings(subscription.planCode)
  142. return (
  143. (managedUsersResults?.[0] === true ||
  144. groupSSOResults?.[0] === true) &&
  145. isGroupAdmin &&
  146. plan?.canUseFlexibleLicensing
  147. )
  148. }
  149. )
  150. groupSettingsAdvertisedFor = managedGroups.map(subscription =>
  151. subscription._id.toString()
  152. )
  153. } catch (error) {
  154. logger.error(
  155. { err: error },
  156. 'Failed to list groups with group settings enabled for advertising'
  157. )
  158. }
  159. const {
  160. isPremium: hasAiAssistViaWritefull,
  161. premiumSource: aiAssistViaWritefullSource,
  162. } = await UserGetter.promises.getWritefullData(user._id)
  163. const data = {
  164. title: 'your_subscription',
  165. plans: plansData?.plans,
  166. planCodesChangingAtTermEnd: plansData?.planCodesChangingAtTermEnd,
  167. user,
  168. hasSubscription,
  169. fromPlansPage,
  170. personalSubscription,
  171. userCanExtendTrial,
  172. memberGroupSubscriptions,
  173. managedGroupSubscriptions,
  174. managedInstitutions,
  175. managedPublishers,
  176. showGroupDiscount,
  177. currentInstitutionsWithLicence,
  178. canUseFlexibleLicensing:
  179. personalSubscription?.plan?.canUseFlexibleLicensing,
  180. groupPlans: groupPlansDataForDash,
  181. groupSettingsAdvertisedFor,
  182. groupSettingsEnabledFor,
  183. isManagedAccount: !!req.managedBy,
  184. userRestrictions: Array.from(req.userRestrictions || []),
  185. hasAiAssistViaWritefull,
  186. aiAssistViaWritefullSource,
  187. }
  188. res.render('subscriptions/dashboard-react', data)
  189. }
  190. async function successfulSubscription(req, res) {
  191. const user = SessionManager.getSessionUser(req.session)
  192. if (!user) {
  193. throw new Error('User is not logged in')
  194. }
  195. const { personalSubscription } =
  196. await SubscriptionViewModelBuilder.promises.buildUsersSubscriptionViewModel(
  197. user,
  198. req.i18n.language
  199. )
  200. const postCheckoutRedirect = req.session?.postCheckoutRedirect
  201. if (!personalSubscription) {
  202. res.redirect('/user/subscription/plans')
  203. } else {
  204. const userInDb = await User.findById(user._id, {
  205. _id: 1,
  206. features: 1,
  207. })
  208. if (!userInDb) {
  209. throw new Error('User not found')
  210. }
  211. res.render('subscriptions/successful-subscription-react', {
  212. title: 'thank_you',
  213. personalSubscription,
  214. postCheckoutRedirect,
  215. user: {
  216. _id: user._id,
  217. features: userInDb.features,
  218. },
  219. })
  220. }
  221. }
  222. async function pauseSubscription(req, res, next) {
  223. const user = SessionManager.getSessionUser(req.session)
  224. const pauseCycles = req.params.pauseCycles
  225. if (!('pauseCycles' in req.params)) {
  226. return HttpErrorHandler.badRequest(
  227. req,
  228. res,
  229. `Pausing subscription requires a 'pauseCycles' argument with number of billing cycles to pause for`
  230. )
  231. }
  232. if (pauseCycles < 0) {
  233. return HttpErrorHandler.badRequest(
  234. req,
  235. res,
  236. `'pauseCycles' should be a number of billing cycles to pause for, or 0 to cancel a pending pause`
  237. )
  238. }
  239. logger.debug(
  240. { userId: user._id },
  241. `pausing subscription for ${pauseCycles} billing cycles`
  242. )
  243. try {
  244. await SubscriptionHandler.promises.pauseSubscription(user, pauseCycles)
  245. const { subscription } =
  246. await LimitationsManager.promises.userHasSubscription(user)
  247. AnalyticsManager.recordEventForUserInBackground(
  248. user._id,
  249. 'subscription-pause-scheduled',
  250. {
  251. pause_length: pauseCycles,
  252. plan_code: subscription?.planCode,
  253. subscriptionId:
  254. SubscriptionHelper.getPaymentProviderSubscriptionId(subscription),
  255. }
  256. )
  257. return res.sendStatus(200)
  258. } catch (err) {
  259. if (err instanceof Error) {
  260. OError.tag(err, 'something went wrong pausing subscription', {
