Sesiones de checkout: cobra inversiones desde tu servidor

curl https://xvxhouuprjsmpfiwxkzz.supabase.co/functions/v1/api/v1/checkout/sessions \
  -H "Authorization: Bearer $KROWS_SECRET_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: order-1234" \
  -d '{
    "amount": 250,
    "email": "investor@email.com",
    "reference": "order-1234",
    "metadata": { "campaign": "autumn" },
    "success_url": "https://yoursite.com/thanks",
    "cancel_url": "https://yoursite.com/invest"
  }'

// Express: POST /invest → creates the session and redirects the investor
app.post('/invest', async (req, res) => {
  const r = await fetch('https://xvxhouuprjsmpfiwxkzz.supabase.co/functions/v1/api/v1/checkout/sessions', {
    method: 'POST',
    headers: {
      Authorization: `Bearer ${process.env.KROWS_SECRET_KEY}`,
      'Content-Type': 'application/json',
      'Idempotency-Key': req.body.orderId,
    },
    body: JSON.stringify({
      suggested_amount: 100,             // the investor can change it
      reference: req.body.orderId,       // comes back in the investment and webhooks
      success_url: 'https://yoursite.com/thanks',
      cancel_url: 'https://yoursite.com/invest',
    }),
  });
  const session = await r.json();
  if (!r.ok) return res.status(400).json(session.error);
  res.redirect(303, session.url);
});

import os, requests

r = requests.post(
    "https://xvxhouuprjsmpfiwxkzz.supabase.co/functions/v1/api/v1/checkout/sessions",
    headers={
        "Authorization": f"Bearer {os.environ['KROWS_SECRET_KEY']}",
        "Idempotency-Key": "order-1234",
    },
    json={"amount": 250, "reference": "order-1234",
          "success_url": "https://yoursite.com/thanks"},
)
session = r.json()
# redirect the investor to session["url"]

{
  "object": "checkout.session",
  "id": "cs_live_8Kd2…",
  "mode": "live",
  "status": "open",
  "url": "https://checkout.krows.app/aurora-solar?s=cs_live_8Kd2…",
  "amount": 250,
  "amount_fixed": true,
  "email": "investor@email.com",
  "reference": "order-1234",
  "metadata": { "campaign": "autumn" },
  "success_url": "https://yoursite.com/thanks",
  "cancel_url": "https://yoursite.com/invest",
  "investment": null,
  "created": "2026-10-17T10:00:00.000Z",
  "expires_at": "2026-10-18T10:00:00.000Z",
  "completed_at": null
}

// Open the investment page in a window and hear back when it completes
const w = window.open('https://checkout.krows.app/aurora-solar?v=1', 'krows', 'width=480,height=760');
window.addEventListener('message', (e) => {
  if (e.origin !== 'https://checkout.krows.app') return;
  if (e.data?.tipo === 'krows:inversion') {
    // { tipo, slug, modo, id, importe, tokens, explorador } — public data only
    console.log('New investment', e.data.id, e.data.importe);
  }
});