SubscriptionController.js 26 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895
  1. // @ts-check
  2. const SessionManager = require('../Authentication/SessionManager')
  3. const SubscriptionHandler = require('./SubscriptionHandler')
  4. const SubscriptionHelper = require('./SubscriptionHelper')
  5. const SubscriptionViewModelBuilder = require('./SubscriptionViewModelBuilder')
  6. const LimitationsManager = require('./LimitationsManager')
  7. const RecurlyWrapper = require('./RecurlyWrapper')
  8. const Settings = require('@overleaf/settings')
  9. const logger = require('@overleaf/logger')
  10. const GeoIpLookup = require('../../infrastructure/GeoIpLookup')
  11. const FeaturesUpdater = require('./FeaturesUpdater')
  12. const GroupPlansData = require('./GroupPlansData')
  13. const V1SubscriptionManager = require('./V1SubscriptionManager')
  14. const AnalyticsManager = require('../Analytics/AnalyticsManager')
  15. const RecurlyEventHandler = require('./RecurlyEventHandler')
  16. const { expressify } = require('@overleaf/promise-utils')
  17. const OError = require('@overleaf/o-error')
  18. const {
  19. DuplicateAddOnError,
  20. AddOnNotPresentError,
  21. PaymentActionRequiredError,
  22. } = require('./Errors')
  23. const SplitTestHandler = require('../SplitTests/SplitTestHandler')
  24. const AuthorizationManager = require('../Authorization/AuthorizationManager')
  25. const Modules = require('../../infrastructure/Modules')
  26. const async = require('async')
  27. const HttpErrorHandler = require('../Errors/HttpErrorHandler')
  28. const RecurlyClient = require('./RecurlyClient')
  29. const {
  30. AI_ADD_ON_CODE,
  31. subscriptionChangeIsAiAssistUpgrade,
  32. } = require('./AiHelper')
  33. const PlansLocator = require('./PlansLocator')
  34. const { User } = require('../../models/User')
  35. const UserGetter = require('../User/UserGetter')
  36. const PermissionsManager = require('../Authorization/PermissionsManager')
  37. const {
  38. sanitizeSessionUserForFrontEnd,
  39. } = require('../../infrastructure/FrontEndUser')
  40. const { IndeterminateInvoiceError } = require('../Errors/Errors')
  41. /**
  42. * @import { SubscriptionChangeDescription } from '../../../../types/subscription/subscription-change-preview'
  43. * @import { SubscriptionChangePreview } from '../../../../types/subscription/subscription-change-preview'
  44. * @import { PaymentProviderSubscriptionChange } from './PaymentProviderEntities'
  45. * @import { PaymentMethod } from './types'
  46. */
  47. const groupPlanModalOptions = Settings.groupPlanModalOptions
  48. function formatGroupPlansDataForDash() {
  49. return {
  50. plans: [...groupPlanModalOptions.plan_codes],
  51. sizes: [...groupPlanModalOptions.sizes],
  52. usages: [...groupPlanModalOptions.usages],
  53. priceByUsageTypeAndSize: JSON.parse(JSON.stringify(GroupPlansData)),
  54. }
  55. }
  56. async function userSubscriptionPage(req, res) {
  57. const user = SessionManager.getSessionUser(req.session)
  58. await SplitTestHandler.promises.getAssignment(req, res, 'pause-subscription')
  59. const groupPricingDiscount = await SplitTestHandler.promises.getAssignment(
  60. req,
  61. res,
  62. 'group-discount-10'
  63. )
  64. const showGroupDiscount = groupPricingDiscount.variant === 'enabled'
  65. const results =
  66. await SubscriptionViewModelBuilder.promises.buildUsersSubscriptionViewModel(
  67. user,
  68. req.i18n.language
  69. )
  70. const {
  71. personalSubscription,
  72. memberGroupSubscriptions,
  73. managedGroupSubscriptions,
  74. currentInstitutionsWithLicence,
  75. managedInstitutions,
  76. managedPublishers,
  77. } = results
