@routedock/routedock 0.1.0 → 0.1.2

package/src/provider/x402Handler.ts

@@ -1,6 +1,8 @@
 import type { Request, Response, NextFunction, RequestHandler } from 'express'
 import { Keypair } from '@stellar/stellar-sdk'
 import { ExactStellarScheme as ExactStellarFacilitatorScheme } from '@x402/stellar/exact/facilitator'
+import { ExactStellarScheme as ExactStellarServerScheme } from '@x402/stellar/exact/server'
+import { HTTPFacilitatorClient, x402ResourceServer } from '@x402/core/server'
 import { createEd25519Signer } from '@x402/stellar'
 import {
   decodePaymentSignatureHeader,
@@ -17,6 +19,8 @@ const CAIP2: Record<Network, X402Network> = {
   mainnet: 'stellar:pubnet',
 }
 
+const OZ_FACILITATOR_URL = 'https://channels.openzeppelin.com/x402'
+
 export interface X402HandlerOptions {
   payeeSecretKey: string
   network: Network
@@ -32,10 +36,29 @@ export function createX402Handler(opts: X402HandlerOptions): RequestHandler {
   const payeeKeypair = Keypair.fromSecret(opts.payeeSecretKey)
   const signer = createEd25519Signer(opts.payeeSecretKey, caip2)
 
-  const facilitatorScheme = new ExactStellarFacilitatorScheme([signer], {
+  const useOzFacilitator = opts.network === 'mainnet' && opts.facilitatorApiKey
+
+  // Mainnet: OZ hosted facilitator via x402ResourceServer
+  // Testnet: local ExactStellarFacilitatorScheme (OZ facilitator does not serve testnet)
+  const localFacilitator = new ExactStellarFacilitatorScheme([signer], {
     areFeesSponsored: true,
   })
 
+  let ozServer: x402ResourceServer | null = null
+  if (useOzFacilitator) {
+    const apiKey = opts.facilitatorApiKey!
+    const facilitator = new HTTPFacilitatorClient({
+      url: OZ_FACILITATOR_URL,
+      createAuthHeaders: async () => ({
+        verify: { Authorization: `Bearer ${apiKey}` },
+        settle: { Authorization: `Bearer ${apiKey}` },
+        supported: { Authorization: `Bearer ${apiKey}` },
+      }),
+    })
+    ozServer = new x402ResourceServer(facilitator)
+    ozServer.register(caip2, new ExactStellarServerScheme())
+  }
+
   const amountInBaseUnits = String(Math.round(parseFloat(opts.amount) * 1e7))
   const requirements = {
     scheme: 'exact' as const,
@@ -46,7 +69,7 @@ export function createX402Handler(opts: X402HandlerOptions): RequestHandler {
     maxTimeoutSeconds: 60,
     extra: {
       areFeesSponsored: true,
-      facilitatorAddresses: [payeeKeypair.publicKey()],
+      ...(useOzFacilitator ? {} : { facilitatorAddresses: [payeeKeypair.publicKey()] }),
     },
   }
 
@@ -55,54 +78,83 @@ export function createX402Handler(opts: X402HandlerOptions): RequestHandler {
       const paymentHeader = (req.headers['payment-signature'] ?? req.headers['x-payment']) as string | undefined
 
       if (!paymentHeader) {
-        const x402Response = {
-          x402Version: 2,
-          resource: {
+        if (ozServer) {
+          const resourceInfo = {
             url: `${req.protocol}://${req.get('host') ?? ''}${req.originalUrl}`,
             description: opts.manifest.name,
-          },
-          accepts: [requirements],
+          }
+          const paymentRequired = await ozServer.createPaymentRequiredResponse(
+            [requirements],
+            resourceInfo,
+          )
+          res
+            .status(402)
+            .setHeader('Content-Type', 'application/json')
+            .setHeader('X-Payment-Requirements', encodePaymentRequiredHeader(paymentRequired))
+            .json({ error: 'Payment Required' })
+        } else {
+          const x402Response = {
+            x402Version: 2,
+            resource: {
+              url: `${req.protocol}://${req.get('host') ?? ''}${req.originalUrl}`,
+              description: opts.manifest.name,
+            },
+            accepts: [requirements],
+          }
+          res
+            .status(402)
+            .setHeader('Content-Type', 'application/json')
+            .setHeader('X-Payment-Requirements', encodePaymentRequiredHeader(x402Response))
+            .json({ error: 'Payment Required' })
         }
-        res
-          .status(402)
-          .setHeader('Content-Type', 'application/json')
-          .setHeader('X-Payment-Requirements', encodePaymentRequiredHeader(x402Response))
-          .json({ error: 'Payment Required' })
         return
       }
 
       const payload = decodePaymentSignatureHeader(paymentHeader)
-      const verifyResult = await facilitatorScheme.verify(
-        payload as Parameters<typeof facilitatorScheme.verify>[0],
-        requirements,
-      )
+      let txHash: string | null = null
 
-      if (!verifyResult.isValid) {
-        res.status(401).json({
-          error: 'Payment verification failed',
-          reason: (verifyResult as { invalidReason?: string }).invalidReason,
-        })
-        return
+      if (ozServer) {
+        const settleResult = await ozServer.settlePayment(payload, requirements)
+        txHash = (settleResult as { transaction?: string }).transaction ?? null
+        if (settleResult) {
+          res.setHeader(
+            'X-Payment-Response',
+            encodePaymentResponseHeader(
+              settleResult as Parameters<typeof encodePaymentResponseHeader>[0],
+            ),
+          )
+        }
+      } else {
+        const verifyResult = await localFacilitator.verify(
+          payload as Parameters<typeof localFacilitator.verify>[0],
+          requirements,
+        )
+        if (!verifyResult.isValid) {
+          res.status(401).json({
+            error: 'Payment verification failed',
+            reason: (verifyResult as { invalidReason?: string }).invalidReason,
+          })
+          return
+        }
+        const settleResult = await localFacilitator.settle(
+          payload as Parameters<typeof localFacilitator.settle>[0],
+          requirements,
+        )
+        txHash = (settleResult as { transaction?: string }).transaction ?? null
+        if (settleResult) {
+          res.setHeader(
+            'X-Payment-Response',
+            encodePaymentResponseHeader(
+              settleResult as Parameters<typeof encodePaymentResponseHeader>[0],
+            ),
+          )
+        }
       }
 
-      const settleResult = await facilitatorScheme.settle(
-        payload as Parameters<typeof facilitatorScheme.settle>[0],
-        requirements,
-      )
-
-      const txHash = (settleResult as { transaction?: string }).transaction ?? null
       if (txHash && opts.onSettled) {
         await opts.onSettled(txHash, opts.amount, 'x402')
       }
 
-      if (settleResult) {
-        res.setHeader(
-          'X-Payment-Response',
-          encodePaymentResponseHeader(
-            settleResult as Parameters<typeof encodePaymentResponseHeader>[0],
-          ),
-        )
-      }
       next()
     } catch (err) {
       console.error('[x402] Settlement error:', err)