zeekay 2512994f44 fix(checkout): commerce catalog is sole price authority; harden clientIP ...

- Delete the agency price map: pricing lived in TWO places (browser + BFF)
  and commerce silently IGNORED the raw amount, so a $9,999 plan minted at
  the $50 empty-hat fallback. BFF now sends a catalog REFERENCE (productSlug)
  and commerce prices from the org's own stored listing — one authority.
- offeredPlans is membership only (no prices) so an unknown plan still 400s
  without duplicating or contradicting the catalog.
- clientIP: trust only ingress-set hops. Prefer X-Real-IP; fall back to the
  RIGHTMOST X-Forwarded-For entry (appended by our proxy), never the
  client-spoofable leftmost — a forged leftmost could evade the mint limiter.
- Tests updated to assert the catalog-reference contract + clientIP trust.

2026-07-02 08:51:45 -07:00

..

static

feat(checkout): server-side BFF to close P0 anon-mint regression — 0.1.1

2026-07-02 07:23:18 -07:00

checkout_test.go

fix(checkout): commerce catalog is sole price authority; harden clientIP

2026-07-02 08:51:45 -07:00

checkout.go

fix(checkout): commerce catalog is sole price authority; harden clientIP

2026-07-02 08:51:45 -07:00

embed.go

feat(checkout): server-side BFF to close P0 anon-mint regression — 0.1.1

2026-07-02 07:23:18 -07:00

main.go

feat(checkout): BFF accepts service OR storefront token, always pins X-Org-Id — 0.1.2

2026-07-02 07:32:55 -07:00

spa.go

feat(checkout): server-side BFF to close P0 anon-mint regression — 0.1.1

2026-07-02 07:23:18 -07:00