  78. const { hasSubscription } =
  79. await LimitationsManager.promises.userHasSubscription(user)
  80. const userCanExtendTrial = (
  81. await Modules.promises.hooks.fire('userCanExtendTrial', user)
  82. )?.[0]
  83. const fromPlansPage = req.query.hasSubscription
  84. const isInTrial = SubscriptionHelper.isInTrial(
  85. personalSubscription?.payment?.trialEndsAt
  86. )
  87. const plansData =
  88. SubscriptionViewModelBuilder.buildPlansListForSubscriptionDash(
  89. personalSubscription?.plan,
  90. isInTrial
  91. )
  92. AnalyticsManager.recordEventForSession(req.session, 'subscription-page-view')
  93. const groupPlansDataForDash = formatGroupPlansDataForDash()
  94. // display the Group settings button only to admins of group subscriptions with either/or the Managed Users or Group SSO feature available
  95. let groupSettingsEnabledFor
  96. try {
  97. const managedGroups = await async.filter(
  98. managedGroupSubscriptions || [],
  99. async subscription => {
  100. const managedUsersResults = await Modules.promises.hooks.fire(
  101. 'hasManagedUsersFeature',
  102. subscription
  103. )
  104. const groupSSOResults = await Modules.promises.hooks.fire(
  105. 'hasGroupSSOFeature',
  106. subscription
  107. )
  108. const isGroupAdmin =
  109. (subscription.admin_id._id || subscription.admin_id).toString() ===
  110. user._id.toString()
  111. return (
  112. (managedUsersResults?.[0] === true ||
  113. groupSSOResults?.[0] === true) &&
  114. isGroupAdmin
  115. )
  116. }
  117. )
  118. groupSettingsEnabledFor = managedGroups.map(subscription =>
  119. subscription._id.toString()
  120. )
  121. } catch (error) {
  122. logger.error(
  123. { err: error },
  124. 'Failed to list groups with group settings enabled'
  125. )
  126. }
  127. let groupSettingsAdvertisedFor
  128. try {
  129. const managedGroups = await async.filter(
  130. managedGroupSubscriptions || [],
  131. async subscription => {
  132. const managedUsersResults = await Modules.promises.hooks.fire(
  133. 'hasManagedUsersFeatureOnNonProfessionalPlan',
  134. subscription
  135. )
  136. const groupSSOResults = await Modules.promises.hooks.fire(
  137. 'hasGroupSSOFeatureOnNonProfessionalPlan',
  138. subscription
  139. )
  140. const isGroupAdmin =
  141. (subscription.admin_id._id || subscription.admin_id).toString() ===
  142. user._id.toString()
  143. const plan = PlansLocator.findLocalPlanInSettings(subscription.planCode)
  144. return (
  145. (managedUsersResults?.[0] === true ||
  146. groupSSOResults?.[0] === true) &&
  147. isGroupAdmin &&
  148. plan?.canUseFlexibleLicensing
  149. )
  150. }
  151. )
  152. groupSettingsAdvertisedFor = managedGroups.map(subscription =>
  153. subscription._id.toString()
  154. )
  155. } catch (error) {
  156. logger.error(
  157. { err: error },
  158. 'Failed to list groups with group settings enabled for advertising'
  159. )
  160. }
  161. const {
  162. isPremium: hasAiAssistViaWritefull,
  163. premiumSource: aiAssistViaWritefullSource,
  164. } = await UserGetter.promises.getWritefullData(user._id)
  165. const data = {
  166. title: 'your_subscription',
  167. plans: plansData?.plans,
  168. planCodesChangingAtTermEnd: plansData?.planCodesChangingAtTermEnd,
  169. user,
  170. hasSubscription,
  171. fromPlansPage,
  172. personalSubscription,
  173. userCanExtendTrial,
  174. memberGroupSubscriptions,
  175. managedGroupSubscriptions,
  176. managedInstitutions,
  177. managedPublishers,
  178. showGroupDiscount,
  179. currentInstitutionsWithLicence,
  180. canUseFlexibleLicensing:
  181. personalSubscription?.plan?.canUseFlexibleLicensing,
  182. groupPlans: groupPlansDataForDash,
