Payments (Stripe)

Overview

Stripe is the billing source of truth; your database is a synced read-model. The flow: send users to Checkout, then let webhooks drive every state change (subscription created/updated/cancelled, payment succeeded/failed). Never set a user to "paid" from the success-redirect — that's spoofable. Verify webhook signatures, process events idempotently, and reconcile to your DB.

When to use

• Charging for subscriptions or one-time purchases.
• Reacting to payment/subscription lifecycle changes.
• Building an upgrade/downgrade or customer-portal flow.

Checkout (start a subscription)

// server action / route handler
import Stripe from "stripe";
import { env } from "@/env";
const stripe = new Stripe(env.STRIPE_SECRET_KEY);