  261. user_id: user._id,
  262. })
  263. }
  264. return next(err)
  265. }
  266. }
  267. async function resumeSubscription(req, res, next) {
  268. const user = SessionManager.getSessionUser(req.session)
  269. logger.debug({ userId: user._id }, `resuming subscription`)
  270. try {
  271. await SubscriptionHandler.promises.resumeSubscription(user)
  272. return res.sendStatus(200)
  273. } catch (err) {
  274. if (err instanceof Error) {
  275. OError.tag(err, 'something went wrong resuming subscription', {
  276. user_id: user._id,
  277. })
  278. }
  279. return next(err)
  280. }
  281. }
  282. async function cancelSubscription(req, res, next) {
  283. const user = SessionManager.getSessionUser(req.session)
  284. logger.debug({ userId: user._id }, 'canceling subscription')
  285. try {
  286. await SubscriptionHandler.promises.cancelSubscription(user)
  287. return res.sendStatus(200)
  288. } catch (err) {
  289. OError.tag(err, 'something went wrong canceling subscription', {
  290. user_id: user._id,
  291. })
  292. return next(err)
  293. }
  294. }
  295. /**
  296. * @returns {Promise<void>}
  297. */
  298. async function canceledSubscription(req, res, next) {
  299. return res.render('subscriptions/canceled-subscription-react', {
  300. title: 'subscription_canceled',
  301. user: sanitizeSessionUserForFrontEnd(
  302. SessionManager.getSessionUser(req.session)
  303. ),
  304. })
  305. }
  306. function cancelV1Subscription(req, res, next) {
  307. const userId = SessionManager.getLoggedInUserId(req.session)
  308. logger.debug({ userId }, 'canceling v1 subscription')
  309. V1SubscriptionManager.cancelV1Subscription(userId, function (err) {
  310. if (err) {
  311. OError.tag(err, 'something went wrong canceling v1 subscription', {
  312. userId,
  313. })
  314. return next(err)
  315. }
  316. res.redirect('/user/subscription')
  317. })
  318. }
  319. async function previewAddonPurchase(req, res) {
  320. const user = SessionManager.getSessionUser(req.session)
  321. const userId = user._id
  322. const addOnCode = req.params.addOnCode
  323. const purchaseReferrer = req.query.purchaseReferrer
  324. if (addOnCode !== AI_ADD_ON_CODE) {
  325. return HttpErrorHandler.notFound(req, res, `Unknown add-on: ${addOnCode}`)
  326. }
  327. const canUseAi = await PermissionsManager.promises.checkUserPermissions(
  328. user,
  329. ['use-ai']
  330. )
  331. if (!canUseAi) {
  332. return res.redirect(
  333. '/user/subscription?redirect-reason=ai-assist-unavailable'
  334. )
  335. }
  336. /** @type {PaymentMethod[]} */
  337. const paymentMethod = await Modules.promises.hooks.fire(
  338. 'getPaymentMethod',
  339. userId
  340. )
  341. let subscriptionChange
  342. try {
  343. subscriptionChange =
  344. await SubscriptionHandler.promises.previewAddonPurchase(userId, addOnCode)
  345. const { isPremium: hasAiAssistViaWritefull } =
  346. await UserGetter.promises.getWritefullData(userId)
  347. const isAiUpgrade =
  348. PaymentProviderEntities.subscriptionChangeIsAiAssistUpgrade(
  349. subscriptionChange
  350. )
  351. if (hasAiAssistViaWritefull && isAiUpgrade) {
  352. return res.redirect(
  353. '/user/subscription?redirect-reason=writefull-entitled'
  354. )
  355. }
  356. } catch (err) {
  357. if (err instanceof DuplicateAddOnError) {
  358. return res.redirect('/user/subscription?redirect-reason=double-buy')
  359. }
  360. throw err
  361. }
  362. const subscription = subscriptionChange.subscription
  363. const addOn = await RecurlyClient.promises.getAddOn(
  364. subscription.planCode,
  365. addOnCode
  366. )
  367. /** @type {SubscriptionChangePreview} */
  368. const changePreview = makeChangePreview(
  369. {
  370. type: 'add-on-purchase',
  371. addOn: {
  372. code: addOn.code,
  373. name: addOn.name,
  374. },
  375. },
  376. subscriptionChange,
  377. paymentMethod[0]
  378. )
  379. await SplitTestHandler.promises.getAssignment(