  183. groupSettingsAdvertisedFor,
  184. groupSettingsEnabledFor,
  185. isManagedAccount: !!req.managedBy,
  186. userRestrictions: Array.from(req.userRestrictions || []),
  187. hasAiAssistViaWritefull,
  188. aiAssistViaWritefullSource,
  189. }
  190. res.render('subscriptions/dashboard-react', data)
  191. }
  192. async function successfulSubscription(req, res) {
  193. const user = SessionManager.getSessionUser(req.session)
  194. if (!user) {
  195. throw new Error('User is not logged in')
  196. }
  197. const { personalSubscription } =
  198. await SubscriptionViewModelBuilder.promises.buildUsersSubscriptionViewModel(
  199. user,
  200. req.i18n.language
  201. )
  202. const postCheckoutRedirect = req.session?.postCheckoutRedirect
  203. if (!personalSubscription) {
  204. res.redirect('/user/subscription/plans')
  205. } else {
  206. const userInDb = await User.findById(user._id, {
  207. _id: 1,
  208. features: 1,
  209. })
  210. if (!userInDb) {
  211. throw new Error('User not found')
  212. }
  213. res.render('subscriptions/successful-subscription-react', {
  214. title: 'thank_you',
  215. personalSubscription,
  216. postCheckoutRedirect,
  217. user: {
  218. _id: user._id,
  219. features: userInDb.features,
  220. },
  221. })
  222. }
  223. }
  224. async function pauseSubscription(req, res, next) {
  225. const user = SessionManager.getSessionUser(req.session)
  226. const pauseCycles = req.params.pauseCycles
  227. if (!('pauseCycles' in req.params)) {
  228. return HttpErrorHandler.badRequest(
  229. req,
  230. res,
  231. `Pausing subscription requires a 'pauseCycles' argument with number of billing cycles to pause for`
  232. )
  233. }
  234. if (pauseCycles < 0) {
  235. return HttpErrorHandler.badRequest(
  236. req,
  237. res,
  238. `'pauseCycles' should be a number of billing cycles to pause for, or 0 to cancel a pending pause`
  239. )
  240. }
  241. logger.debug(
  242. { userId: user._id },
  243. `pausing subscription for ${pauseCycles} billing cycles`
  244. )
  245. try {
  246. await SubscriptionHandler.promises.pauseSubscription(user, pauseCycles)
  247. const { subscription } =
  248. await LimitationsManager.promises.userHasSubscription(user)
  249. AnalyticsManager.recordEventForUserInBackground(
  250. user._id,
  251. 'subscription-pause-scheduled',
  252. {
  253. pause_length: pauseCycles,
  254. plan_code: subscription?.planCode,
  255. subscriptionId:
  256. SubscriptionHelper.getPaymentProviderSubscriptionId(subscription),
  257. }
  258. )
  259. return res.sendStatus(200)
  260. } catch (err) {
  261. if (err instanceof Error) {
  262. OError.tag(err, 'something went wrong pausing subscription', {
  263. user_id: user._id,
  264. })
  265. }
  266. return next(err)
  267. }
  268. }
  269. async function resumeSubscription(req, res, next) {
  270. const user = SessionManager.getSessionUser(req.session)
  271. logger.debug({ userId: user._id }, `resuming subscription`)
  272. try {
  273. await SubscriptionHandler.promises.resumeSubscription(user)
  274. return res.sendStatus(200)
  275. } catch (err) {
  276. if (err instanceof Error) {
  277. OError.tag(err, 'something went wrong resuming subscription', {
  278. user_id: user._id,
  279. })
  280. }
  281. return next(err)
  282. }
  283. }
  284. async function cancelSubscription(req, res, next) {
  285. const user = SessionManager.getSessionUser(req.session)
  286. logger.debug({ userId: user._id }, 'canceling subscription')
  287. try {
  288. await SubscriptionHandler.promises.cancelSubscription(user)
  289. return res.sendStatus(200)
  290. } catch (err) {
  291. OError.tag(err, 'something went wrong canceling subscription', {
