wiki-plugin-shoppe 0.0.17 → 0.0.19

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wiki-plugin-shoppe",
-  "version": "0.0.17",
+  "version": "0.0.19",
   "description": "Multi-tenant digital goods shoppe for federated wiki, powered by Sanora",
   "keywords": [
     "wiki",

package/server/server.js

@@ -45,8 +45,7 @@ function getSanoraUrl() {
   return `http://localhost:${process.env.SANORA_PORT || 7243}`;
 }
 
-function getAddieUrl(wikiOrigin) {
-  if (wikiOrigin) return `${wikiOrigin}/plugin/allyabase/addie`;
+function getAddieUrl() {
   try { return new URL(getSanoraUrl()).origin + '/plugin/allyabase/addie'; } catch { /* fall through */ }
   return `http://localhost:${process.env.ADDIE_PORT || 3005}`;
 }
@@ -60,7 +59,7 @@ function saveBuyers(buyers) {
   fs.writeFileSync(BUYERS_FILE, JSON.stringify(buyers, null, 2));
 }
 
-async function getOrCreateBuyerAddieUser(recoveryKey, productId, wikiOrigin) {
+async function getOrCreateBuyerAddieUser(recoveryKey, productId) {
   const buyerKey = recoveryKey + productId;
   const buyers = loadBuyers();
   if (buyers[buyerKey]) return buyers[buyerKey];
@@ -71,7 +70,7 @@ async function getOrCreateBuyerAddieUser(recoveryKey, productId, wikiOrigin) {
   const message = timestamp + addieKeys.pubKey;
   const signature = await sessionless.sign(message);
 
-  const resp = await fetch(`${getAddieUrl(wikiOrigin)}/user/create`, {
+  const resp = await fetch(`${getAddieUrl()}/user/create`, {
     method: 'PUT',
     headers: { 'Content-Type': 'application/json' },
     body: JSON.stringify({ timestamp, pubKey: addieKeys.pubKey, signature })
@@ -1079,7 +1078,6 @@ async function startServer(params) {
       if (!recoveryKey || !productId) return res.status(400).json({ error: 'recoveryKey and productId required' });
 
       const sanoraUrlInternal = getSanoraUrl();
-      const wikiOrigin = `${req.protocol}://${req.get('host')}`;
       const recoveryHash = recoveryKey + productId;
 
       // Check if already purchased
@@ -1094,14 +1092,19 @@ async function startServer(params) {
       const amount = product?.price || 0;
 
       // Create/retrieve buyer Addie user
-      const buyer = await getOrCreateBuyerAddieUser(recoveryKey, productId, wikiOrigin);
+      const buyer = await getOrCreateBuyerAddieUser(recoveryKey, productId);
 
       // Create Stripe intent via Addie
       const payees = tenant.addieKeys ? [{ pubKey: tenant.addieKeys.pubKey, amount }] : [];
-      const intentResp = await fetch(`${getAddieUrl(wikiOrigin)}/user/${buyer.uuid}/processor/stripe/intent`, {
+      const buyerKeys = { pubKey: buyer.pubKey, privateKey: buyer.privateKey };
+      sessionless.getKeys = () => buyerKeys;
+      const intentTimestamp = Date.now().toString();
+      const intentMessage = intentTimestamp + buyer.uuid + amount + 'USD';
+      const intentSignature = await sessionless.sign(intentMessage);
+      const intentResp = await fetch(`${getAddieUrl()}/user/${buyer.uuid}/processor/stripe/intent`, {
         method: 'PUT',
         headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({ timestamp: Date.now().toString(), amount, currency: 'USD', payees })
+        body: JSON.stringify({ timestamp: intentTimestamp, amount, currency: 'USD', payees, signature: intentSignature })
       });
 
       const intentJson = await intentResp.json();