Auth. Plans. Payments. One API.

// the glue code
const session = await getSession(req);
if (!session) return redirect("/login");

// Fetch payment status from Stripe
const sub = await stripe.subscriptions
  .retrieve(session.stripeSubId);

// Fetch plan from your database
const user = await db.user.findUnique({
  where: { id: session.userId },
  include: { plan: true, org: true },
});

// Check role permissions
const canAccess = checkPermissions(
  user.org?.role, requiredPermission
);

// that's it
const token = await verifyJWT(
  req.headers.get("Authorization")
);

const { plan, role, org_permissions,
  payment_status } = token;

if (plan !== "pro") {
  return redirect("/upgrade");
}

{
  "sub": "user-uuid",
  "plan": "pro",
  "role": "admin",
  "org_id": "org-uuid",
  "payment_status": "active",
  "custom_claims": { ... }
}