07 — Lisans ve Entitlement Kontrolü

{
  "allowed": true,
  "source": "INDIVIDUAL_SUBSCRIPTION",
  "subject": {
    "user_id": "usr_94b8e21c-3085-48fa-9549-a1d29381e4ab",
    "email": "user@example.com",
    "name": "Ali Veli"
  },
  "subscription": {
    "id": "sub_xxxxxxxx",
    "status": "ACTIVE",
    "plan_code": "pro_monthly",
    "plan_name": "Profesyonel Plan",
    "starts_at": "2026-10-01T00:00:00.000Z",
    "ends_at": "2026-11-01T00:00:00.000Z",
    "remaining_days": 27
  },
  "seat": null,
  "features": ["export_pdf", "unlimited_projects", "priority_support"],
  "limits": {
    "max_seats": 5,
    "storage_gb": 100
  },
  "evaluated_at": "2026-10-04T12:00:00.000Z"
}

// lib/entitlements.ts
export interface UserEntitlement {
  allowed: boolean;
  features: string[];
  limits: Record<string, number>;
  plan_code?: string;
}

export async function checkUserEntitlement(sub: string): Promise<UserEntitlement> {
  const apiKey = process.env.TALOST_APP_API_KEY!; // tlk_live_...
  const issuer = process.env.TALOST_ISSUER || "https://id.talost.com";

  const res = await fetch(`${issuer}/api/v1/apps/users/${sub}/entitlements`, {
    headers: {
      "X-Talost-Api-Key": apiKey,
    },
    next: { revalidate: 300 }, // 5 dakika in-memory önbellek
  });

  if (!res.ok) {
    return { allowed: false, features: [], limits: {} };
  }

  const data = await res.json();
  return {
    allowed: data.has_access,
    features: data.features || [],
    limits: data.limits || {},
    plan_code: data.plan?.code,
  };
}

// Bir rota içinde koruma örneği:
export async function requireFeature(sub: string, requiredFeature: string) {
  const entitlement = await checkUserEntitlement(sub);
  
  if (!entitlement.allowed) {
    throw new Error("Lütfen uygulamanızı kullanabilmek için bir plana abone olun.");
  }

  if (!entitlement.features.includes(requiredFeature)) {
    throw new Error(`Bu özelliği (${requiredFeature}) kullanmak için planınızı yükseltmeniz gerekmektedir.`);
  }

  return true;
}