MNTOR-1800: unsubscribe from free monthly report

src/app/api/utils/email.tsx

@@ -10,6 +10,13 @@ import { VerifyEmailAddressEmail } from "../../../emails/templates/verifyEmailAd
 import { sanitizeSubscriberRow } from "../../functions/server/sanitize";
 import { getL10n } from "../../functions/l10n/serverComponents";
 import { BadRequestError } from "../../../utils/error";
+import { captureException } from "@sentry/node";
+import crypto from "crypto";
+import {
+  addEmailPreferenceForSubscriber,
+  getEmailPreferenceForPrimaryEmail,
+} from "../../../db/tables/subscriber_email_preferences";
+import { SerializedSubscriber } from "../../../next-auth.js";
 
 export async function sendVerificationEmail(
   user: SubscriberRow,
@@ -54,3 +61,48 @@ export async function sendVerificationEmail(
     ),
   );
 }
+
+export async function generateUnsubscribeLinkForSubscriber(
+  subscriber: SerializedSubscriber,
+) {
+  try {
+    const unsubToken = randomString();
+    const sub = await addEmailPreferenceForSubscriber(
+      subscriber.id,
+      {
+        unsubscribe_token: unsubToken,
+      },
+      ["unsubscribe_token"],
+    );
+    return `${process.env.SERVER_URL}/api/v1/user/unsubscribe-email?email=${subscriber.primary_email}&token=${sub.unsubscribe_token}`;
+  } catch (e) {
+    console.error("generate_unsubscribe_link", {
+      exception: e as string,
+    });
+    captureException(e);
+    return null;
+  }
+}
+
+export async function verifyUnsubscribeToken(
+  email: string,
+  unsubToken: string,
+) {
+  try {
+    const preference = await getEmailPreferenceForPrimaryEmail(email);
+    if (!preference || !preference.unsubscribe_token) {
+      return false;
+    }
+    return unsubToken === preference.unsubscribe_token;
+  } catch (e) {
+    console.error("verify_unsubscribe_token", {
+      exception: e as string,
+    });
+    captureException(e);
+    return false;
+  }
+}
+
+function randomString(length: number = 64) {
+  return crypto.randomBytes(length).toString("hex");
+}

src/app/api/v1/fxa-rp-events/route.ts

@@ -13,6 +13,7 @@ import {
   updateFxAProfileData,
   updatePrimaryEmail,
   getOnerepProfileId,
+  setMonthlyMonitorReport,
 } from "../../../../db/tables/subscribers.js";
 import {
   activateProfile,
@@ -295,6 +296,9 @@ export async function POST(request: NextRequest) {
             // any problems with activation.
             await changeSubscription(subscriber, true);
 
+            // Set monthly monitor report value back to true
+            await setMonthlyMonitorReport(subscriber.id, true);
+
             // MNTOR-2103: if one rep profile id doesn't exist in the db, fail immediately
             if (!oneRepProfileId) {
               logger.error("onerep_profile_not_found", {

src/app/api/v1/user/unsubscribe-email/route.ts

@@ -0,0 +1,48 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
+
+import { NextResponse } from "next/server";
+import type { NextRequest } from "next/server";
+import { logger } from "../../../../functions/server/logging";
+import { verifyUnsubscribeToken } from "../../../utils/email";
+import { unsubscribeMonthlyMonitorReportForEmail } from "../../../../../db/tables/subscriber_email_preferences";
+
+export async function GET(req: NextRequest) {
+  try {
+    const { searchParams } = new URL(req.url);
+    const email = searchParams.get("email");
+    const unsubToken = searchParams.get("token");
+
+    if (!email || !unsubToken) {
+      return NextResponse.json(
+        {
+          success: false,
+          message: "email and token are required url parameters.",
+        },
+        { status: 400 },
+      );
+    }
+
+    const tokenVerified = await verifyUnsubscribeToken(email, unsubToken);
+    if (tokenVerified) {
+      await unsubscribeMonthlyMonitorReportForEmail(email);
+      logger.debug("unsubscribe_email_success");
+      return NextResponse.json({ success: true }, { status: 200 });
+    } else {
+      logger.warn("unsubscribe_email_unauthorized_token", {
+        email,
+        unsubToken,
+      });
+      return NextResponse.json(
+        { success: false, message: "Unauthorized unsubscribe token" },
+        { status: 401 },
+      );
+    }
+  } catch (e) {
+    logger.error("unsubscribe_email", {
+      exception: e as string,
+    });
+    return NextResponse.json({ success: false }, { status: 500 });
+  }
+}

src/app/api/v1/user/update-comm-option/route.ts

@@ -10,8 +10,9 @@ import { logger } from "../../../../functions/server/logging";
 import {
   getSubscriberByFxaUid,
   setAllEmailsToPrimary,
-  setMonthlyMonitorReport,
+  isSubscriberPlus,
 } from "../../../../../db/tables/subscribers";
+import { updateEmailPreferenceForSubscriber } from "../../../../../db/tables/subscriber_email_preferences";
 
 export type EmailUpdateCommTypeOfOptions = "null" | "affected" | "primary";
 
@@ -52,7 +53,15 @@ export async function POST(req: NextRequest) {
         await setAllEmailsToPrimary(subscriber, allEmailsToPrimary);
       }
       if (typeof monthlyMonitorReport === "boolean") {
-        await setMonthlyMonitorReport(subscriber, monthlyMonitorReport);
+        const isFree = !(await isSubscriberPlus(subscriber.id));
+        const preference = isFree
+          ? { monthly_monitor_report_free: monthlyMonitorReport }
+          : { monthly_monitor_report: monthlyMonitorReport };
+        await updateEmailPreferenceForSubscriber(
+          subscriber.id,
+          isFree,
+          preference,
+        );
       }
 
       return NextResponse.json({