@edx/frontend-app-alacarte-checkout 1.10.0 → 1.11.0

package/dist/checkoutPage/CheckoutPage.js

@@ -1,9 +1,15 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useState } from 'react';
 import { Alert, Container } from '@openedx/paragon';
 import { getAppConfig, getSiteConfig } from '@openedx/frontend-base';
 import { appId } from '../constants';
 import CheckoutGate from '../components/CheckoutGate/CheckoutGate';
+import DemoPdpBanner from '../components/DemoPdpBanner/DemoPdpBanner';
 const PageWrapper = ({ children }) => (_jsx(Container, { children: children }));
+// TEMPORARY — Set to true to show the demo PDP banner before checkout.
+// When true, the banner is displayed first; clicking "Earn a certificate"
+// transitions to the real checkout flow. Set to false to skip the banner.
+const SHOW_DEMO_PDP = true;
 const CheckoutPage = () => {
     const config = getAppConfig(appId);
     const siteConfig = getSiteConfig();
@@ -13,6 +19,12 @@ const CheckoutPage = () => {
     const isDevelopment = siteConfig.environment === 'development';
     const edxSessionUrl = `${isDevelopment ? 'https://courses.stage.edx.org' : LMS_BASE_URL}/api/edx-session`;
     const geolocationUrl = `${isDevelopment ? 'https://courses.stage.edx.org' : LMS_BASE_URL}/api/geolocation/lookup`;
+    // When the demo banner is enabled, start on the "PDP" view; clicking the
+    // CTA flips showCheckout to true and the real checkout renders.
+    const [showCheckout, setShowCheckout] = useState(!SHOW_DEMO_PDP);
+    if (!showCheckout) {
+        return _jsx(DemoPdpBanner, { onEnroll: () => setShowCheckout(true) });
+    }
     if (!stripePublishableKey || !apiUrl || !edxSessionUrl) {
         return (_jsx(PageWrapper, { children: _jsxs(Alert, { variant: "danger", children: ["We're having trouble loading the checkout. Please refresh the page or try again in a few moments. If the problem persists,", ' ', _jsx("a", { href: "https://courses.edx.org/support/contact_us", children: "contact support" }), "."] }) }));
     }

package/dist/checkoutPage/CheckoutPage.js.map

@@ -1 +1 @@
-{"version":3,"file":"CheckoutPage.js","sourceRoot":"","sources":["../../src/checkoutPage/CheckoutPage.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,YAAY,MAAM,yCAAyC,CAAC;AAEnE,MAAM,WAAW,GAA4C,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAC7E,KAAC,SAAS,cAAE,QAAQ,GAAa,CAClC,CAAC;AAEF,MAAM,YAAY,GAAa,GAAG,EAAE;IAClC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,MAAM,YAAY,GAAG,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9D,MAAM,oBAAoB,GAAG,MAAM,CAAC,iBAA2B,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,YAAsB,CAAC;IAC7C,MAAM,aAAa,GAAG,UAAU,CAAC,WAAW,KAAK,aAAa,CAAC;IAC/D,MAAM,aAAa,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,YAAY,kBAAkB,CAAC;IAC1G,MAAM,cAAc,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,YAAY,yBAAyB,CAAC;IAElH,IAAI,CAAC,oBAAoB,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACvD,OAAO,CACL,KAAC,WAAW,cACV,MAAC,KAAK,IAAC,OAAO,EAAC,QAAQ,2IAEwC,GAAG,EAChE,YAAG,IAAI,EAAC,4CAA4C,gCAEhD,SAEE,GACI,CACf,CAAC;IACJ,CAAC;IAED,OAAO,CACL,KAAC,WAAW,cACV,KAAC,YAAY,IACX,oBAAoB,EAAE,oBAAoB,EAC1C,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,aAAa,EAC5B,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,GAAG,YAAY,YAAY,EAChD,OAAO,EAAE,YAAY,IAAI,GAAG,EAC5B,UAAU,EAAE,CAAC,iBAAiB,EAAE,EAAE;gBAChC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBAC/B,kFAAkF;gBAClF,kBAAkB;YACpB,CAAC,GACD,GACU,CACf,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,YAAY,CAAC","sourcesContent":["import React from 'react';\nimport { Alert, Container } from '@openedx/paragon';\nimport { getAppConfig, getSiteConfig } from '@openedx/frontend-base';\nimport { appId } from '@src/constants';\nimport CheckoutGate from '../components/CheckoutGate/CheckoutGate';\n\nconst PageWrapper: React.FC<{ children: React.ReactNode }> = ({ children }) => (\n  <Container>{children}</Container>\n);\n\nconst CheckoutPage: React.FC = () => {\n  const config = getAppConfig(appId);\n  const siteConfig = getSiteConfig();\n  const LMS_BASE_URL = siteConfig.lmsBaseUrl.replace(/\\/$/, '');\n  const stripePublishableKey = config.STRIPE_PUBLIC_KEY as string;\n  const apiUrl = config.VIAX_API_URL as string;\n  const isDevelopment = siteConfig.environment === 'development';\n  const edxSessionUrl = `${isDevelopment ? 'https://courses.stage.edx.org' : LMS_BASE_URL}/api/edx-session`;\n  const geolocationUrl = `${isDevelopment ? 'https://courses.stage.edx.org' : LMS_BASE_URL}/api/geolocation/lookup`;\n\n  if (!stripePublishableKey || !apiUrl || !edxSessionUrl) {\n    return (\n      <PageWrapper>\n        <Alert variant=\"danger\">\n          We&apos;re having trouble loading the checkout. Please refresh the\n          page or try again in a few moments. If the problem persists,{' '}\n          <a href=\"https://courses.edx.org/support/contact_us\">\n            contact support\n          </a>\n          .\n        </Alert>\n      </PageWrapper>\n    );\n  }\n\n  return (\n    <PageWrapper>\n      <CheckoutGate\n        stripePublishableKey={stripePublishableKey}\n        apiUrl={apiUrl}\n        edxSessionUrl={edxSessionUrl}\n        geolocationUrl={geolocationUrl}\n        learnerDashboardUrl={`${LMS_BASE_URL}/dashboard`}\n        homeUrl={LMS_BASE_URL || '/'}\n        onComplete={(_subscriptionBiId) => {\n          console.log(_subscriptionBiId);\n          // window.location.href = `/checkout/confirmation?sub=${_subscriptionBiId ?? ''}`;\n          // Success screen.\n        }}\n      />\n    </PageWrapper>\n  );\n};\n\nexport default CheckoutPage;\n"]}
+{"version":3,"file":"CheckoutPage.js","sourceRoot":"","sources":["../../src/checkoutPage/CheckoutPage.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,YAAY,MAAM,yCAAyC,CAAC;AACnE,OAAO,aAAa,MAAM,2CAA2C,CAAC;AAEtE,MAAM,WAAW,GAA4C,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAC7E,KAAC,SAAS,cAAE,QAAQ,GAAa,CAClC,CAAC;AAEF,uEAAuE;AACvE,0EAA0E;AAC1E,0EAA0E;AAC1E,MAAM,aAAa,GAAG,IAAI,CAAC;AAE3B,MAAM,YAAY,GAAa,GAAG,EAAE;IAClC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,MAAM,YAAY,GAAG,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9D,MAAM,oBAAoB,GAAG,MAAM,CAAC,iBAA2B,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,YAAsB,CAAC;IAC7C,MAAM,aAAa,GAAG,UAAU,CAAC,WAAW,KAAK,aAAa,CAAC;IAC/D,MAAM,aAAa,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,YAAY,kBAAkB,CAAC;IAC1G,MAAM,cAAc,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,YAAY,yBAAyB,CAAC;IAElH,yEAAyE;IACzE,gEAAgE;IAChE,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,CAAC,aAAa,CAAC,CAAC;IAEjE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,KAAC,aAAa,IAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,GAAI,CAAC;IAClE,CAAC;IAED,IAAI,CAAC,oBAAoB,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACvD,OAAO,CACL,KAAC,WAAW,cACV,MAAC,KAAK,IAAC,OAAO,EAAC,QAAQ,2IAEwC,GAAG,EAChE,YAAG,IAAI,EAAC,4CAA4C,gCAEhD,SAEE,GACI,CACf,CAAC;IACJ,CAAC;IAED,OAAO,CACL,KAAC,WAAW,cACV,KAAC,YAAY,IACX,oBAAoB,EAAE,oBAAoB,EAC1C,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,aAAa,EAC5B,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,GAAG,YAAY,YAAY,EAChD,OAAO,EAAE,YAAY,IAAI,GAAG,EAC5B,UAAU,EAAE,CAAC,iBAAiB,EAAE,EAAE;gBAChC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBAC/B,kFAAkF;gBAClF,kBAAkB;YACpB,CAAC,GACD,GACU,CACf,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,YAAY,CAAC","sourcesContent":["import React, { useState } from 'react';\nimport { Alert, Container } from '@openedx/paragon';\nimport { getAppConfig, getSiteConfig } from '@openedx/frontend-base';\nimport { appId } from '@src/constants';\nimport CheckoutGate from '../components/CheckoutGate/CheckoutGate';\nimport DemoPdpBanner from '../components/DemoPdpBanner/DemoPdpBanner';\n\nconst PageWrapper: React.FC<{ children: React.ReactNode }> = ({ children }) => (\n  <Container>{children}</Container>\n);\n\n// TEMPORARY — Set to true to show the demo PDP banner before checkout.\n// When true, the banner is displayed first; clicking \"Earn a certificate\"\n// transitions to the real checkout flow. Set to false to skip the banner.\nconst SHOW_DEMO_PDP = true;\n\nconst CheckoutPage: React.FC = () => {\n  const config = getAppConfig(appId);\n  const siteConfig = getSiteConfig();\n  const LMS_BASE_URL = siteConfig.lmsBaseUrl.replace(/\\/$/, '');\n  const stripePublishableKey = config.STRIPE_PUBLIC_KEY as string;\n  const apiUrl = config.VIAX_API_URL as string;\n  const isDevelopment = siteConfig.environment === 'development';\n  const edxSessionUrl = `${isDevelopment ? 'https://courses.stage.edx.org' : LMS_BASE_URL}/api/edx-session`;\n  const geolocationUrl = `${isDevelopment ? 'https://courses.stage.edx.org' : LMS_BASE_URL}/api/geolocation/lookup`;\n\n  // When the demo banner is enabled, start on the \"PDP\" view; clicking the\n  // CTA flips showCheckout to true and the real checkout renders.\n  const [showCheckout, setShowCheckout] = useState(!SHOW_DEMO_PDP);\n\n  if (!showCheckout) {\n    return <DemoPdpBanner onEnroll={() => setShowCheckout(true)} />;\n  }\n\n  if (!stripePublishableKey || !apiUrl || !edxSessionUrl) {\n    return (\n      <PageWrapper>\n        <Alert variant=\"danger\">\n          We&apos;re having trouble loading the checkout. Please refresh the\n          page or try again in a few moments. If the problem persists,{' '}\n          <a href=\"https://courses.edx.org/support/contact_us\">\n            contact support\n          </a>\n          .\n        </Alert>\n      </PageWrapper>\n    );\n  }\n\n  return (\n    <PageWrapper>\n      <CheckoutGate\n        stripePublishableKey={stripePublishableKey}\n        apiUrl={apiUrl}\n        edxSessionUrl={edxSessionUrl}\n        geolocationUrl={geolocationUrl}\n        learnerDashboardUrl={`${LMS_BASE_URL}/dashboard`}\n        homeUrl={LMS_BASE_URL || '/'}\n        onComplete={(_subscriptionBiId) => {\n          console.log(_subscriptionBiId);\n          // window.location.href = `/checkout/confirmation?sub=${_subscriptionBiId ?? ''}`;\n          // Success screen.\n        }}\n      />\n    </PageWrapper>\n  );\n};\n\nexport default CheckoutPage;\n"]}

