1060608 - [tracking] Enable server-less payments to hosted apps

Status: RESOLVED FIXED

(Marketplace Graveyard :: Payments/Refunds, defect, P1)

Description

[Kumar McMillan [:kumar]]

server-less payments (bug 944480) were originally designed as a solution for packaged apps but they add a lot of benefit to hosted apps too:

- developer does not have to compile a crypto library for validating JWT signatures
- developer doesn't have to maintain a catalog of products
- developer doesn't have to write custom code for verifying/restoring products

Let's make changes to the fxpay lib so that it can support hosted apps

Comment 2

[Kumar McMillan [:kumar]]

To clarify, this bug is to allow a developer who has a hosted app to include the fxpay.js library in their app to offer in-app purchases. There may be only minimal changes needed, I'm not sure.

Comment 3

[Kumar McMillan [:kumar]]

When running fxpay from a hosted app we discovered that this header will be needed from API responses:

Access-Control-Request-Headers: x-fxpay-version 

This is so fxpay can pass its version header when making an API request.

http://www.html5rocks.com/en/tutorials/cors/#toc-adding-cors-support-to-the-server

Comment 4

[Kumar McMillan [:kumar]]

Because of bug 1038533 there is currently no way to test desktop payments from fxpay so I'm making this a blocker. It's not strictly a blocker feature wise but logistically I think it is.

Comment 5

[Kumar McMillan [:kumar]]

see bug 1104371 about comment #3