breez / breez-sdk-greenlight

MIT License
244 stars 43 forks source link

LNURL Pay error "Success Action URL has different domain than the callback domain" #1028

Closed danielgranhao closed 4 months ago

danielgranhao commented 4 months ago

We've found that some LNURL providers are not strictly following LUD-9. Specifically, they use different domains for the action and callback URLs. The SDK doesn't allow this, as defined in the LNURL spec, but it seems most other wallets do.

In out-of-band discussions, we agreed that the main reason for this limitation is trust. LNURL clients should display the domain name, but later, the successful action would take the client to a different domain.

An idea for a solution is to add a field to UrlSuccessActionData that warns about the mismatch but still allows the payment to be made.