  292. user_id: user._id,
  293. })
  294. return next(err)
  295. }
  296. }
  297. /**
  298. * @returns {Promise<void>}
  299. */
  300. async function canceledSubscription(req, res, next) {
  301. return res.render('subscriptions/canceled-subscription-react', {
  302. title: 'subscription_canceled',
  303. user: sanitizeSessionUserForFrontEnd(
  304. SessionManager.getSessionUser(req.session)
  305. ),
  306. })
  307. }
  308. function cancelV1Subscription(req, res, next) {
  309. const userId = SessionManager.getLoggedInUserId(req.session)
  310. logger.debug({ userId }, 'canceling v1 subscription')
  311. V1SubscriptionManager.cancelV1Subscription(userId, function (err) {
  312. if (err) {
  313. OError.tag(err, 'something went wrong canceling v1 subscription', {
  314. userId,
  315. })
  316. return next(err)
  317. }
  318. res.redirect('/user/subscription')
  319. })
  320. }
  321. async function previewAddonPurchase(req, res) {
  322. const user = SessionManager.getSessionUser(req.session)
  323. const userId = user._id
  324. const addOnCode = req.params.addOnCode
  325. const purchaseReferrer = req.query.purchaseReferrer
  326. if (addOnCode !== AI_ADD_ON_CODE) {
  327. return HttpErrorHandler.notFound(req, res, `Unknown add-on: ${addOnCode}`)
  328. }
  329. const canUseAi = await PermissionsManager.promises.checkUserPermissions(
  330. user,
  331. ['use-ai']
  332. )
  333. if (!canUseAi) {
  334. return res.redirect(
  335. '/user/subscription?redirect-reason=ai-assist-unavailable'
  336. )
  337. }
  338. /** @type {PaymentMethod[]} */
  339. const paymentMethod = await Modules.promises.hooks.fire(
  340. 'getPaymentMethod',
  341. userId
  342. )
  343. let subscriptionChange
  344. try {
  345. subscriptionChange =
  346. await SubscriptionHandler.promises.previewAddonPurchase(userId, addOnCode)
  347. const { isPremium: hasAiAssistViaWritefull } =
  348. await UserGetter.promises.getWritefullData(userId)
  349. const isAiUpgrade = subscriptionChangeIsAiAssistUpgrade(subscriptionChange)
  350. if (hasAiAssistViaWritefull && isAiUpgrade) {
  351. return res.redirect(
  352. '/user/subscription?redirect-reason=writefull-entitled'
  353. )
  354. }
  355. } catch (err) {
  356. if (err instanceof DuplicateAddOnError) {
  357. return res.redirect('/user/subscription?redirect-reason=double-buy')
  358. }
  359. throw err
  360. }
  361. const subscription = subscriptionChange.subscription
  362. const addOn = await RecurlyClient.promises.getAddOn(
  363. subscription.planCode,
  364. addOnCode
  365. )
  366. /** @type {SubscriptionChangePreview} */
  367. const changePreview = makeChangePreview(
  368. {
  369. type: 'add-on-purchase',
  370. addOn: {
  371. code: addOn.code,
  372. name: addOn.name,
  373. },
  374. },
  375. subscriptionChange,
  376. paymentMethod[0]
  377. )
  378. await SplitTestHandler.promises.getAssignment(
  379. req,
  380. res,
  381. 'overleaf-assist-bundle'
  382. )
  383. res.render('subscriptions/preview-change', {
  384. changePreview,
  385. purchaseReferrer,
  386. })
  387. }
  388. async function purchaseAddon(req, res, next) {
  389. const user = SessionManager.getSessionUser(req.session)
  390. const addOnCode = req.params.addOnCode
  391. // currently we only support having a quantity of 1
  392. const quantity = 1
  393. // currently we only support one add-on, the Ai add-on
  394. if (addOnCode !== AI_ADD_ON_CODE) {
  395. return res.sendStatus(404)
  396. }
  397. logger.debug({ userId: user._id, addOnCode }, 'purchasing add-ons')
  398. try {
  399. await SubscriptionHandler.promises.purchaseAddon(
  400. user._id,
  401. addOnCode,
  402. quantity