  380. req,
  381. res,
  382. 'overleaf-assist-bundle'
  383. )
  384. res.render('subscriptions/preview-change', {
  385. changePreview,
  386. purchaseReferrer,
  387. })
  388. }
  389. async function purchaseAddon(req, res, next) {
  390. const user = SessionManager.getSessionUser(req.session)
  391. const addOnCode = req.params.addOnCode
  392. // currently we only support having a quantity of 1
  393. const quantity = 1
  394. // currently we only support one add-on, the Ai add-on
  395. if (addOnCode !== AI_ADD_ON_CODE) {
  396. return res.sendStatus(404)
  397. }
  398. logger.debug({ userId: user._id, addOnCode }, 'purchasing add-ons')
  399. try {
  400. await SubscriptionHandler.promises.purchaseAddon(
  401. user._id,
  402. addOnCode,
  403. quantity
  404. )
  405. } catch (err) {
  406. if (err instanceof DuplicateAddOnError) {
  407. HttpErrorHandler.badRequest(
  408. req,
  409. res,
  410. 'Your subscription already includes this add-on',
  411. { addon: addOnCode }
  412. )
  413. } else if (err instanceof PaymentActionRequiredError) {
  414. return res.status(402).json({
  415. message: 'Payment action required',
  416. clientSecret: err.info.clientSecret,
  417. publicKey: err.info.publicKey,
  418. })
  419. } else {
  420. if (err instanceof Error) {
  421. OError.tag(err, 'something went wrong purchasing add-ons', {
  422. user_id: user._id,
  423. addOnCode,
  424. })
  425. }
  426. return next(err)
  427. }
  428. }
  429. try {
  430. await FeaturesUpdater.promises.refreshFeatures(user._id, 'add-on-purchase')
  431. } catch (err) {
  432. logger.error({ err }, 'Failed to refresh features after add-on purchase')
  433. }
  434. return res.sendStatus(200)
  435. }
  436. async function removeAddon(req, res, next) {
  437. const user = SessionManager.getSessionUser(req.session)
  438. const addOnCode = req.params.addOnCode
  439. if (addOnCode !== AI_ADD_ON_CODE) {
  440. return res.sendStatus(404)
  441. }
  442. logger.debug({ userId: user._id, addOnCode }, 'removing add-ons')
  443. try {
  444. await SubscriptionHandler.promises.removeAddon(user._id, addOnCode)
  445. res.sendStatus(200)
  446. } catch (err) {
  447. if (err instanceof AddOnNotPresentError) {
  448. HttpErrorHandler.badRequest(
  449. req,
  450. res,
  451. 'Your subscription does not contain the requested add-on',
  452. { addon: addOnCode }
  453. )
  454. } else {
  455. if (err instanceof Error) {
  456. OError.tag(err, 'something went wrong removing add-ons', {
  457. user_id: user._id,
  458. addOnCode,
  459. })
  460. }
  461. return next(err)
  462. }
  463. }
  464. }
  465. async function previewSubscription(req, res, next) {
  466. const planCode = req.query.planCode
  467. if (!planCode) {
  468. return HttpErrorHandler.notFound(req, res, 'Missing plan code')
  469. }
  470. // TODO: use PaymentService to fetch plan information
  471. const plan = await RecurlyClient.promises.getPlan(planCode)
  472. const userId = SessionManager.getLoggedInUserId(req.session)
  473. const subscriptionChange =
  474. await SubscriptionHandler.promises.previewSubscriptionChange(
  475. userId,
  476. planCode
  477. )
  478. /** @type {PaymentMethod[]} */
  479. const paymentMethod = await Modules.promises.hooks.fire(
  480. 'getPaymentMethod',
  481. userId
  482. )
  483. const changePreview = makeChangePreview(
  484. {
  485. type: 'premium-subscription',
  486. plan: { code: plan.code, name: plan.name },
  487. },
  488. subscriptionChange,
  489. paymentMethod[0]
  490. )
  491. res.render('subscriptions/preview-change', { changePreview })
  492. }
  493. function cancelPendingSubscriptionChange(req, res, next) {
  494. const user = SessionManager.getSessionUser(req.session)
  495. logger.debug({ userId: user._id }, 'canceling pending subscription change')
  496. SubscriptionHandler.cancelPendingSubscriptionChange(user, function (err) {
  497. if (err) {
  498. OError.tag(