package/dist/components/DemoPdpBanner/DemoPdpBanner.d.ts

@@ -0,0 +1,14 @@
+import React from 'react';
+declare global {
+    interface Window {
+        activeProgramId?: string;
+        activeCourseUid?: string;
+        activeCourseRunKey?: string;
+        activeDiscountCode?: string;
+    }
+}
+interface DemoPdpBannerProps {
+    onEnroll: () => void;
+}
+declare const DemoPdpBanner: React.FC<DemoPdpBannerProps>;
+export default DemoPdpBanner;

package/dist/components/DemoPdpBanner/DemoPdpBanner.js

@@ -0,0 +1,34 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+const DEFAULT_PROGRAM_UID = '01a06551-667b-7c85-9286-f6a60b9eb287';
+const DEFAULT_DISCOUNT_CODE = '';
+function buildCheckoutUrl() {
+    var _a;
+    const programUid = window.activeProgramId || DEFAULT_PROGRAM_UID;
+    const courseUid = window.activeCourseUid || '';
+    const courseRunKey = window.activeCourseRunKey || '';
+    const discountCode = (_a = window.activeDiscountCode) !== null && _a !== void 0 ? _a : DEFAULT_DISCOUNT_CODE;
+    const params = new URLSearchParams();
+    if (courseUid && courseRunKey) {
+        params.set('course_uid', courseUid);
+        params.set('course_run_key', courseRunKey);
+    }
+    else {
+        params.set('program_uid', programUid);
+    }
+    if (discountCode) {
+        params.set('discount_code', discountCode);
+    }
+    return `/aca-checkout?${params.toString()}`;
+}
+const HarvardShield = () => (_jsxs("svg", { width: "30", height: "30", viewBox: "0 0 30 30", fill: "none", "aria-hidden": "true", children: [_jsx("rect", { width: "30", height: "30", rx: "2", fill: "#A41034" }), _jsx("text", { x: "15", y: "20", textAnchor: "middle", fill: "#fff", fontSize: "16", fontWeight: "700", fontFamily: "serif", children: "H" })] }));
+const DemoPdpBanner = ({ onEnroll }) => {
+    const handleEarnCertificate = (e) => {
+        e.preventDefault();
+        const url = buildCheckoutUrl();
+        window.history.pushState({}, '', url);
+        onEnroll();
+    };
+    return (_jsxs("div", { className: "demo-pdp", children: [_jsxs("div", { className: "demo-pdp__hero", children: [_jsx("div", { className: "demo-pdp__hero-bg" }), _jsxs("div", { className: "demo-pdp__hero-content", children: [_jsxs("div", { className: "demo-pdp__main", children: [_jsxs("div", { className: "demo-pdp__institution", children: [_jsx(HarvardShield, {}), _jsxs("span", { className: "demo-pdp__institution-name", children: ["Harvard", _jsx("br", {}), "University"] })] }), _jsxs("h1", { className: "demo-pdp__title", children: ["Computer Science for", _jsx("br", {}), "Python Programming"] }), _jsxs("p", { className: "demo-pdp__meta", children: [_jsx("strong", { children: "2 courses" }), ", 6 months"] }), _jsx("button", { type: "button", className: "demo-pdp__cta-primary", onClick: handleEarnCertificate, children: "Earn a certificate" }), _jsxs("label", { className: "demo-pdp__consent", children: [_jsx("input", { type: "checkbox", className: "demo-pdp__checkbox", defaultChecked: false }), _jsx("span", { className: "demo-pdp__consent-text", children: "I would like to receive email from HarvardX and learn about other offerings related to Computer Science for Python Programming." })] })] }), _jsx("div", { className: "demo-pdp__sidebar", children: _jsxs("div", { className: "demo-pdp__card", children: [_jsx("p", { className: "demo-pdp__card-eyebrow", children: "Earn a certificate" }), _jsxs("h2", { className: "demo-pdp__card-title", children: ["Computer Science for", _jsx("br", {}), "Python Programming"] }), _jsxs("p", { className: "demo-pdp__card-enrollments", children: [_jsx("strong", { children: "9,341,307" }), " learners enrolled"] }), _jsxs("div", { className: "demo-pdp__card-courses", children: [_jsx("p", { className: "demo-pdp__card-courses-label", children: "There are 2 courses in this program" }), _jsxs("ul", { className: "demo-pdp__card-courses-list", children: [_jsx("li", { children: "CS50's Introduction to Computer Science" }), _jsx("li", { children: "CS50's Introduction to Programming with Python" })] })] }), _jsxs("div", { className: "demo-pdp__card-pricing", children: [_jsx("span", { className: "demo-pdp__card-price-original", children: "$618 USD" }), _jsx("span", { className: "demo-pdp__card-price-current", children: "$220" })] }), _jsx("button", { type: "button", className: "demo-pdp__cta-sidebar", onClick: handleEarnCertificate, children: "Earn a certificate" })] }) })] })] }), _jsxs("div", { className: "demo-pdp__features", children: [_jsxs("div", { className: "demo-pdp__feature", children: [_jsxs("svg", { className: "demo-pdp__feature-icon", width: "24", height: "24", viewBox: "0 0 24 24", fill: "none", children: [_jsx("circle", { cx: "12", cy: "12", r: "10", stroke: "#fff", strokeWidth: "1.5" }), _jsx("path", { d: "M12 7v5l3 3", stroke: "#fff", strokeWidth: "1.5", strokeLinecap: "round" })] }), _jsxs("div", { children: [_jsx("p", { className: "demo-pdp__feature-title", children: "Introductory" }), _jsx("p", { className: "demo-pdp__feature-desc", children: "No prior experience required" })] })] }), _jsxs("div", { className: "demo-pdp__feature", children: [_jsxs("svg", { className: "demo-pdp__feature-icon", width: "24", height: "24", viewBox: "0 0 24 24", fill: "none", children: [_jsx("path", { d: "M12 2L2 7l10 5 10-5-10-5z", stroke: "#fff", strokeWidth: "1.5", strokeLinejoin: "round" }), _jsx("path", { d: "M2 17l10 5 10-5M2 12l10 5 10-5", stroke: "#fff", strokeWidth: "1.5", strokeLinejoin: "round" })] }), _jsxs("div", { children: [_jsx("p", { className: "demo-pdp__feature-title", children: "Self-paced" }), _jsx("p", { className: "demo-pdp__feature-desc", children: "Progress at your own speed" })] })] }), _jsxs("div", { className: "demo-pdp__feature", children: [_jsxs("svg", { className: "demo-pdp__feature-icon", width: "24", height: "24", viewBox: "0 0 24 24", fill: "none", children: [_jsx("rect", { x: "3", y: "4", width: "18", height: "16", rx: "2", stroke: "#fff", strokeWidth: "1.5" }), _jsx("path", { d: "M3 10h18", stroke: "#fff", strokeWidth: "1.5" }), _jsx("path", { d: "M8 2v4M16 2v4", stroke: "#fff", strokeWidth: "1.5", strokeLinecap: "round" })] }), _jsxs("div", { children: [_jsx("p", { className: "demo-pdp__feature-title", children: "8 months" }), _jsx("p", { className: "demo-pdp__feature-desc", children: "1 - 14 hours per week" })] })] })] })] }));
+};
+export default DemoPdpBanner;
+//# sourceMappingURL=DemoPdpBanner.js.map

