mpp-rb 0.1.8 → 0.1.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e5d5c20207eb5f09b4f077cea8bdd1fb1f2acc15d12c5d00928cc7e8eddcf627
-  data.tar.gz: 1f080945c2a322985b47d184ccaf00b543931bcb6f4623c070175d03efab5cd8
+  metadata.gz: 9b15406ee08abfa67c30c458ceb33ba59d0af4873350e5d0976521f6fd9409e1
+  data.tar.gz: 7ed79eafc950f4fb78253c7b0e93003498597bb5d87ffeda2f6e147004e4f858
 SHA512:
-  metadata.gz: 7044c78ebef4814fce755614c194a6723c39df930071762aab94e19e944bb241f33bfd554fdc18ed0ef5f7b3f9cdc9d219923ab4a9aac6278e94896069b2634c
-  data.tar.gz: d71d6869c20d1a569a0425cde39dd39938688735d0360db47fe82f80ac454f3d4ec015624f942c1bf1760c271e9297ca848300ac63d5d0366496b57a2475efc6
+  metadata.gz: 0bd1c63ff9e43759b05f7f3c4114368679407b04856c38d620e1b85d02c856028a9b740f80c50f848ebd238c2bbab2a0ae02e53197b9e6034951956a3251a4a2
+  data.tar.gz: 2c0e2ffd65f60ad41b4fe2ce25006491b7fea6c76c5f0edac0672e738e64c53d9b23f0e3216b477dd638474957f54be6c9f04c5005af173e6c83fdf51103bb7a

data/lib/mpp/methods/evm/charge_intent.rb

@@ -136,7 +136,7 @@ module Mpp
         end
 
         def x402_credential?(credential)
-          credential.payload.is_a?(Hash) && credential.payload["_x402"] == true
+          credential.is_a?(X402Credential)
         end
 
         def addresses_equal?(left, right)

data/lib/mpp/methods/evm/evm_method.rb

@@ -99,9 +99,9 @@ module Mpp
             http_method: http_method
           )
           echo = challenge.to_echo
-          Mpp::Credential.new(
+          X402Credential.new(
             challenge: echo,
-            payload: authorization.merge("_x402" => true),
+            payload: authorization,
             source: source_for(authorization["from"])
           )
         end

data/lib/mpp/methods/evm/x402_credential.rb

@@ -0,0 +1,12 @@
+# typed: true
+# frozen_string_literal: true
+
+module Mpp
+  module Methods
+    module Evm
+      # Credential bound server-side from an x402 PAYMENT-SIGNATURE header.
+      class X402Credential < Mpp::Credential
+      end
+    end
+  end
+end

data/lib/mpp/methods/evm.rb

@@ -8,6 +8,7 @@ module Mpp
       autoload :Authorization, "mpp/methods/evm/authorization"
       autoload :ChargeIntent, "mpp/methods/evm/charge_intent"
       autoload :EvmMethod, "mpp/methods/evm/evm_method"
+      autoload :X402Credential, "mpp/methods/evm/x402_credential"
 
       # Factory for a server-side EVM charge method with inline x402 exact support.
       def self.charge(currency:, recipient:, x402:, authorization: nil, chain_id: nil, decimals: nil,

data/lib/mpp/methods/tempo/intents.rb

@@ -221,6 +221,7 @@ module Mpp
 
             receipt_data = fetch_transaction_receipt(rpc_url, reserved_tx_hash)
             verify_transaction_receipt!(receipt_data, request, credential: credential)
+            claim_settlement!(reserved_tx_hash)
             @store.put(store_key, TRANSACTION_VERIFIED)
             return Mpp::Receipt.success(reserved_tx_hash)
           end
@@ -241,6 +242,7 @@ module Mpp
             if transaction_submission_may_have_succeeded?(e)
               receipt_data = fetch_transaction_receipt(rpc_url, reserved_tx_hash)
               verify_transaction_receipt!(receipt_data, request, credential: credential)
+              claim_settlement!(reserved_tx_hash)
               @store.put(store_key, TRANSACTION_VERIFIED)
               return Mpp::Receipt.success(reserved_tx_hash)
             end
@@ -260,16 +262,26 @@ module Mpp
           # claim until verification finishes so a concurrent retry cannot
           # rebroadcast the same payload.
           raw_store_key = store_key
+          raw_tx_hash = reserved_tx_hash
           store_key, reserved_tx_hash = rebase_reservation_to_chain_hash(store_key, reserved_tx_hash, tx_hash)
 
           receipt_data = fetch_transaction_receipt(rpc_url, reserved_tx_hash)
           verify_transaction_receipt!(receipt_data, request, credential: credential)
+          claim_settlement!(raw_tx_hash, reserved_tx_hash)
           @store.put(store_key, TRANSACTION_VERIFIED)
           @store.put(raw_store_key, TRANSACTION_VERIFIED) if raw_store_key != store_key
 
           Mpp::Receipt.success(reserved_tx_hash)
         end
 
+        def claim_settlement!(*tx_hashes)
+          tx_hashes.map(&:downcase).uniq.each do |tx_hash|
+            unless @store.put_if_absent("mpp:charge:settled:#{tx_hash}", true)
+              raise Mpp::VerificationError, "Transaction hash already used"
+            end
+          end
+        end
+
         def transaction_submission_may_have_succeeded?(error)
           message = "#{error.class}: #{error.message}".downcase
 

data/lib/mpp/version.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Mpp
-  VERSION = "0.1.8"
+  VERSION = "0.1.9"
 end

data/lib/mpp/x402/server.rb

@@ -150,7 +150,7 @@ module Mpp
         route_bound = !client_nonce.nil?
         route_requires_binding = !challenge.digest.nil? || !challenge.opaque.nil?
 
-        if route_requires_binding && !route_bound && route_binding == :required
+        if !route_bound && route_binding == :required
           Kernel.raise Mpp::VerificationFailedError.new(reason: "x402 payment payload does not bind required route metadata")
         end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: mpp-rb
 version: !ruby/object:Gem::Version
-  version: 0.1.8
+  version: 0.1.9
 platform: ruby
 authors:
 - Stripe
@@ -86,6 +86,7 @@ files:
 - lib/mpp/methods/evm/authorization.rb
 - lib/mpp/methods/evm/charge_intent.rb
 - lib/mpp/methods/evm/evm_method.rb
+- lib/mpp/methods/evm/x402_credential.rb
 - lib/mpp/methods/stripe.rb
 - lib/mpp/methods/stripe/analytics_metadata.rb
 - lib/mpp/methods/stripe/charge_intent.rb