Cordy/cairn-license-server
1
0
Fork 0
Code Issues 4 Pull requests Projects Releases Packages Wiki Activity Actions

Mint licenses with the buyer's org name; heal ctm_ orgs at re-sign #18

Merged
Cordy merged 3 commits from fix/org-name into main 2026-07-31 10:16:41 +00:00
Conversation 0 Commits 3 Files changed 4 +185 -7
Cordy commented 2026-07-31 10:15:17 +00:00
Owner
Copy link

Closes #17

The org field is sealed into the signed payload and Cairn displays it verbatim, so it must be a name — not ctm_….

Mint-time resolution order (webhook): checkout-supplied custom_data.org → the buyer account's organization name (email → account → org, the store already has it) → the Paddle customer id strictly as a last resort for buyers without an account. A ctm_ org is now impossible for any account-holding buyer.

Heal at re-sign: refreshWith calls healCtmOrgLocked — if the stored org has the ctm_ prefix and the owning account has a named org, the re-signed license carries the name. Pre-existing licenses (Nikola's included) heal on their next renewal or seat change; custom names are never overwritten (test-pinned).

Tests cover all four paths: checkout name wins, account-name fallback, no-account last resort, and heal-on-refresh including the never-overwrite guarantee.

Companion cairn-site PR adds the buy-box field that feeds custom_data.org.

Closes #17 The `org` field is sealed into the signed payload and Cairn displays it verbatim, so it must be a name — not `ctm_…`. **Mint-time resolution order** (webhook): checkout-supplied `custom_data.org` → the buyer account's organization name (email → account → org, the store already has it) → the Paddle customer id strictly as a last resort for buyers without an account. A `ctm_` org is now impossible for any account-holding buyer. **Heal at re-sign:** `refreshWith` calls `healCtmOrgLocked` — if the stored org has the `ctm_` prefix and the owning account has a named org, the re-signed license carries the name. Pre-existing licenses (Nikola's included) heal on their next renewal or seat change; custom names are never overwritten (test-pinned). Tests cover all four paths: checkout name wins, account-name fallback, no-account last resort, and heal-on-refresh including the never-overwrite guarantee. Companion cairn-site PR adds the buy-box field that feeds `custom_data.org`.
feat: mint licenses with the buyer's org name; heal ctm_ orgs at re-sign (#17)
All checks were successful
ci / test-and-build (pull_request) Successful in 15s
Details
ebeaa9a0be
Cordy merged commit 60a410324d into main 2026-07-31 10:16:41 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: Cordy/cairn-license-server#18
No description provided.
Delete branch "fix/org-name"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?