Validate access

import { whopApi } from "@/lib/whop-api";
import { verifyUserToken } from "@whop/api";
import { headers } from "next/headers";

// The headers contains the user token
const headersList = await headers();

// The experienceId is a path param
// This can be configured in the Whop Dashboard, when you define your app
const { experienceId } = await params;

// The user token is in the headers
const { userId } = await verifyUserToken(headersList);


const result = await whopApi.checkIfUserHasAccessToExperience({
  userId,
  experienceId,
});

if (!result.hasAccessToExperience.hasAccess) {
  return <div>You do not have access to this experience</div>;
}

// Either: 'admin' | 'customer' | 'no_access';
// 'admin' means the user is an admin of the whop, such as an owner or moderator
// 'customer' means the user is a common member in this whop
// 'no_access' means the user does not have access to the whop
const { accessLevel } = result.hasAccessToExperience;

if (accessLevel === "admin") {
  return <div>You are an admin of this experience</div>;
}

if (accessLevel === "customer") {
  return <div>You are a customer of this experience</div>;
}

return <div>You do not have access to this experience</div>