  403. )
  404. } catch (err) {
  405. if (err instanceof DuplicateAddOnError) {
  406. HttpErrorHandler.badRequest(
  407. req,
  408. res,
  409. 'Your subscription already includes this add-on',
  410. { addon: addOnCode }
  411. )
  412. } else if (err instanceof PaymentActionRequiredError) {
  413. return res.status(402).json({
  414. message: 'Payment action required',
  415. clientSecret: err.info.clientSecret,
  416. publicKey: err.info.publicKey,
  417. })
  418. } else {
  419. if (err instanceof Error) {
  420. OError.tag(err, 'something went wrong purchasing add-ons', {
  421. user_id: user._id,
  422. addOnCode,
  423. })
  424. }
  425. return next(err)
  426. }
  427. }
  428. try {
  429. await FeaturesUpdater.promises.refreshFeatures(user._id, 'add-on-purchase')
  430. } catch (err) {
  431. logger.error({ err }, 'Failed to refresh features after add-on purchase')
  432. }
  433. return res.sendStatus(200)
  434. }
  435. async function removeAddon(req, res, next) {
  436. const user = SessionManager.getSessionUser(req.session)
  437. const addOnCode = req.params.addOnCode
  438. if (addOnCode !== AI_ADD_ON_CODE) {
  439. return res.sendStatus(404)
  440. }
  441. logger.debug({ userId: user._id, addOnCode }, 'removing add-ons')
  442. try {
  443. await SubscriptionHandler.promises.removeAddon(user._id, addOnCode)
  444. res.sendStatus(200)
  445. } catch (err) {
  446. if (err instanceof AddOnNotPresentError) {
  447. HttpErrorHandler.badRequest(
  448. req,
  449. res,
  450. 'Your subscription does not contain the requested add-on',
  451. { addon: addOnCode }
  452. )
  453. } else {
  454. if (err instanceof Error) {
  455. OError.tag(err, 'something went wrong removing add-ons', {
  456. user_id: user._id,
  457. addOnCode,
  458. })
  459. }
  460. return next(err)
  461. }
  462. }
  463. }
  464. async function previewSubscription(req, res, next) {
  465. const planCode = req.query.planCode
  466. if (!planCode) {
  467. return HttpErrorHandler.notFound(req, res, 'Missing plan code')
  468. }
  469. // TODO: use PaymentService to fetch plan information
  470. const plan = await RecurlyClient.promises.getPlan(planCode)
  471. const userId = SessionManager.getLoggedInUserId(req.session)
  472. const subscriptionChange =
  473. await SubscriptionHandler.promises.previewSubscriptionChange(
  474. userId,
  475. planCode
  476. )
  477. /** @type {PaymentMethod[]} */
  478. const paymentMethod = await Modules.promises.hooks.fire(
  479. 'getPaymentMethod',
  480. userId
  481. )
  482. const changePreview = makeChangePreview(
  483. {
  484. type: 'premium-subscription',
  485. plan: { code: plan.code, name: plan.name },
  486. },
  487. subscriptionChange,
  488. paymentMethod[0]
  489. )
  490. res.render('subscriptions/preview-change', { changePreview })
  491. }
  492. function cancelPendingSubscriptionChange(req, res, next) {
  493. const user = SessionManager.getSessionUser(req.session)
  494. logger.debug({ userId: user._id }, 'canceling pending subscription change')
  495. SubscriptionHandler.cancelPendingSubscriptionChange(user, function (err) {
  496. if (err) {
  497. OError.tag(
  498. err,
  499. 'something went wrong canceling pending subscription change',
  500. {
  501. user_id: user._id,
  502. }
  503. )
  504. return next(err)
  505. }
  506. res.redirect('/user/subscription')
  507. })
  508. }
  509. async function updateAccountEmailAddress(req, res, next) {
  510. const user = SessionManager.getSessionUser(req.session)
  511. try {
  512. await Modules.promises.hooks.fire(
  513. 'updateAccountEmailAddress',
  514. user._id,
  515. user.email
  516. )
  517. return res.sendStatus(200)