package/dist/components/DemoPdpBanner/DemoPdpBanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DemoPdpBanner.js","sourceRoot":"","sources":["../../../src/components/DemoPdpBanner/DemoPdpBanner.tsx"],"names":[],"mappings":";AAWA,MAAM,mBAAmB,GAAG,sCAAsC,CAAC;AACnE,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAEjC,SAAS,gBAAgB;;IACvB,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,IAAI,mBAAmB,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC;IAC/C,MAAM,YAAY,GAAG,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC;IACrD,MAAM,YAAY,GAAG,MAAA,MAAM,CAAC,kBAAkB,mCAAI,qBAAqB,CAAC;IAExE,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IAErC,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,iBAAiB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,CAC1B,eAAK,KAAK,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,iBAAa,MAAM,aAC5E,eAAM,KAAK,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,EAAE,EAAC,GAAG,EAAC,IAAI,EAAC,SAAS,GAAG,EACrD,eAAM,CAAC,EAAC,IAAI,EAAC,CAAC,EAAC,IAAI,EAAC,UAAU,EAAC,QAAQ,EAAC,IAAI,EAAC,MAAM,EAAC,QAAQ,EAAC,IAAI,EAAC,UAAU,EAAC,KAAK,EAAC,UAAU,EAAC,OAAO,kBAAS,IAC1G,CACP,CAAC;AAMF,MAAM,aAAa,GAAiC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;IACnE,MAAM,qBAAqB,GAAG,CAAC,CAAmB,EAAE,EAAE;QACpD,CAAC,CAAC,cAAc,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;QAC/B,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACtC,QAAQ,EAAE,CAAC;IACb,CAAC,CAAC;IAEF,OAAO,CACL,eAAK,SAAS,EAAC,UAAU,aAEvB,eAAK,SAAS,EAAC,gBAAgB,aAC7B,cAAK,SAAS,EAAC,mBAAmB,GAAG,EACrC,eAAK,SAAS,EAAC,wBAAwB,aACrC,eAAK,SAAS,EAAC,gBAAgB,aAC7B,eAAK,SAAS,EAAC,uBAAuB,aACpC,KAAC,aAAa,KAAG,EACjB,gBAAM,SAAS,EAAC,4BAA4B,wBACnC,cAAM,kBACR,IACH,EAEN,cAAI,SAAS,EAAC,iBAAiB,qCACT,cAAM,0BACvB,EAEL,aAAG,SAAS,EAAC,gBAAgB,aAC3B,yCAA0B,kBACxB,EAEJ,iBACE,IAAI,EAAC,QAAQ,EACb,SAAS,EAAC,uBAAuB,EACjC,OAAO,EAAE,qBAAqB,mCAGvB,EAGT,iBAAO,SAAS,EAAC,mBAAmB,aAClC,gBAAO,IAAI,EAAC,UAAU,EAAC,SAAS,EAAC,oBAAoB,EAAC,cAAc,EAAE,KAAK,GAAI,EAC/E,eAAM,SAAS,EAAC,wBAAwB,gJAGjC,IACD,IACJ,EAGN,cAAK,SAAS,EAAC,mBAAmB,YAChC,eAAK,SAAS,EAAC,gBAAgB,aAC7B,YAAG,SAAS,EAAC,wBAAwB,mCAAuB,EAC5D,cAAI,SAAS,EAAC,sBAAsB,qCACd,cAAM,0BACvB,EACL,aAAG,SAAS,EAAC,4BAA4B,aACvC,yCAA0B,0BACxB,EAEJ,eAAK,SAAS,EAAC,wBAAwB,aACrC,YAAG,SAAS,EAAC,8BAA8B,oDAEvC,EACJ,cAAI,SAAS,EAAC,6BAA6B,aACzC,mEAAqD,EACrD,0EAA4D,IACzD,IACD,EAEN,eAAK,SAAS,EAAC,wBAAwB,aACrC,eAAM,SAAS,EAAC,+BAA+B,yBAAgB,EAC/D,eAAM,SAAS,EAAC,8BAA8B,qBAAY,IACtD,EAEN,iBACE,IAAI,EAAC,QAAQ,EACb,SAAS,EAAC,uBAAuB,EACjC,OAAO,EAAE,qBAAqB,mCAGvB,IACL,GACF,IACF,IACF,EAGN,eAAK,SAAS,EAAC,oBAAoB,aACjC,eAAK,SAAS,EAAC,mBAAmB,aAChC,eAAK,SAAS,EAAC,wBAAwB,EAAC,KAAK,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,aAC5F,iBAAQ,EAAE,EAAC,IAAI,EAAC,EAAE,EAAC,IAAI,EAAC,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,WAAW,EAAC,KAAK,GAAG,EACjE,eAAM,CAAC,EAAC,aAAa,EAAC,MAAM,EAAC,MAAM,EAAC,WAAW,EAAC,KAAK,EAAC,aAAa,EAAC,OAAO,GAAG,IAC1E,EACN,0BACE,YAAG,SAAS,EAAC,yBAAyB,6BAAiB,EACvD,YAAG,SAAS,EAAC,wBAAwB,6CAAiC,IAClE,IACF,EACN,eAAK,SAAS,EAAC,mBAAmB,aAChC,eAAK,SAAS,EAAC,wBAAwB,EAAC,KAAK,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,aAC5F,eAAM,CAAC,EAAC,2BAA2B,EAAC,MAAM,EAAC,MAAM,EAAC,WAAW,EAAC,KAAK,EAAC,cAAc,EAAC,OAAO,GAAG,EAC7F,eAAM,CAAC,EAAC,gCAAgC,EAAC,MAAM,EAAC,MAAM,EAAC,WAAW,EAAC,KAAK,EAAC,cAAc,EAAC,OAAO,GAAG,IAC9F,EACN,0BACE,YAAG,SAAS,EAAC,yBAAyB,2BAAe,EACrD,YAAG,SAAS,EAAC,wBAAwB,2CAA+B,IAChE,IACF,EACN,eAAK,SAAS,EAAC,mBAAmB,aAChC,eAAK,SAAS,EAAC,wBAAwB,EAAC,KAAK,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,aAC5F,eAAM,CAAC,EAAC,GAAG,EAAC,CAAC,EAAC,GAAG,EAAC,KAAK,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,EAAE,EAAC,GAAG,EAAC,MAAM,EAAC,MAAM,EAAC,WAAW,EAAC,KAAK,GAAG,EAClF,eAAM,CAAC,EAAC,UAAU,EAAC,MAAM,EAAC,MAAM,EAAC,WAAW,EAAC,KAAK,GAAG,EACrD,eAAM,CAAC,EAAC,eAAe,EAAC,MAAM,EAAC,MAAM,EAAC,WAAW,EAAC,KAAK,EAAC,aAAa,EAAC,OAAO,GAAG,IAC5E,EACN,0BACE,YAAG,SAAS,EAAC,yBAAyB,yBAAa,EACnD,YAAG,SAAS,EAAC,wBAAwB,sCAA0B,IAC3D,IACF,IACF,IACF,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,aAAa,CAAC","sourcesContent":["import React from 'react';\n\ndeclare global {\n  interface Window {\n    activeProgramId?: string,\n    activeCourseUid?: string,\n    activeCourseRunKey?: string,\n    activeDiscountCode?: string,\n  }\n}\n\nconst DEFAULT_PROGRAM_UID = '01a06551-667b-7c85-9286-f6a60b9eb287';\nconst DEFAULT_DISCOUNT_CODE = '';\n\nfunction buildCheckoutUrl(): string {\n  const programUid = window.activeProgramId || DEFAULT_PROGRAM_UID;\n  const courseUid = window.activeCourseUid || '';\n  const courseRunKey = window.activeCourseRunKey || '';\n  const discountCode = window.activeDiscountCode ?? DEFAULT_DISCOUNT_CODE;\n\n  const params = new URLSearchParams();\n\n  if (courseUid && courseRunKey) {\n    params.set('course_uid', courseUid);\n    params.set('course_run_key', courseRunKey);\n  } else {\n    params.set('program_uid', programUid);\n  }\n\n  if (discountCode) {\n    params.set('discount_code', discountCode);\n  }\n\n  return `/aca-checkout?