  499. err,
  500. 'something went wrong canceling pending subscription change',
  501. {
  502. user_id: user._id,
  503. }
  504. )
  505. return next(err)
  506. }
  507. res.redirect('/user/subscription')
  508. })
  509. }
  510. async function updateAccountEmailAddress(req, res, next) {
  511. const user = SessionManager.getSessionUser(req.session)
  512. try {
  513. await Modules.promises.hooks.fire(
  514. 'updateAccountEmailAddress',
  515. user._id,
  516. user.email
  517. )
  518. return res.sendStatus(200)
  519. } catch (error) {
  520. return next(error)
  521. }
  522. }
  523. function reactivateSubscription(req, res, next) {
  524. const user = SessionManager.getSessionUser(req.session)
  525. logger.debug({ userId: user._id }, 'reactivating subscription')
  526. try {
  527. if (req.isManagedGroupAdmin) {
  528. // allow admins to reactivate subscriptions
  529. } else {
  530. // otherwise require the user to have the reactivate-subscription permission
  531. req.assertPermission('reactivate-subscription')
  532. }
  533. } catch (error) {
  534. return next(error)
  535. }
  536. SubscriptionHandler.reactivateSubscription(user, function (err) {
  537. if (err) {
  538. OError.tag(err, 'something went wrong reactivating subscription', {
  539. user_id: user._id,
  540. })
  541. return next(err)
  542. }
  543. res.redirect('/user/subscription')
  544. })
  545. }
  546. function recurlyCallback(req, res, next) {
  547. logger.debug({ data: req.body }, 'received recurly callback')
  548. const event = Object.keys(req.body)[0]
  549. const eventData = req.body[event]
  550. RecurlyEventHandler.sendRecurlyAnalyticsEvent(event, eventData).catch(error =>
  551. logger.error(
  552. { err: error },
  553. 'Failed to process analytics event on Recurly webhook'
  554. )
  555. )
  556. // this is a recurly only case which is required since Recurly does not have a reliable way to check credit info pre-upgrade purchase
  557. if (event === 'failed_payment_notification') {
  558. if (!Settings.planReverts?.enabled) {
  559. return res.sendStatus(200)
  560. }
  561. SubscriptionHandler.getSubscriptionRestorePoint(
  562. eventData.transaction.subscription_id,
  563. function (err, lastSubscription) {
  564. if (err) {
  565. return next(err)
  566. }
  567. // if theres no restore point it could be a failed renewal, or no restore set. Either way it will be handled through dunning automatically
  568. if (!lastSubscription || !lastSubscription?.planCode) {
  569. return res.sendStatus(200)
  570. }
  571. SubscriptionHandler.revertPlanChange(
  572. eventData.transaction.subscription_id,
  573. lastSubscription,
  574. function (err) {
  575. if (err instanceof IndeterminateInvoiceError) {
  576. logger.warn(
  577. { recurlySubscriptionId: err.info.recurlySubscriptionId },
  578. 'could not determine invoice to fail for subscription'
  579. )
  580. return res.sendStatus(200)
  581. }
  582. if (err) {
  583. return next(err)
  584. }
  585. return res.sendStatus(200)
  586. }
  587. )
  588. }
  589. )
  590. } else if (
  591. [
  592. 'new_subscription_notification',
  593. 'updated_subscription_notification',
  594. 'expired_subscription_notification',
  595. 'subscription_paused_notification',
  596. 'subscription_resumed_notification',
  597. ].includes(event)
  598. ) {
  599. const recurlySubscription = eventData.subscription
  600. SubscriptionHandler.syncSubscription(
  601. recurlySubscription,
  602. { ip: req.ip },
  603. function (err) {
  604. if (err) {
  605. return next(err)
  606. }
  607. res.sendStatus(200)
  608. }
  609. )
  610. } else if (event === 'billing_info_updated_notification') {
  611. const recurlyAccountCode = eventData.account.account_code
  612. SubscriptionHandler.attemptPaypalInvoiceCollection(
  613. recurlyAccountCode,
  614. function (err) {
  615. if (err) {
  616. return next(err)
  617. }
  618. res.sendStatus(200)
  619. }
  620. )