  518. } catch (error) {
  519. return next(error)
  520. }
  521. }
  522. function reactivateSubscription(req, res, next) {
  523. const user = SessionManager.getSessionUser(req.session)
  524. logger.debug({ userId: user._id }, 'reactivating subscription')
  525. try {
  526. if (req.isManagedGroupAdmin) {
  527. // allow admins to reactivate subscriptions
  528. } else {
  529. // otherwise require the user to have the reactivate-subscription permission
  530. req.assertPermission('reactivate-subscription')
  531. }
  532. } catch (error) {
  533. return next(error)
  534. }
  535. SubscriptionHandler.reactivateSubscription(user, function (err) {
  536. if (err) {
  537. OError.tag(err, 'something went wrong reactivating subscription', {
  538. user_id: user._id,
  539. })
  540. return next(err)
  541. }
  542. res.redirect('/user/subscription')
  543. })
  544. }
  545. function recurlyCallback(req, res, next) {
  546. logger.debug({ data: req.body }, 'received recurly callback')
  547. const event = Object.keys(req.body)[0]
  548. const eventData = req.body[event]
  549. RecurlyEventHandler.sendRecurlyAnalyticsEvent(event, eventData).catch(error =>
  550. logger.error(
  551. { err: error },
  552. 'Failed to process analytics event on Recurly webhook'
  553. )
  554. )
  555. // this is a recurly only case which is required since Recurly does not have a reliable way to check credit info pre-upgrade purchase
  556. if (event === 'failed_payment_notification') {
  557. if (!Settings.planReverts?.enabled) {
  558. return res.sendStatus(200)
  559. }
  560. SubscriptionHandler.getSubscriptionRestorePoint(
  561. eventData.transaction.subscription_id,
  562. function (err, lastSubscription) {
  563. if (err) {
  564. return next(err)
  565. }
  566. // if theres no restore point it could be a failed renewal, or no restore set. Either way it will be handled through dunning automatically
  567. if (!lastSubscription || !lastSubscription?.planCode) {
  568. return res.sendStatus(200)
  569. }
  570. SubscriptionHandler.revertPlanChange(
  571. eventData.transaction.subscription_id,
  572. lastSubscription,
  573. function (err) {
  574. if (err instanceof IndeterminateInvoiceError) {
  575. logger.warn(
  576. { recurlySubscriptionId: err.info.recurlySubscriptionId },
  577. 'could not determine invoice to fail for subscription'
  578. )
  579. return res.sendStatus(200)
  580. }
  581. if (err) {
  582. return next(err)
  583. }
  584. return res.sendStatus(200)
  585. }
  586. )
  587. }
  588. )
  589. } else if (
  590. [
  591. 'new_subscription_notification',
  592. 'updated_subscription_notification',
  593. 'expired_subscription_notification',
  594. 'subscription_paused_notification',
  595. 'subscription_resumed_notification',
  596. ].includes(event)
  597. ) {
  598. const recurlySubscription = eventData.subscription
  599. SubscriptionHandler.syncSubscription(
  600. recurlySubscription,
  601. { ip: req.ip },
  602. function (err) {
  603. if (err) {
  604. return next(err)
  605. }
  606. res.sendStatus(200)
  607. }
  608. )
  609. } else if (event === 'billing_info_updated_notification') {
  610. const recurlyAccountCode = eventData.account.account_code
  611. SubscriptionHandler.attemptPaypalInvoiceCollection(
  612. recurlyAccountCode,
  613. function (err) {
  614. if (err) {
  615. return next(err)
  616. }
  617. res.sendStatus(200)
  618. }
  619. )
  620. } else {
  621. res.sendStatus(200)
  622. }
  623. }
  624. async function extendTrial(req, res) {
  625. const user = SessionManager.getSessionUser(req.session)
  626. const { subscription } =
  627. await LimitationsManager.promises.userHasSubscription(user)