${params.toString()}`;\n}\n\nconst HarvardShield = () => (\n  <svg width=\"30\" height=\"30\" viewBox=\"0 0 30 30\" fill=\"none\" aria-hidden=\"true\">\n    <rect width=\"30\" height=\"30\" rx=\"2\" fill=\"#A41034\" />\n    <text x=\"15\" y=\"20\" textAnchor=\"middle\" fill=\"#fff\" fontSize=\"16\" fontWeight=\"700\" fontFamily=\"serif\">H</text>\n  </svg>\n);\n\ninterface DemoPdpBannerProps {\n  onEnroll: () => void,\n}\n\nconst DemoPdpBanner: React.FC<DemoPdpBannerProps> = ({ onEnroll }) => {\n  const handleEarnCertificate = (e: React.MouseEvent) => {\n    e.preventDefault();\n    const url = buildCheckoutUrl();\n    window.history.pushState({}, '', url);\n    onEnroll();\n  };\n\n  return (\n    <div className=\"demo-pdp\">\n      {/* ── Hero Section ── */}\n      <div className=\"demo-pdp__hero\">\n        <div className=\"demo-pdp__hero-bg\" />\n        <div className=\"demo-pdp__hero-content\">\n          <div className=\"demo-pdp__main\">\n            <div className=\"demo-pdp__institution\">\n              <HarvardShield />\n              <span className=\"demo-pdp__institution-name\">\n                Harvard<br />University\n              </span>\n            </div>\n\n            <h1 className=\"demo-pdp__title\">\n              Computer Science for<br />Python Programming\n            </h1>\n\n            <p className=\"demo-pdp__meta\">\n              <strong>2 courses</strong>, 6 months\n            </p>\n\n            <button\n              type=\"button\"\n              className=\"demo-pdp__cta-primary\"\n              onClick={handleEarnCertificate}\n            >\n              Earn a certificate\n            </button>\n\n            {/* eslint-disable-next-line jsx-a11y/label-has-associated-control */}\n            <label className=\"demo-pdp__consent\">\n              <input type=\"checkbox\" className=\"demo-pdp__checkbox\" defaultChecked={false} />\n              <span className=\"demo-pdp__consent-text\">\n                I would like to receive email from HarvardX and learn about other offerings related to\n                Computer Science for Python Programming.\n              </span>\n            </label>\n          </div>\n\n          {/* ── Right sidebar card ── */}\n          <div className=\"demo-pdp__sidebar\">\n            <div className=\"demo-pdp__card\">\n              <p className=\"demo-pdp__card-eyebrow\">Earn a certificate</p>\n              <h2 className=\"demo-pdp__card-title\">\n                Computer Science for<br />Python Programming\n              </h2>\n              <p className=\"demo-pdp__card-enrollments\">\n                <strong>9,341,307</strong> learners enrolled\n              </p>\n\n              <div className=\"demo-pdp__card-courses\">\n                <p className=\"demo-pdp__card-courses-label\">\n                  There are 2 courses in this program\n                </p>\n                <ul className=\"demo-pdp__card-courses-list\">\n                  <li>CS50&apos;s Introduction to Computer Science</li>\n                  <li>CS50&apos;s Introduction to Programming with Python</li>\n                </ul>\n              </div>\n\n              <div className=\"demo-pdp__card-pricing\">\n                <span className=\"demo-pdp__card-price-original\">$618 USD</span>\n                <span className=\"demo-pdp__card-price-current\">$220</span>\n              </div>\n\n              <button\n                type=\"button\"\n                className=\"demo-pdp__cta-sidebar\"\n                onClick={handleEarnCertificate}\n              >\n                Earn a certificate\n              </button>\n            </div>\n          </div>\n        </div>\n      </div>\n\n      {/* ── Bottom features bar ── */}\n      <div className=\"demo-pdp__features\">\n        <div className=\"demo-pdp__feature\">\n          <svg className=\"demo-pdp__feature-icon\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\">\n            <circle cx=\"12\" cy=\"12\" r=\"10\" stroke=\"#fff\" strokeWidth=\"1.5\" />\n            <path d=\"M12 7v5l3 3\" stroke=\"#fff\" strokeWidth=\"1.5\" strokeLinecap=\"round\" />\n          </svg>\n          <div>\n            <p className=\"demo-pdp__feature-title\">Introductory</p>\n            <p className=\"demo-pdp__feature-desc\">No prior experience required</p>\n          </div>\n        </div>\n        <div className=\"demo-pdp__feature\">\n          <svg className=\"demo-pdp__feature-icon\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\">\n            <path d=\"M12 2L2 7l10 5 10-5-10-5z\" stroke=\"#fff\" strokeWidth=\"1.5\" strokeLinejoin=\"round\" />\n            <path d=\"M2 17l10 5 10-5M2 12l10 5 10-5\" stroke=\"#fff\" strokeWidth=\"1.5\" strokeLinejoin=\"round\" />\n          </svg>\n          <div>\n            <p className=\"demo-pdp__feature-title\">Self-paced</p>\n            <p className=\"demo-pdp__feature-desc\">Progress at your own speed</p>\n          </div>\n        </div>\n        <div className=\"demo-pdp__feature\">\n          <svg className=\"demo-pdp__feature-icon\" width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" fill=\"none\">\n            <rect x=\"3\" y=\"4\" width=\"18\" height=\"16\" rx=\"2\" stroke=\"#fff\" strokeWidth=\"1.5\" />\n            <path d=\"M3 10h18\" stroke=\"#fff\" strokeWidth=\"1.5\" />\n            <path d=\"M8 2v4M16 2v4\" stroke=\"#fff\" strokeWidth=\"1.5\" strokeLinecap=\"round\" />\n          </svg>\n          <div>\n            <p className=\"demo-pdp__feature-title\">8 months</p>\n            <p className=\"demo-pdp__feature-desc\">1 - 14 hours per week</p>\n          </div>\n        </div>\n      </div>\n    </div>\n  );\n};\n\nexport default DemoPdpBanner;\n"]}