  621. } else {
  622. res.sendStatus(200)
  623. }
  624. }
  625. async function extendTrial(req, res) {
  626. const user = SessionManager.getSessionUser(req.session)
  627. const { subscription } =
  628. await LimitationsManager.promises.userHasSubscription(user)
  629. const allowed = (
  630. await Modules.promises.hooks.fire('userCanExtendTrial', user)
  631. )?.[0]
  632. if (!allowed) {
  633. logger.warn({ userId: user._id }, 'user can not extend trial')
  634. return res.sendStatus(403)
  635. }
  636. try {
  637. await SubscriptionHandler.promises.extendTrial(subscription, 14)
  638. AnalyticsManager.recordEventForSession(
  639. req.session,
  640. 'subscription-trial-extended'
  641. )
  642. } catch (error) {
  643. return res.sendStatus(500)
  644. }
  645. res.sendStatus(200)
  646. }
  647. function recurlyNotificationParser(req, res, next) {
  648. let xml = ''
  649. req.on('data', chunk => (xml += chunk))
  650. req.on('end', () =>
  651. RecurlyWrapper._parseXml(xml, function (error, body) {
  652. if (error) {
  653. return next(error)
  654. }
  655. req.body = body
  656. next()
  657. })
  658. )
  659. }
  660. async function refreshUserFeatures(req, res) {
  661. const { user_id: userId } = req.params
  662. await FeaturesUpdater.promises.refreshFeatures(userId, 'acceptance-test')
  663. res.sendStatus(200)
  664. }
  665. async function getRecommendedCurrency(req, res) {
  666. const userId = SessionManager.getLoggedInUserId(req.session)
  667. let ip = req.ip
  668. if (
  669. req.query?.ip &&
  670. (await AuthorizationManager.promises.isUserSiteAdmin(userId))
  671. ) {
  672. ip = req.query.ip
  673. }
  674. const currencyLookup = await GeoIpLookup.promises.getCurrencyCode(ip)
  675. const countryCode = currencyLookup.countryCode
  676. const recommendedCurrency = currencyLookup.currencyCode
  677. let currency = null
  678. const queryCurrency = req.query.currency?.toUpperCase()
  679. if (queryCurrency && GeoIpLookup.isValidCurrencyParam(queryCurrency)) {
  680. currency = queryCurrency
  681. } else if (recommendedCurrency) {
  682. currency = recommendedCurrency
  683. }
  684. return {
  685. currency,
  686. recommendedCurrency,
  687. countryCode,
  688. }
  689. }
  690. async function getLatamCountryBannerDetails(req, res) {
  691. const userId = SessionManager.getLoggedInUserId(req.session)
  692. let ip = req.ip
  693. if (
  694. req.query?.ip &&
  695. (await AuthorizationManager.promises.isUserSiteAdmin(userId))
  696. ) {
  697. ip = req.query.ip
  698. }
  699. const currencyLookup = await GeoIpLookup.promises.getCurrencyCode(ip)
  700. const countryCode = currencyLookup.countryCode
  701. const latamCountryBannerDetails = {}
  702. switch (countryCode) {
  703. case `MX`:
  704. latamCountryBannerDetails.latamCountryFlag = '🇲🇽'
  705. latamCountryBannerDetails.country = 'Mexico'
  706. latamCountryBannerDetails.discount = '25%'
  707. latamCountryBannerDetails.currency = 'Mexican Pesos'
  708. break
  709. case `CO`:
  710. latamCountryBannerDetails.latamCountryFlag = '🇨🇴'
  711. latamCountryBannerDetails.country = 'Colombia'
  712. latamCountryBannerDetails.discount = '60%'
  713. latamCountryBannerDetails.currency = 'Colombian Pesos'
  714. break
  715. case `CL`:
  716. latamCountryBannerDetails.latamCountryFlag = '🇨🇱'
  717. latamCountryBannerDetails.country = 'Chile'
  718. latamCountryBannerDetails.discount = '30%'
  719. latamCountryBannerDetails.currency = 'Chilean Pesos'
  720. break
  721. case `PE`:
  722. latamCountryBannerDetails.latamCountryFlag = '🇵🇪'
  723. latamCountryBannerDetails.country = 'Peru'
  724. latamCountryBannerDetails.currency = 'Peruvian Soles'
  725. latamCountryBannerDetails.discount = '40%'
  726. break
  727. }
  728. return latamCountryBannerDetails
  729. }
  730. /**
  731. * There are two sets of group plans: legacy plans and consolidated plans,
  732. * and their naming conventions differ.
