commerce/crates/server/ at main · lgtm.shop/commerce · Tangled

lgtm.shop / commerce

5

Pilot atproto-native commerce backend

5

commerce / crates / server /

at main 3 folders 1 file

Nate Moore fix(stripe): make automatic tax opt-in (was hardcoded on, broke checkout) 9hrs ago

server: admin atproto OAuth gate, Maud layout, rust-embed static assets (T43) - Add admin module with rust-embed Assets serving /admin/static/* - Implement is_authorized_admin (DID equality gate) + SESSION_DID_KEY - Implement require_admin session guard (redirect unauthenticated → start) - Implement auth_routes: POST /admin/auth/atproto/start (PKCE) + GET callback (token exchange is M4-deferred stub; CSRF validation is live) - Maud layout() returns Html<String> via axum::response::Html (maud 0.26 has no axum feature) - Add PublicWriter trait + PublicWriteOut to AppState; ProductionPublicWriter in main.rs - Update all AppState initializers (test_support, route tests) with public_writer field - Session redirect test: assert is_redirection() (axum Redirect::to → 303, not 302) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

1 month ago

fix(stripe): make automatic tax opt-in (was hardcoded on, broke checkout) Prod checkout returned 502 for every order: the handler forwards a valid session to Stripe, but the form hardcoded automatic_tax[enabled]=true, and Stripe rejects the session with a 400 ("You must have a valid head office address to enable automatic tax") unless the account has a head-office address + tax registrations. (The v0.3.1 error mapping surfaced this cleanly in the logs — it is a Stripe account-config requirement, not a crash.) Gate automatic tax behind LGTM_STRIPE_AUTOMATIC_TAX=1 (config_for["stripe"] ["automatic_tax"]), default off, so the reference impl creates checkout sessions without requiring Stripe Tax setup. Extract checkout_form() so the form (incl. the on/off tax field + non-empty product name + redirect URLs) is unit-tested.

9 hours ago

feat(config): add LGTM_SHOP_URL to derive both checkout redirect URLs Stripe success/cancel redirects belong on the storefront (www), not the backend public_url. Add LGTM_SHOP_URL as the storefront base so a single var drives both redirects; falls back to public_url when unset. LGTM_CHECKOUT_SUCCESS_URL / LGTM_CHECKOUT_CANCEL_URL still override individually. Documented in .env.example and the README env table.

22 hours ago

fix(boot): run apalis PostgresStorage::setup after migrations so job enqueue works; default-run=lgtm-backend Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

1 month ago