marcus06 2c12ba586e feat(sca): charge checkout as customer-initiated transaction (#57) ...

Drop off_session from the initial PaymentIntent so the checkout charge is a Customer-Initiated Transaction (the customer is present in the TUI), not a Merchant-Initiated Transaction. MIT exemptions require a stored mandate we never capture; as a CIT, an SCA challenge surfaces as status=requires_action, the path the handler already had. The re-confirm in respondRequiresAction and the authentication_required error branch remain as defensive fallbacks. Source: stripe-samples accept-a-payment custom-payment-flow (no off_session on customer-present confirms).

Also clarify the MAX_ORDER_CENTS TRA-ceiling anchor comment as an approximate USD/EUR figure (config.go), and carry an unrelated 1-line spend-limit input width fix in pkg/tui/account.go.

Tests: add paymentIntentNewFn stub seam, TestConvertCartIsCustomerInitiated (asserts no off_session) and TestConvertCartRequiresAction (202 + redirect + audit row).

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-18 10:48:00 +02:00

..

handlers

feat(sca): charge checkout as customer-initiated transaction (#57)

2026-06-18 10:48:00 +02:00

middleware

docs(docs): update docs to get rid of gopls warnings. update some code to newer standards (#49)

2026-06-14 21:42:02 +02:00

routes

feat(sca): add customer-set spend limit (#55)

2026-06-17 13:25:04 +02:00

doc.go

docs(docs): update docs to get rid of gopls warnings. update some code to newer standards (#49)

2026-06-14 21:42:02 +02:00

main_test.go

test(api): cover everyTick helper (#52)

2026-06-16 13:34:55 +02:00

main.go

refactor(api): extract everyTick helper for reconciler goroutines (#51)

2026-06-15 10:17:02 +02:00