justin/new-site
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

intake: validate cold ?dot= orders before checkout (fix 422)

Browse source 
The cold-visitor Finish flow created the order then called Stripe Checkout
directly, which is gated on intake_data_validated=true and returned 422
INTAKE_NOT_VALIDATED. Now call POST /compliance-orders/:n/validate between
create and checkout (matching the token-order flow), and surface any missing
required fields to the user instead of a raw HTTP error.
This commit is contained in:
justin 2026-06-02 13:03:14 -05:00
parent 5c2f32c6f2
commit d0d39ebcbc
1 changed files with 19 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

19
site/src/components/intake/Wizard.astro
View file

@ -602,6 +602,25 @@ const STEP_LABELS: Record<string, string> = {
const order = await createResp.json();
const newOrderNumber = order.order_number;
if (!newOrderNumber) throw new Error("Order created but no order number returned.");
// Validate the intake before checkout. Stripe Checkout is gated on
// intake_data_validated=true (set by this endpoint); without it the
// checkout call returns 422 INTAKE_NOT_VALIDATED.
const valResp = await fetch(`${API}/api/v1/compliance-orders/${newOrderNumber}/validate`, {
method: "POST",
headers: { "Content-Type": "application/json" },
body: "{}",
});
if (valResp.status === 422 || valResp.ok) {
const val = await valResp.json().catch(() => ({}));
if (val && val.ok === false) {
const miss = (val.missing || []).join(", ");
throw new Error(
"Please complete required fields" + (miss ? `: ${miss}` : "") + ".",
);
}
} else if (!valResp.ok) {
throw new Error(`Validation HTTP ${valResp.status}`);
}
// Kick off Stripe Checkout for the new order.
const checkoutResp = await fetch(`${API}/api/v1/checkout/create-session`, {
method: "POST",