package/dist/style.scss

@@ -18,3 +18,4 @@
 @use "./styles/components/alacarteNotice.scss";
 @use "./styles/components/alacarteConfirmation.scss";
 @use "./styles/components/alacarteDebugPanel.scss"; // TEMPORARY — remove alongside AlacarteDebugPanel.
+@use "./styles/components/demoPdpBanner.scss"; // TEMPORARY — demo PDP banner for checkout demo.

package/dist/styles/components/demoPdpBanner.scss

@@ -0,0 +1,262 @@
+.demo-pdp {
+  margin: -1rem -1rem 0;
+  font-family: Inter, system-ui, -apple-system, sans-serif;
+
+  // ── Hero ──────────────────────────────────────────────────────────────────
+  &__hero {
+    position: relative;
+    background: #1c3325;
+    overflow: hidden;
+  }
+
+  &__hero-bg {
+    position: absolute;
+    inset: 0;
+    background:
+      radial-gradient(ellipse 60% 80% at 80% 40%, rgba(46, 80, 56, 0.9) 0%, transparent 70%),
+      radial-gradient(ellipse 40% 60% at 20% 60%, rgba(36, 65, 46, 0.7) 0%, transparent 60%);
+    pointer-events: none;
+  }
+
+  &__hero-content {
+    position: relative;
+    max-width: 1200px;
+    margin: 0 auto;
+    padding: 48px 40px 40px;
+    display: flex;
+    gap: 40px;
+    align-items: flex-start;
+  }
+
+  &__main {
+    flex: 1;
+    min-width: 0;
+  }
+
+  // ── Institution badge ─────────────────────────────────────────────────────
+  &__institution {
+    display: flex;
+    align-items: center;
+    gap: 10px;
+    margin-bottom: 24px;
+  }
+
+  &__institution-name {
+    color: #fff;
+    font-size: 0.8rem;
+    line-height: 1.25;
+    font-weight: 500;
+    letter-spacing: 0.02em;
+  }
+
+  // ── Title & meta ──────────────────────────────────────────────────────────
+  &__title {
+    color: #fff;
+    font-size: clamp(1.75rem, 3.5vw, 2.5rem);
+    font-weight: 700;
+    line-height: 1.2;
+    margin: 0 0 12px;
+    letter-spacing: -0.01em;
+  }
+
+  &__meta {
+    color: rgba(255, 255, 255, 0.85);
+    font-size: 1rem;
+    margin: 0 0 24px;
+
+    strong {
+      color: #fff;
+    }
+  }
+
+  // ── CTA buttons ───────────────────────────────────────────────────────────
+  &__cta-primary {
+    display: inline-block;
+    background: #3a7d44;
+    color: #fff;
+    font-weight: 600;
+    font-size: 0.9rem;
+    padding: 10px 24px;
+    border: none;
+    border-radius: 4px;
+    cursor: pointer;
+    transition: background 0.15s;
+    margin-bottom: 20px;
+
+    &:hover {
+      background: #2d6335;
+    }
+  }
+
+  // ── Consent checkbox ──────────────────────────────────────────────────────
+  &__consent {
+    display: flex;
+    align-items: flex-start;
+    gap: 8px;
+    cursor: pointer;
+    max-width: 480px;
+  }
+
+  &__checkbox {
+    margin-top: 3px;
+    flex-shrink: 0;
+    accent-color: #3a7d44;
+  }
+
+  &__consent-text {
+    color: rgba(255, 255, 255, 0.7);
+    font-size: 0.75rem;
+    line-height: 1.5;
+  }
+
+  // ── Sidebar card ──────────────────────────────────────────────────────────
+  &__sidebar {
+    flex-shrink: 0;
+    width: 320px;
+  }
+
+  &__card {
+    background: #fff;
+    border-radius: 8px;
+    padding: 24px;
+    box-shadow: 0 4px 24px rgba(0, 0, 0, 0.15);
+  }
+
+  &__card-eyebrow {
+    font-size: 0.75rem;
+    color: #666;
+    margin: 0 0 4px;
+    text-transform: none;
+  }
+
+  &__card-title {
+    font-size: 1.1rem;
+    font-weight: 700;
+    color: #1a1a1a;
+    margin: 0 0 8px;
+    line-height: 1.3;
+  }
+
+  &__card-enrollments {
+    font-size: 0.78rem;
+    color: #666;
+    margin: 0 0 16px;
+
+    strong {
+      color: #333;
+    }
+  }
+
+  &__card-courses {
+    margin-bottom: 16px;
+  }
+
+  &__card-courses-label {
+    background: #e8f5e9;
+    border-left: 3px solid #3a7d44;
+    padding: 8px 12px;
+    font-size: 0.78rem;
+    color: #2d6335;
+    margin: 0 0 8px;
+    font-weight: 500;
+  }
+
+  &__card-courses-list {
+    margin: 0;
+    padding-left: 20px;
+    font-size: 0.8rem;
+    color: #333;
+    line-height: 1.7;
+  }
+
+  &__card-pricing {
+    display: flex;
+    align-items: center;
+    gap: 12px;
+    margin-bottom: 16px;
+  }
+
+  &__card-price-original {
+    font-size: 0.85rem;
+    color: #999;
+    text-decoration: line-through;
+  }
+
+  &__card-price-current {
+    font-size: 1.25rem;
+    font-weight: 700;
+    color: #1a1a1a;
+  }
+
+  &__cta-sidebar {
+    display: block;
+    width: 100%;
+    background: #c44715;
+    color: #fff;
+    font-weight: 700;
+    font-size: 0.9rem;
+    padding: 12px 24px;
+    border: none;
+    border-radius: 4px;
+    cursor: pointer;
+    text-align: center;
+    transition: background 0.15s;
+
+    &:hover {
+      background: #a93b10;
+    }
+  }
+
+  // ── Features bar ──────────────────────────────────────────────────────────
+  &__features {
+    background: #111;
+    display: flex;
+    justify-content: center;
+    gap: 60px;
+    padding: 20px 40px;
+  }
+
+  &__feature {
+    display: flex;
+    align-items: center;
+    gap: 12px;
+  }
+
+  &__feature-icon {
+    flex-shrink: 0;
+    opacity: 0.8;
+  }
+
+  &__feature-title {
+    color: #fff;
+    font-size: 0.85rem;
+    font-weight: 600;
+    margin: 0;
+    line-height: 1.3;
+  }
+
+  &__feature-desc {
+    color: rgba(255, 255, 255, 0.6);
+    font-size: 0.72rem;
+    margin: 0;
+    line-height: 1.3;
+  }
+
+  // ── Responsive ────────────────────────────────────────────────────────────
+  @media (max-width: 768px) {
+    &__hero-content {
+      flex-direction: column;
+      padding: 32px 20px 28px;
+    }
+
+    &__sidebar {
+      width: 100%;
+    }
+
+    &__features {
+      flex-direction: column;
+      gap: 16px;
+      padding: 20px;
+    }
+  }
+}

package/dist/utils/provision.js

@@ -21,8 +21,8 @@ import { EnvironmentTypes, getAppConfig, getSiteConfig } from '@openedx/frontend
 import { appId } from '../constants';
 /** Hardcoded edX JWT used only for local/dev checkout against stage Viax. */
 const DEV_SESSION_BODY = {
-    payload: 'eyJhbGciOiJSUzUxMiIsImtpZCI6Imxtc3N0YWdlMDAyIiwidHlwIjoiSldUIn0.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',
-    signature: 'UOeR4ZPyFsfMZe8vSzhA4jY_6jBd0cU-PVNNHbf5z4OdIw5D0itG5uCU_Dn_ffJRpouw6mcWnCR1XMnfUShxeLKmU0Fncobx_Ei1G3_ntscMhAe3xXicSoQp3R2O6hq199egiMFBA6XoSIRJpIr5Wc9uukNKJn_9cS5Flmacn8arHTlptpcGpjBl4LdgTI6U2yAlQQkHjidd5xM0QF0QiwKTtUCTa-iAfJDtWn72DWayfaHWX10BEneE3tdjU2q1DVOmG3RON7heRTo45jxrYyYV0k6Kx2sxoEtx6KWxAKlAgAGSvAOsoajfu0gpDy7xdIduE-0L9kvJqJVAEdpSPA'
+    payload: 'eyJhbGciOiJSUzUxMiIsImtpZCI6Imxtc3N0YWdlMDAyIiwidHlwIjoiSldUIn0.eyJhdWQiOiJJbmtvY3VqTGlreXVjc0Vkd2lXYXRkZWJyRWFja21ldkxha0R1aWZLb29zaGtha1dvdyIsImV4cCI6MTc5MDc4NzIwNCwiZ3JhbnRfdHlwZSI6InBhc3N3b3JkIiwiaWF0IjoxNzkwNzgzNjA0LCJpc3MiOiJodHRwczovL2NvdXJzZXMuc3RhZ2UuZWR4Lm9yZy9vYXV0aDIiLCJwcmVmZXJyZWRfdXNlcm5hbWUiOiJBRF8yNjA5X0dQQ0EiLCJzY29wZXMiOlsidXNlcl9pZCIsImVtYWlsIiwicHJvZmlsZSJdLCJ2ZXJzaW9uIjoiMS4yLjAiLCJzdWIiOiIxZDMyZDQwN2YxMTJkZjNiMmRhNWRjNjkxNjM1NWIzYiIsImZpbHRlcnMiOlsidXNlcjptZSJdLCJpc19yZXN0cmljdGVkIjpmYWxzZSwiZW1haWxfdmVyaWZpZWQiOmZhbHNlLCJ1c2VyX2lkIjo1Mjg1ODg5LCJlbWFpbCI6ImdpZ2FsYTgzODVAYnVsbGJhYnkuY29tIiwibmFtZSI6ImFrYXNoIGRldmdhbiIsImZhbWlseV9uYW1lIjoiIiwiZ2l2ZW5fbmFtZSI6IiIsImFkbWluaXN0cmF0b3IiOmZhbHNlLCJzdXBlcnVzZXIiOmZhbHNlfQ',
+    signature: 'YfXk1hhknddOevZPbosTmuptBYftNO8k-4UDnR2x_HjoVIwnl92-ROXju5aKXz7fOvOamJCCldrtPg0hBtVF1J0Ah7AkBwiOyj3ScQ943vXAQ8vpqowleB0Eh2Zwi-Un5OW5kcZXzi3Axrz4z9OCGdrHapLXzClvXTTme_D6AhURBhmLQQJaQrw7yTFtssPzLudRNFauP-Fu8AMSuXqYz_bv8hWrrgGB-pqvLKYtbddNx8553bjp7jmxekieZuVxwnFT5m13wHhll13Nu0Vv5McpLIm0zGQeWJAo9zlgoUGLYybsCNuX5lZyzinSHVh5uquM-n6RNvujIs125Ordbw',
 };
 const EDX_JWT_PAYLOAD_COOKIE_NAMES = [
     'stage-edx-jwt-cookie-header-payload',