  628. const allowed = (
  629. await Modules.promises.hooks.fire('userCanExtendTrial', user)
  630. )?.[0]
  631. if (!allowed) {
  632. logger.warn({ userId: user._id }, 'user can not extend trial')
  633. return res.sendStatus(403)
  634. }
  635. try {
  636. await SubscriptionHandler.promises.extendTrial(subscription, 14)
  637. AnalyticsManager.recordEventForSession(
  638. req.session,
  639. 'subscription-trial-extended'
  640. )
  641. } catch (error) {
  642. return res.sendStatus(500)
  643. }
  644. res.sendStatus(200)
  645. }
  646. function recurlyNotificationParser(req, res, next) {
  647. let xml = ''
  648. req.on('data', chunk => (xml += chunk))
  649. req.on('end', () =>
  650. RecurlyWrapper._parseXml(xml, function (error, body) {
  651. if (error) {
  652. return next(error)
  653. }
  654. req.body = body
  655. next()
  656. })
  657. )
  658. }
  659. async function refreshUserFeatures(req, res) {
  660. const { user_id: userId } = req.params
  661. await FeaturesUpdater.promises.refreshFeatures(userId, 'acceptance-test')
  662. res.sendStatus(200)
  663. }
  664. async function getRecommendedCurrency(req, res) {
  665. const userId = SessionManager.getLoggedInUserId(req.session)
  666. let ip = req.ip
  667. if (
  668. req.query?.ip &&
  669. (await AuthorizationManager.promises.isUserSiteAdmin(userId))
  670. ) {
  671. ip = req.query.ip
  672. }
  673. const currencyLookup = await GeoIpLookup.promises.getCurrencyCode(ip)
  674. const countryCode = currencyLookup.countryCode
  675. const recommendedCurrency = currencyLookup.currencyCode
  676. let currency = null
  677. const queryCurrency = req.query.currency?.toUpperCase()
  678. if (queryCurrency && GeoIpLookup.isValidCurrencyParam(queryCurrency)) {
  679. currency = queryCurrency
  680. } else if (recommendedCurrency) {
  681. currency = recommendedCurrency
  682. }
  683. return {
  684. currency,
  685. recommendedCurrency,
  686. countryCode,
  687. }
  688. }
  689. async function getLatamCountryBannerDetails(req, res) {
  690. const userId = SessionManager.getLoggedInUserId(req.session)
  691. let ip = req.ip
  692. if (
  693. req.query?.ip &&
  694. (await AuthorizationManager.promises.isUserSiteAdmin(userId))
  695. ) {
  696. ip = req.query.ip
  697. }
  698. const currencyLookup = await GeoIpLookup.promises.getCurrencyCode(ip)
  699. const countryCode = currencyLookup.countryCode
  700. const latamCountryBannerDetails = {}
  701. switch (countryCode) {
  702. case `MX`:
  703. latamCountryBannerDetails.latamCountryFlag = '🇲🇽'
  704. latamCountryBannerDetails.country = 'Mexico'
  705. latamCountryBannerDetails.discount = '25%'
  706. latamCountryBannerDetails.currency = 'Mexican Pesos'
  707. break
  708. case `CO`:
  709. latamCountryBannerDetails.latamCountryFlag = '🇨🇴'
  710. latamCountryBannerDetails.country = 'Colombia'
  711. latamCountryBannerDetails.discount = '60%'
  712. latamCountryBannerDetails.currency = 'Colombian Pesos'
  713. break
  714. case `CL`:
  715. latamCountryBannerDetails.latamCountryFlag = '🇨🇱'
  716. latamCountryBannerDetails.country = 'Chile'
  717. latamCountryBannerDetails.discount = '30%'
  718. latamCountryBannerDetails.currency = 'Chilean Pesos'
  719. break
  720. case `PE`:
  721. latamCountryBannerDetails.latamCountryFlag = '🇵🇪'
  722. latamCountryBannerDetails.country = 'Peru'
  723. latamCountryBannerDetails.currency = 'Peruvian Soles'
  724. latamCountryBannerDetails.discount = '40%'
  725. break
  726. }
  727. return latamCountryBannerDetails
  728. }
  729. /**
  730. * There are two sets of group plans: legacy plans and consolidated plans,
  731. * and their naming conventions differ.
