@three-ws/x402-payment-modal 1.1.0

package/server/express.js

@@ -0,0 +1,44 @@
+// Express adapter for the Solana checkout endpoints.
+//
+//   import express from 'express';
+//   import { x402CheckoutRouter } from '@three-ws/x402-payment-modal/server/express';
+//
+//   const app = express();
+//   app.use(express.json());
+//   app.use('/api/x402-checkout', x402CheckoutRouter({ rpcUrl: process.env.SOLANA_RPC_URL }));
+//
+// The modal POSTs to `/api/x402-checkout?action=prepare` and `?action=encode`.
+// CORS is permissive (the drop-in modal runs on any origin); tighten `origin`
+// via the option if you only serve your own pages.
+
+import { handleCheckout } from './checkout.js';
+
+/**
+ * @param {object} [options]
+ * @param {string} [options.rpcUrl]        Solana mainnet RPC URL
+ * @param {string} [options.devnetRpcUrl]  Solana devnet RPC URL
+ * @param {string} [options.origin]        Access-Control-Allow-Origin (default '*')
+ * @returns {import('express').RequestHandler}
+ */
+export function x402CheckoutRouter(options = {}) {
+	const allowOrigin = options.origin || '*';
+	return async function x402CheckoutHandler(req, res) {
+		res.setHeader('Access-Control-Allow-Origin', allowOrigin);
+		res.setHeader('Access-Control-Allow-Methods', 'POST,OPTIONS');
+		res.setHeader('Access-Control-Allow-Headers', 'content-type');
+		if (req.method === 'OPTIONS') {
+			res.status(204).end();
+			return;
+		}
+		if (req.method !== 'POST') {
+			res.status(405).json({ error: 'method_not_allowed', error_description: 'use POST' });
+			return;
+		}
+		const action = req.query?.action;
+		const body = req.body && typeof req.body === 'object' ? req.body : {};
+		const { status, body: out } = await handleCheckout({ action, body, options });
+		res.status(status).json(out);
+	};
+}
+
+export default x402CheckoutRouter;

package/server/vercel.js

@@ -0,0 +1,54 @@
+// Vercel / Next.js (pages API) adapter for the Solana checkout endpoints.
+//
+// Save as `api/x402-checkout.js`:
+//
+//   export { default } from '@three-ws/x402-payment-modal/server/vercel';
+//
+// or with options:
+//
+//   import { createVercelCheckoutHandler } from '@three-ws/x402-payment-modal/server/vercel';
+//   export default createVercelCheckoutHandler({ rpcUrl: process.env.SOLANA_RPC_URL });
+//
+// The modal POSTs to this route with `?action=prepare` and `?action=encode`.
+
+import { handleCheckout } from './checkout.js';
+
+async function readJsonBody(req) {
+	// Next.js pages API and Vercel Node functions usually pre-parse JSON into
+	// req.body. When they don't (raw runtime), read the stream ourselves.
+	if (req.body && typeof req.body === 'object') return req.body;
+	if (typeof req.body === 'string' && req.body) {
+		try { return JSON.parse(req.body); } catch { return {}; }
+	}
+	const chunks = [];
+	for await (const chunk of req) chunks.push(chunk);
+	if (!chunks.length) return {};
+	try { return JSON.parse(Buffer.concat(chunks).toString('utf8')); } catch { return {}; }
+}
+
+/**
+ * @param {object} [options]  { rpcUrl, devnetRpcUrl, origin }
+ * @returns {(req: any, res: any) => Promise<void>}
+ */
+export function createVercelCheckoutHandler(options = {}) {
+	const allowOrigin = options.origin || '*';
+	return async function handler(req, res) {
+		res.setHeader('Access-Control-Allow-Origin', allowOrigin);
+		res.setHeader('Access-Control-Allow-Methods', 'POST,OPTIONS');
+		res.setHeader('Access-Control-Allow-Headers', 'content-type');
+		if (req.method === 'OPTIONS') {
+			res.status(204).end();
+			return;
+		}
+		if (req.method !== 'POST') {
+			res.status(405).json({ error: 'method_not_allowed', error_description: 'use POST' });
+			return;
+		}
+		const action = req.query?.action;
+		const body = await readJsonBody(req);
+		const { status, body: out } = await handleCheckout({ action, body, options });
+		res.status(status).json(out);
+	};
+}
+
+export default createVercelCheckoutHandler();