package/dist/utils/provision.js.map

@@ -1 +1 @@
-{"version":3,"file":"provision.js","sourceRoot":"","sources":["../../src/utils/provision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;;;;;;;;;;AAEH,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvF,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AA+BrC,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG;IACvB,OAAO,EAAE,kuBAAkuB;IAC3uB,SAAS,EAAE,wVAAwV;CACpW,CAAC;AAEF,MAAM,4BAA4B,GAAG;IACnC,qCAAqC;IACrC,+BAA+B;CAChC,CAAC;AAEF,MAAM,8BAA8B,GAAG;IACrC,gCAAgC;IAChC,0BAA0B;CAC3B,CAAC;AAEF,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM;SAC3B,KAAK,CAAC,IAAI,CAAC;SACX,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;IAE3D,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,OAAO,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAe;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB;IAC1B,MAAM,OAAO,GAAG,mBAAmB,CAAC,4BAA4B,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,mBAAmB,CAAC,8BAA8B,CAAC,CAAC;IAEtE,OAAO,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,oBAAoB,CAAC,IAA6B;;IACzD,MAAM,SAAS,GAAG,CAChB,MAAA,MAAA,MAAA,IAAI,CAAC,SAAS,mCAAI,IAAI,CAAC,KAAK,mCAAI,IAAI,CAAC,YAAY,mCAAI,IAAI,CAAC,WAAW,CAChD,CAAC;IACxB,MAAM,WAAW,GAAG,CAAC,MAAA,IAAI,CAAC,WAAW,mCAAI,IAAI,CAAC,YAAY,CAAuB,CAAC;IAElF,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACxE,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAE3E,OAAO;QACL,SAAS;QACT,WAAW;QACX,QAAQ,EAAE,IAAI,CAAC,QAA8B;QAC7C,SAAS,EAAE,IAAI,CAAC,SAA+B;QAC/C,QAAQ,EAAE,IAAI,CAAC,QAA8B;QAC7C,KAAK,EAAE,IAAI,CAAC,KAA2B;KACxC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAgB,gBAAgB,CAAC,UAAkB,EAAE,QAAgB;;QACzE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,yBAAyB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE;gBAC5F,WAAW,EAAE,SAAS;aACvB,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6B,CAAC;YACzD,OAAO,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QAChF,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CAAA;AAED,oEAAoE;AACpE,MAAM,UAAgB,aAAa;;QACjC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,mCAAmC,EAAE;YAC3D,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAsB,CAAC;QAClD,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;CAAA;AAED,2DAA2D;AAC3D,MAAM,UAAgB,kBAAkB,CACtC,cAAsB,EACtB,SAAiB;;QAEjB,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,UAAU;YAC5B,CAAC,iBAAG,UAAU,EAAE,SAAS,IAAK,UAAU,EACxC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QAE9B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE;YACtC,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,SAAS;YACtB,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAgC,CAAC;IAClD,CAAC;CAAA;AAED,SAAS,aAAa;IACpB,OAAO,aAAa,EAAE,CAAC,WAAW,KAAK,gBAAgB,CAAC,WAAW,CAAC;AACtE,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAgB,eAAe,CAAC,UAAkB;;QACtD,2EAA2E;QAC3E,wEAAwE;QACxE,gEAAgE;QAChE,IAAI,aAAa,EAAE,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;gBACtC,IAAI,SAAS,CAAC,gBAAgB,EAAE,CAAC;oBAC/B,MAAM,IAAI,GAAG,SAAS,CAAC,yBAAoD,CAAC;oBAC5E,IAAI,IAAI,EAAE,CAAC;wBACT,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;oBACpC,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,WAAM,CAAC;gBACP,iFAAiF;YACnF,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAEvE,IAAI,GAAa,CAAC;QAClB,IAAI,aAAa,EAAE,EAAE,CAAC;YACpB,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;gBAC5B,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;gBACtB,OAAO,kCACF,OAAO,KACV,cAAc,EAAE,kBAAkB,GACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;aACvC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;gBAC5B,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;gBACtB,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,yCAAyC,GAAG,CAAC,MAAM,uCAAuC,CAC3F,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAkD,CAAC;QAC9E,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAEpD,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;CAAA","sourcesContent":["/**\n * api/provision.ts — exchange the edX session for a viax token.\n *\n * {LMS_BASE_URL}/api/edx-session\n * The LMS reads the edX JWT from browser cookies, exchanges it with viax,\n * and returns a per-user token for authenticated API calls.\n *\n * Dev uses POST with a hardcoded JWT payload (local LMS cookie exchange is\n * unavailable). Stage and prod use POST and rely on the browser session cookies.\n */\n\nimport { EnvironmentTypes, getAppConfig, getSiteConfig } from '@openedx/frontend-base';\nimport { appId } from '../constants';\n\nexport interface EdxSessionResult {\n  viaxToken: string, // raw JWT — add 'Bearer ' prefix before use\n  customerUid: string,\n  partyUid?: string,\n  edxUserId?: string,\n  username?: string,\n  email?: string,\n}\n\nexport interface GeolocationResult {\n  status: 'resolved' | 'not_found' | 'error',\n  ip_address: string,\n  ip_address_type: string | null,\n  country_code: string | null,\n  country_name: string | null,\n  region_code: string | null,\n  region_name: string | null,\n  city: string | null,\n  postal_code: string | null,\n  latitude: number | null,\n  longitude: number | null,\n  accuracy_radius_km: number | null,\n  confidence: string | null,\n  source: string | null,\n  cache_status: string | null,\n  looked_up_at: string | null,\n  fallback_reason: string | null,\n}\n\n/** Hardcoded edX JWT used only for local/dev checkout against stage Viax. */\nconst DEV_SESSION_BODY = {\n  payload: 'eyJhbGciOiJSUzUxMiIsImtpZCI6Imxtc3N0YWdlMDAyIiwidHlwIjoiSldUIn0.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',\n  signature: 'UOeR4ZPyFsfMZe8vSzhA4jY_6jBd0cU-PVNNHbf5z4OdIw5D0itG5uCU_Dn_ffJRpouw6mcWnCR1XMnfUShxeLKmU0Fncobx_Ei1G3_ntscMhAe3xXicSoQp3R2O6hq199egiMFBA6XoSIRJpIr5Wc9uukNKJn_9cS5Flmacn8arHTlptpcGpjBl4LdgTI6U2yAlQQkHjidd5xM0QF0QiwKTtUCTa-iAfJDtWn72DWayfaHWX10BEneE3tdjU2q1DVOmG3RON7heRTo45jxrYyYV0k6Kx2sxoEtx6KWxAKlAgAGSvAOsoajfu0gpDy7xdIduE-0L9kvJqJVAEdpSPA'\n};\n\nconst EDX_JWT_PAYLOAD_COOKIE_NAMES = [\n  'stage-edx-jwt-cookie-header-payload',\n  'edx-jwt-cookie-header-payload',\n];\n\nconst EDX_JWT_SIGNATURE_COOKIE_NAMES = [\n  'stage-edx-jwt-cookie-signature',\n  'edx-jwt-cookie-signature',\n];\n\nfunction getCookieValue(name: string): string | null {\n  const cookie = document.cookie\n    .split('; ')\n    .find((cookiePart) => cookiePart.startsWith(`${name}=`));\n\n  if (!cookie) return null;\n\n  return decodeURIComponent(cookie.substring(name.length + 1));\n}\n\nfunction getFirstCookieValue(names: string[]): string | null {\n  for (const name of names) {\n    const value = getCookieValue(name);\n    if (value) return value;\n  }\n\n  return null;\n}\n\nfunction getEdxJwtCookieBody(): { payload: string, signature: string } | null {\n  const payload = getFirstCookieValue(EDX_JWT_PAYLOAD_COOKIE_NAMES);\n  const signature = getFirstCookieValue(EDX_JWT_SIGNATURE_COOKIE_NAMES);\n\n  return payload && signature ? { payload, signature } : null;\n}\n\nfunction parseSessionResponse(data: Record<string, unknown>): EdxSessionResult {\n  const viaxToken = (\n    data.viaxToken ?? data.token ?? data.access_token ?? data.accessToken\n  ) as string | undefined;\n  const customerUid = (data.customerUid ?? data.customer_uid) as string | undefined;\n\n  if (!viaxToken) throw new Error('Session response missing viax token.');\n  if (!customerUid) throw new Error('Session response missing customerUid.');\n\n  return {\n    viaxToken,\n    customerUid,\n    partyUid: data.partyUid as string | undefined,\n    edxUserId: data.edxUserId as string | undefined,\n    username: data.username as string | undefined,\n    email: data.email as string | undefined,\n  };\n}\n\n/**\n * Fetch the ISO 3166-1 alpha-2 country code from the user's edX account profile.