  732. * This helper method computes the name of legacy group plans to ensure
  733. * consistency with the naming of consolidated group plans.
  734. *
  735. * @param {string} planName
  736. * @param {string} planCode
  737. * @return {string}
  738. */
  739. function getPlanNameForDisplay(planName, planCode) {
  740. const match = planCode.match(
  741. /^group_(collaborator|professional)_\d+_(enterprise|educational)$/
  742. )
  743. if (!match) return planName
  744. const [, type, category] = match
  745. const prefix = type === 'collaborator' ? 'Standard' : 'Professional'
  746. const suffix = category === 'educational' ? ' Educational' : ''
  747. return `Overleaf ${prefix} Group${suffix}`
  748. }
  749. /**
  750. * Build a subscription change preview for display purposes
  751. *
  752. * @param {SubscriptionChangeDescription} subscriptionChangeDescription A description of the change for the frontend
  753. * @param {PaymentProviderSubscriptionChange} subscriptionChange The subscription change object coming from Recurly
  754. * @param {PaymentMethod} [paymentMethod] The payment method associated to the user
  755. * @return {SubscriptionChangePreview}
  756. */
  757. function makeChangePreview(
  758. subscriptionChangeDescription,
  759. subscriptionChange,
  760. paymentMethod
  761. ) {
  762. const subscription = subscriptionChange.subscription
  763. const nextPlan = PlansLocator.findLocalPlanInSettings(
  764. subscriptionChange.nextPlanCode
  765. )
  766. return {
  767. change: subscriptionChangeDescription,
  768. currency: subscription.currency,
  769. immediateCharge: { ...subscriptionChange.immediateCharge },
  770. paymentMethod: paymentMethod?.toString(),
  771. netTerms: subscription.netTerms,
  772. nextPlan: {
  773. annual: nextPlan?.annual ?? false,
  774. },
  775. nextInvoice: {
  776. date: subscription.periodEnd.toISOString(),
  777. plan: {
  778. name: getPlanNameForDisplay(
  779. subscriptionChange.nextPlanName,
  780. subscriptionChange.nextPlanCode
  781. ),
  782. amount: subscriptionChange.nextPlanPrice,
  783. },
  784. addOns: subscriptionChange.nextAddOns.map(addOn => ({
  785. code: addOn.code,
  786. name: addOn.name,
  787. quantity: addOn.quantity,
  788. unitAmount: addOn.unitPrice,
  789. amount: addOn.preTaxTotal,
  790. })),
  791. subtotal: subscriptionChange.subtotal,
  792. tax: {
  793. rate: subscription.taxRate,
  794. amount: subscriptionChange.tax,
  795. },
  796. total: subscriptionChange.total,
  797. },
  798. }
  799. }
  800. module.exports = {
  801. userSubscriptionPage: expressify(userSubscriptionPage),
  802. successfulSubscription: expressify(successfulSubscription),
  803. cancelSubscription,
  804. pauseSubscription,
  805. resumeSubscription,
  806. canceledSubscription: expressify(canceledSubscription),
  807. cancelV1Subscription,
  808. previewSubscription: expressify(previewSubscription),
  809. cancelPendingSubscriptionChange,
  810. updateAccountEmailAddress: expressify(updateAccountEmailAddress),
  811. reactivateSubscription,
  812. recurlyCallback,
  813. extendTrial: expressify(extendTrial),
  814. recurlyNotificationParser,
  815. refreshUserFeatures: expressify(refreshUserFeatures),
  816. previewAddonPurchase: expressify(previewAddonPurchase),
  817. purchaseAddon,
  818. removeAddon,
  819. makeChangePreview,
  820. getRecommendedCurrency,
  821. getLatamCountryBannerDetails,
  822. getPlanNameForDisplay,
  823. }