Embed Nevermined Widgets

import express from 'express'
import { createWidgetSession } from '@nevermined-io/ui-widgets-server'

const app = express()

// POST-only + `Cache-Control: no-store`: the response is a bearer
// credential and must not be cached or prefetched.
app.post('/api/widget-session', async (req, res) => {
  const session = await createWidgetSession({
    email: req.user!.email, // from your auth middleware
    orgId: process.env.NVM_ORG_ID!,
    rawSecret: process.env.NVM_WIDGET_SECRET!,
    apiBaseUrl: process.env.NVM_API_BASE_URL!,
  })
  res.setHeader('cache-control', 'no-store')
  res.json({ session, environment: 'sandbox' })
})

// app/api/widget-session/route.ts — POST-only handler.
import { NextResponse } from 'next/server'
import { createWidgetSession } from '@nevermined-io/ui-widgets-server'
import { auth } from '@/lib/auth'

export async function POST() {
  const authSession = await auth()
  if (!authSession?.user?.email) {
    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
  }
  const session = await createWidgetSession({
    email: authSession.user.email,
    orgId: process.env.NVM_ORG_ID!,
    rawSecret: process.env.NVM_WIDGET_SECRET!,
    apiBaseUrl: process.env.NVM_API_BASE_URL!,
  })
  // Stop caches / prefetchers from snapshotting the bearer credential.
  return NextResponse.json(
    { session, environment: 'sandbox' },
    { headers: { 'cache-control': 'no-store' } },
  )
}

nvm.checkout.startPlan({
  planId: 'plan-<your-plan-id>',
  container: document.getElementById('checkout-widget')!,
  onSuccess: ({ result, handle }) => {
    // result: { planId: string; txHash?: string }
    console.log('Purchase complete', result)
    handle.close()
  },
  onError: (err) => console.error('Checkout failed', err),
})

nvm.delegations.enrollCard({
  container: document.getElementById('enroll-widget')!,
  provider: 'stripe', // 'stripe' | 'braintree' | 'visa' — defaults to 'stripe'
  onSuccess: ({ result, handle }) => {
    console.log('Card enrolled', result.paymentMethodId)
    handle.close()
  },
  onError: (err) => console.error('Enrollment failed', err),
})

nvm.delegations.listCards({
  container: document.getElementById('cards-widget')!,
  onCardAction: ({ action, paymentMethodId }) => {
    // action: 'delegate' (user wants to delegate this card) | 'revoked' (removed inline)
    if (action === 'delegate') {
      nvm.delegations.createDelegation({
        paymentMethodId,
        container: document.getElementById('cards-widget')!,
        onSuccess: ({ result, handle }) => {
          console.log('Delegated', result.delegationId)
          handle.close()
        },
      })
    }
  },
})