  733. * This helper method computes the name of legacy group plans to ensure
  734. * consistency with the naming of consolidated group plans.
  735. *
  736. * @param {string} planName
  737. * @param {string} planCode
  738. * @return {string}
  739. */
  740. function getPlanNameForDisplay(planName, planCode) {
  741. const match = planCode.match(
  742. /^group_(collaborator|professional)_\d+_(enterprise|educational)$/
  743. )
  744. if (!match) return planName
  745. const [, type, category] = match
  746. const prefix = type === 'collaborator' ? 'Standard' : 'Professional'
  747. const suffix = category === 'educational' ? ' Educational' : ''
  748. return `Overleaf ${prefix} Group${suffix}`
  749. }
  750. /**
  751. * Build a subscription change preview for display purposes
  752. *
  753. * @param {SubscriptionChangeDescription} subscriptionChangeDescription A description of the change for the frontend
  754. * @param {PaymentProviderSubscriptionChange} subscriptionChange The subscription change object coming from Recurly
  755. * @param {PaymentMethod} [paymentMethod] The payment method associated to the user
  756. * @return {SubscriptionChangePreview}
  757. */
  758. function makeChangePreview(
  759. subscriptionChangeDescription,
  760. subscriptionChange,
  761. paymentMethod
  762. ) {
  763. const subscription = subscriptionChange.subscription
  764. const nextPlan = PlansLocator.findLocalPlanInSettings(
  765. subscriptionChange.nextPlanCode
  766. )
  767. return {
  768. change: subscriptionChangeDescription,
  769. currency: subscription.currency,
  770. immediateCharge: { ...subscriptionChange.immediateCharge },
  771. paymentMethod: paymentMethod?.toString(),
  772. netTerms: subscription.netTerms,
  773. nextPlan: {
  774. annual: nextPlan?.annual ?? false,
  775. },
  776. nextInvoice: {
  777. date: subscription.periodEnd.toISOString(),
  778. plan: {
  779. name: getPlanNameForDisplay(
  780. subscriptionChange.nextPlanName,
  781. subscriptionChange.nextPlanCode
  782. ),
  783. amount: subscriptionChange.nextPlanPrice,
  784. },
  785. addOns: subscriptionChange.nextAddOns.map(addOn => ({
  786. code: addOn.code,
  787. name: addOn.name,
  788. quantity: addOn.quantity,
  789. unitAmount: addOn.unitPrice,
  790. amount: addOn.preTaxTotal,
  791. })),
  792. subtotal: subscriptionChange.subtotal,
  793. tax: {
  794. rate: subscription.taxRate,
  795. amount: subscriptionChange.tax,
  796. },
  797. total: subscriptionChange.total,
  798. },
  799. }
  800. }
  801. module.exports = {
  802. userSubscriptionPage: expressify(userSubscriptionPage),
  803. successfulSubscription: expressify(successfulSubscription),
  804. cancelSubscription,
  805. pauseSubscription,
  806. resumeSubscription,
  807. canceledSubscription: expressify(canceledSubscription),
  808. cancelV1Subscription,
  809. previewSubscription: expressify(previewSubscription),
  810. cancelPendingSubscriptionChange,
  811. updateAccountEmailAddress: expressify(updateAccountEmailAddress),
  812. reactivateSubscription,
  813. recurlyCallback,
  814. extendTrial: expressify(extendTrial),
  815. recurlyNotificationParser,
  816. refreshUserFeatures: expressify(refreshUserFeatures),
  817. previewAddonPurchase: expressify(previewAddonPurchase),
  818. purchaseAddon,
  819. removeAddon,
  820. makeChangePreview,
  821. getRecommendedCurrency,
  822. getLatamCountryBannerDetails,
  823. getPlanNameForDisplay,
  824. }