taler/wallet-core
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Activity

HTTP 402 - payment execution mechanism sample

Browse Source
This commit is contained in:
Florian Dold 2016-08-23 16:04:01 +02:00
parent 1060315c9d
commit 28e392c5e7
1 changed files with 23 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
articles/ui/ui.tex
View File

@ -860,6 +860,28 @@ URL in a browser will show the resource associated with the purchase.
This resource can be a digital good such as a news article, or simply This resource can be a digital good such as a news article, or simply
a confirmation for products that are delivered by other means. a confirmation for products that are delivered by other means.
\begin{figure*}[h!]
\lstset{language={}}
\begin{lstlisting}
HTTP/1.1 402 Payment Required
Content-Type: text/html; charset=UTF-8
X-Taler-Contract-Hash: RA67CB1...
X-Taler-Offer-Url: https://myshop/article/42
...
<!DOCTYPE html>
<html>
...
You don't seem to have Taler installed, here are
other payment options:
...
</html>
\end{lstlisting}
\caption{Sample HTTP response when the user agent navigates to a fulfillment URL without
the session state that indicates they have paid for the resource.}
\label{listing:http-execute}
\end{figure*}
In order to ensure that only the paying customer has access to the Web In order to ensure that only the paying customer has access to the Web
resources behind the fulfillment URL, the Web store's server must resources behind the fulfillment URL, the Web store's server must
check the browser's session state. If the merchant can confirm that check the browser's session state. If the merchant can confirm that
@ -869,7 +891,7 @@ for example because the session state was lost,\footnote{This can
happen when when privacy conscious users delete their cookies. happen when when privacy conscious users delete their cookies.
Also, some user agents (such as the TOR browser) do not support Also, some user agents (such as the TOR browser) do not support
persistent (non-session) cookies.} it {\em again} triggers a payment persistent (non-session) cookies.} it {\em again} triggers a payment
process (either via JavaScript or using {\tt 402 Payment Required}). process (either via JavaScript or using {\tt 402 Payment Required}, see Figure~\ref{listing:http-execute}).
If the wallet remembers paying for the contract previously, this If the wallet remembers paying for the contract previously, this
causes the wallet to retransmit the signed coins that are associated causes the wallet to retransmit the signed coins that are associated
with the purchase to the merchant. with the purchase to the merchant.