refactor: remove supabase auth

apps/web/src/pages/api/stripe/create_checkout_session.ts

@@ -1,22 +1,9 @@
 import type { NextRequest } from "next/server";
-import { NextResponse } from "next/server";
-import { Stripe } from "stripe";
 import { z } from "zod";
 
-import { createDrizzleClient } from "@kan/db/client";
-import * as userRepo from "@kan/db/repository/user.repo";
+import { createNextApiContext } from "@kan/api/trpc";
 import * as workspaceRepo from "@kan/db/repository/workspace.repo";
-import { createNextClient } from "@kan/supabase/clients";
-
-const stripeSecretKey = process.env.STRIPE_SECRET_KEY;
-
-if (!stripeSecretKey) {
-  throw new Error("STRIPE_SECRET_KEY is not defined");
-}
-
-const stripe = new Stripe(stripeSecretKey, {
-  apiVersion: "2024-12-18.acacia",
-});
+import { createStripeClient } from "@kan/stripe";
 
 const workspaceSlugSchema = z
   .string()
@@ -33,6 +20,8 @@ interface CheckoutSessionRequest {
 }
 
 export default async function handler(req: NextRequest) {
+  const stripe = createStripeClient();
+
   if (req.method !== "POST") {
     return new Response(JSON.stringify({ error: "Method not allowed" }), {
       status: 405,
@@ -41,22 +30,7 @@ export default async function handler(req: NextRequest) {
   }
 
   try {
-    const response = NextResponse.next();
-
-    const supabaseClient = createNextClient(req, response);
-
-    const { data } = await supabaseClient.auth.getUser();
-
-    if (!data.user) {
-      return new Response(JSON.stringify({ error: "Unauthorized" }), {
-        status: 403,
-        headers: { "Content-Type": "application/json" },
-      });
-    }
-
-    const db = createDrizzleClient();
-
-    const user = await userRepo.getById(db, data.user.id);
+    const { user, db } = await createNextApiContext(req);
 
     if (!user) {
       return new Response(JSON.stringify({ error: "User not found" }), {