\n * Returns null if the request fails or the field is absent.\n */\nexport async function fetchUserCountry(lmsBaseUrl: string, username: string): Promise<string | null> {\n  try {\n    const res = await fetch(`${lmsBaseUrl}/api/user/v1/accounts/${encodeURIComponent(username)}`, {\n      credentials: 'include',\n    });\n    if (!res.ok) return null;\n    const data = await res.json() as Record<string, unknown>;\n    return typeof data.country === 'string' && data.country ? data.country : null;\n  } catch {\n    return null;\n  }\n}\n\n/** Fetch the learner's current public IP for geolocation lookup. */\nexport async function fetchPublicIp(): Promise<string> {\n  const res = await fetch('https://api.ipify.org?format=json', {\n    headers: { Accept: 'application/json' },\n  });\n\n  if (!res.ok) {\n    throw new Error(`Public IP lookup failed (${res.status}).`);\n  }\n\n  const data = await res.json() as { ip?: unknown };\n  if (typeof data.ip !== 'string' || !data.ip) {\n    throw new Error('Public IP lookup returned an invalid address.');\n  }\n\n  return data.ip;\n}\n\n/** Look up geolocation data for an explicit IP address. */\nexport async function fetchIpGeolocation(\n  geolocationUrl: string,\n  ipAddress: string,\n): Promise<GeolocationResult> {\n  const edxJwtBody = getEdxJwtCookieBody();\n  const requestBody = edxJwtBody\n    ? { ip_address: ipAddress, ...edxJwtBody }\n    : { ip_address: ipAddress };\n\n  const res = await fetch(geolocationUrl, {\n    method: 'POST',\n    credentials: 'include',\n    headers: {\n      Accept: 'application/json',\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify(requestBody),\n  });\n\n  if (!res.ok) {\n    throw new Error(`Geolocation lookup failed (${res.status}).`);\n  }\n\n  return res.json() as Promise<GeolocationResult>;\n}\n\nfunction isDevelopment(): boolean {\n  return getSiteConfig().environment === EnvironmentTypes.DEVELOPMENT;\n}\n\n/** Exchange the learner's edX session (cookies) for a viax token. */\nexport async function fetchEdxSession(sessionUrl: string): Promise<EdxSessionResult> {\n  // When DEV_MOCK_SESSION is true, skip the network call entirely and return\n  // the hardcoded response from site config. This avoids CORS errors when\n  // testing over HTTPS locally (e.g. for Apple Pay / Google Pay).\n  if (isDevelopment()) {\n    try {\n      const appConfig = getAppConfig(appId);\n      if (appConfig.DEV_MOCK_SESSION) {\n        const mock = appConfig.DEV_MOCK_SESSION_RESPONSE as Record<string, unknown>;\n        if (mock) {\n          return parseSessionResponse(mock);\n        }\n      }\n    } catch {\n      // getAppConfig may throw if called before init — fall through to the real fetch.\n    }\n  }\n\n  const headers: Record<string, string> = { Accept: 'application/json' };\n\n  let res: Response;\n  if (isDevelopment()) {\n    res = await fetch(sessionUrl, {\n      method: 'POST',\n      credentials: 'include',\n      headers: {\n        ...headers,\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify(DEV_SESSION_BODY),\n    });\n  } else {\n    res = await fetch(sessionUrl, {\n      method: 'POST',\n      credentials: 'include',\n      headers,\n    });\n  }\n\n  if (!res.ok) {\n    throw new Error(\n      `Failed to establish checkout session (${res.status}). Please log into edX and try again.`,\n    );\n  }\n\n  const data = await res.json() as Record<string, unknown> & { error?: string };\n  if (data.error) throw new Error(String(data.error));\n\n  return parseSessionResponse(data);\n}\n"]}
+{"version":3,"file":"provision.js","sourceRoot":"","sources":["../../src/utils/provision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;;;;;;;;;;AAEH,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvF,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AA+BrC,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG;IACvB,OAAO,EAAE,4uBAA4uB;IACrvB,SAAS,EAAE,wVAAwV;CACpW,CAAC;AAEF,MAAM,4BAA4B,GAAG;IACnC,qCAAqC;IACrC,+BAA+B;CAChC,CAAC;AAEF,MAAM,8BAA8B,GAAG;IACrC,gCAAgC;IAChC,0BAA0B;CAC3B,CAAC;AAEF,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM;SAC3B,KAAK,CAAC,IAAI,CAAC;SACX,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;IAE3D,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,OAAO,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAe;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB;IAC1B,MAAM,OAAO,GAAG,mBAAmB,CAAC,4BAA4B,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,mBAAmB,CAAC,8BAA8B,CAAC,CAAC;IAEtE,OAAO,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,oBAAoB,CAAC,IAA6B;;IACzD,MAAM,SAAS,GAAG,CAChB,MAAA,MAAA,MAAA,IAAI,CAAC,SAAS,mCAAI,IAAI,CAAC,KAAK,mCAAI,IAAI,CAAC,YAAY,mCAAI,IAAI,CAAC,WAAW,CAChD,CAAC;IACxB,MAAM,WAAW,GAAG,CAAC,MAAA,IAAI,CAAC,WAAW,mCAAI,IAAI,CAAC,YAAY,CAAuB,CAAC;IAElF,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACxE,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAE3E,OAAO;QACL,SAAS;QACT,WAAW;QACX,QAAQ,EAAE,IAAI,CAAC,QAA8B;QAC7C,SAAS,EAAE,IAAI,CAAC,SAA+B;QAC/C,QAAQ,EAAE,IAAI,CAAC,QAA8B;QAC7C,KAAK,EAAE,IAAI,CAAC,KAA2B;KACxC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAgB,gBAAgB,CAAC,UAAkB,EAAE,QAAgB;;QACzE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,yBAAyB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE;gBAC5F,WAAW,EAAE,SAAS;aACvB,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6B,CAAC;YACzD,OAAO,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QAChF,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CAAA;AAED,oEAAoE;AACpE,MAAM,UAAgB,aAAa;;QACjC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,mCAAmC,EAAE;YAC3D,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAsB,CAAC;QAClD,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;CAAA;AAED,2DAA2D;AAC3D,MAAM,UAAgB,kBAAkB,CACtC,cAAsB,EACtB,SAAiB;;QAEjB,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,UAAU;YAC5B,CAAC,iBAAG,UAAU,EAAE,SAAS,IAAK,UAAU,EACxC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QAE9B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE;YACtC,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,SAAS;YACtB,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAgC,CAAC;IAClD,CAAC;CAAA;AAED,SAAS,aAAa;IACpB,OAAO,aAAa,EAAE,CAAC,WAAW,KAAK,gBAAgB,CAAC,WAAW,CAAC;AACtE,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAgB,eAAe,CAAC,UAAkB;;QACtD,2EAA2E;QAC3E,wEAAwE;QACxE,gEAAgE;QAChE,IAAI,aAAa,EAAE,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;gBACtC,IAAI,SAAS,CAAC,gBAAgB,EAAE,CAAC;oBAC/B,MAAM,IAAI,GAAG,SAAS,CAAC,yBAAoD,CAAC;oBAC5E,IAAI,IAAI,EAAE,CAAC;wBACT,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;oBACpC,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,WAAM,CAAC;gBACP,iFAAiF;YACnF,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAEvE,IAAI,GAAa,CAAC;QAClB,IAAI,aAAa,EAAE,EAAE,CAAC;YACpB,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;gBAC5B,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;gBACtB,OAAO,kCACF,OAAO,KACV,cAAc,EAAE,kBAAkB,GACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;aACvC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;gBAC5B,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;gBACtB,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,yCAAyC,GAAG,CAAC,MAAM,uCAAuC,CAC3F,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAkD,CAAC;QAC9E,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAEpD,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;CAAA","sourcesContent":["/**\n * api/provision.ts — exchange the edX session for a viax token.