Grant access

const widget = document.querySelector('solloop-subscribe');

widget.addEventListener('solloop:connected', (event) => {
  // The customer's wallet address. Keep it: your server checks it next.
  wallet = event.detail.address;
});

widget.addEventListener('solloop:subscribed', async () => {
  // A hint for your UI, not proof of payment. Ask your server to check.
  await fetch('/api/solloop/claim', {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({ wallet }),
  });
});

// On your server. SOLLOOP_API_KEY is an sk_test_ or sk_live_ key: never
// send it to a browser.
export async function hasAccess(wallet, planId) {
  const response = await fetch(
    `https://api.solloop.app/v1/subscribers/${wallet}`,
    { headers: { Authorization: `Bearer ${process.env.SOLLOOP_API_KEY}` } },
  );
  if (response.status === 404) return false;
  if (!response.ok) throw new Error(`SolLoop API answered ${response.status}`);

  const subscriber = await response.json();
  // "cancelling" has cancelled but paid through the end of the period.
  return (
    subscriber.planId === planId &&
    (subscriber.status === 'active' || subscriber.status === 'cancelling')
  );
}