1079427 - remove systemXHR requirement for serverless in-app products

Status: RESOLVED FIXED

(Marketplace Graveyard :: Payments/Refunds, defect, P2)

Description

[Kumar McMillan [:kumar]]

In order to support non-privileged packaged apps (bug 1079419), let's remove the systemXHR requirement. The following changes need to be made:

- the fxpay lib should not use {mozSystem: true} in the XHR request
- the zamboni API needs to respond with Access-Control-Request-Headers: x-fxpay-version for CORS to work. See http://www.html5rocks.com/en/tutorials/cors/#toc-adding-cors-support-to-the-server
- validation of systemXHR in fxpay should be removed
- example app should no longer declare systemXHR permission

Comment 1

[Kumar McMillan [:kumar]]

Attachment: fxpay.patch

proof of concept patch to lib/fxpay.js that gets things working

Comment 2

[Kumar McMillan [:kumar]]

This was fixed as part of bug 1104371 in https://github.com/mozilla/fxpay/pull/71