\n *\n * {LMS_BASE_URL}/api/edx-session\n * The LMS reads the edX JWT from browser cookies, exchanges it with viax,\n * and returns a per-user token for authenticated API calls.\n *\n * Dev uses POST with a hardcoded JWT payload (local LMS cookie exchange is\n * unavailable). Stage and prod use POST and rely on the browser session cookies.\n */\n\nimport { EnvironmentTypes, getAppConfig, getSiteConfig } from '@openedx/frontend-base';\nimport { appId } from '../constants';\n\nexport interface EdxSessionResult {\n  viaxToken: string, // raw JWT — add 'Bearer ' prefix before use\n  customerUid: string,\n  partyUid?: string,\n  edxUserId?: string,\n  username?: string,\n  email?: string,\n}\n\nexport interface GeolocationResult {\n  status: 'resolved' | 'not_found' | 'error',\n  ip_address: string,\n  ip_address_type: string | null,\n  country_code: string | null,\n  country_name: string | null,\n  region_code: string | null,\n  region_name: string | null,\n  city: string | null,\n  postal_code: string | null,\n  latitude: number | null,\n  longitude: number | null,\n  accuracy_radius_km: number | null,\n  confidence: string | null,\n  source: string | null,\n  cache_status: string | null,\n  looked_up_at: string | null,\n  fallback_reason: string | null,\n}\n\n/** Hardcoded edX JWT used only for local/dev checkout against stage Viax. */\nconst DEV_SESSION_BODY = {\n  payload: 'eyJhbGciOiJSUzUxMiIsImtpZCI6Imxtc3N0YWdlMDAyIiwidHlwIjoiSldUIn0.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',\n  signature: 'YfXk1hhknddOevZPbosTmuptBYftNO8k-4UDnR2x_HjoVIwnl92-ROXju5aKXz7fOvOamJCCldrtPg0hBtVF1J0Ah7AkBwiOyj3ScQ943vXAQ8vpqowleB0Eh2Zwi-Un5OW5kcZXzi3Axrz4z9OCGdrHapLXzClvXTTme_D6AhURBhmLQQJaQrw7yTFtssPzLudRNFauP-Fu8AMSuXqYz_bv8hWrrgGB-pqvLKYtbddNx8553bjp7jmxekieZuVxwnFT5m13wHhll13Nu0Vv5McpLIm0zGQeWJAo9zlgoUGLYybsCNuX5lZyzinSHVh5uquM-n6RNvujIs125Ordbw',\n};\n\nconst EDX_JWT_PAYLOAD_COOKIE_NAMES = [\n  'stage-edx-jwt-cookie-header-payload',\n  'edx-jwt-cookie-header-payload',\n];\n\nconst EDX_JWT_SIGNATURE_COOKIE_NAMES = [\n  'stage-edx-jwt-cookie-signature',\n  'edx-jwt-cookie-signature',\n];\n\nfunction getCookieValue(name: string): string | null {\n  const cookie = document.cookie\n    .split('; ')\n    .find((cookiePart) => cookiePart.startsWith(`${name}=`));\n\n  if (!cookie) return null;\n\n  return decodeURIComponent(cookie.substring(name.length + 1));\n}\n\nfunction getFirstCookieValue(names: string[]): string | null {\n  for (const name of names) {\n    const value = getCookieValue(name);\n    if (value) return value;\n  }\n\n  return null;\n}\n\nfunction getEdxJwtCookieBody(): { payload: string, signature: string } | null {\n  const payload = getFirstCookieValue(EDX_JWT_PAYLOAD_COOKIE_NAMES);\n  const signature = getFirstCookieValue(EDX_JWT_SIGNATURE_COOKIE_NAMES);\n\n  return payload && signature ? { payload, signature } : null;\n}\n\nfunction parseSessionResponse(data: Record<string, unknown>): EdxSessionResult {\n  const viaxToken = (\n    data.viaxToken ?? data.token ?? data.access_token ?? data.accessToken\n  ) as string | undefined;\n  const customerUid = (data.customerUid ?? data.customer_uid) as string | undefined;\n\n  if (!viaxToken) throw new Error('Session response missing viax token.');\n  if (!customerUid) throw new Error('Session response missing customerUid.');\n\n  return {\n    viaxToken,\n    customerUid,\n    partyUid: data.partyUid as string | undefined,\n    edxUserId: data.edxUserId as string | undefined,\n    username: data.username as string | undefined,\n    email: data.email as string | undefined,\n  };\n}\n\n/**\n * Fetch the ISO 3166-1 alpha-2 country code from the user's edX account profile.\n * Returns null if the request fails or the field is absent.\n */\nexport async function fetchUserCountry(lmsBaseUrl: string, username: string): Promise<string | null> {\n  try {\n    const res = await fetch(`${lmsBaseUrl}/api/user/v1/accounts/${encodeURIComponent(username)}`, {\n      credentials: 'include',\n    });\n    if (!res.ok) return null;\n    const data = await res.json() as Record<string, unknown>;\n    return typeof data.country === 'string' && data.country ? data.country : null;\n  } catch {\n    return null;\n  }\n}\n\n/** Fetch the learner's current public IP for geolocation lookup. */\nexport async function fetchPublicIp(): Promise<string> {\n  const res = await fetch('https://api.ipify.org?format=json', {\n    headers: { Accept: 'application/json' },\n  });\n\n  if (!res.ok) {\n    throw new Error(`Public IP lookup failed (${res.status}).`);\n  }\n\n  const data = await res.json() as { ip?: unknown };\n  if (typeof data.ip !== 'string' || !data.ip) {\n    throw new Error('Public IP lookup returned an invalid address.');\n  }\n\n  return data.ip;\n}\n\n/** Look up geolocation data for an explicit IP address. */\nexport async function fetchIpGeolocation(\n  geolocationUrl: string,\n  ipAddress: string,\n): Promise<GeolocationResult> {\n  const edxJwtBody = getEdxJwtCookieBody();\n  const requestBody = edxJwtBody\n    ? { ip_address: ipAddress, ...edxJwtBody }\n    : { ip_address: ipAddress };\n\n  const res = await fetch(geolocationUrl, {\n    method: 'POST',\n    credentials: 'include',\n    headers: {\n      Accept: 'application/json',\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify(requestBody),\n  });\n\n  if (!res.ok) {\n    throw new Error(`Geolocation lookup failed (${res.status}).`);\n  }\n\n  return res.json() as Promise<GeolocationResult>;\n}\n\nfunction isDevelopment(): boolean {\n  return getSiteConfig().environment === EnvironmentTypes.DEVELOPMENT;\n}\n\n/** Exchange the learner's edX session (cookies) for a viax token. */\nexport async function fetchEdxSession(sessionUrl: string): Promise<EdxSessionResult> {\n  // When DEV_MOCK_SESSION is true, skip the network call entirely and return\n  // the hardcoded response from site config. This avoids CORS errors when\n  // testing over HTTPS locally (e.g. for Apple Pay / Google Pay).\n  if (isDevelopment()) {\n    try {\n      const appConfig = getAppConfig(appId);\n      if (appConfig.DEV_MOCK_SESSION) {\n        const mock = appConfig.DEV_MOCK_SESSION_RESPONSE as Record<string, unknown>;\n        if (mock) {\n          return parseSessionResponse(mock);\n        }\n      }\n    } catch {\n      // getAppConfig may throw if called before init — fall through to the real fetch.\n    }\n  }\n\n  const headers: Record<string, string> = { Accept: 'application/json' };\n\n  let res: Response;\n  if (isDevelopment()) {\n    res = await fetch(sessionUrl, {\n      method: 'POST',\n      credentials: 'include',\n      headers: {\n        ...headers,\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify(DEV_SESSION_BODY),\n    });\n  } else {\n    res = await fetch(sessionUrl, {\n      method: 'POST',\n      credentials: 'include',\n      headers,\n    });\n  }\n\n  if (!res.ok) {\n    throw new Error(\n      `Failed to establish checkout session (${res.status}). Please log into edX and try again.`,\n    );\n  }\n\n  const data = await res.json() as Record<string, unknown> & { error?: string };\n  if (data.error) throw new Error(String(data.error));\n\n  return parseSessionResponse(data);\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edx/frontend-app-alacarte-checkout",
-  "version": "1.10.0",
+  "version": "1.11.0",
   "description": "alacarte Checkout Frontend application",
   "repository": {
     "type": "git",