Daniel D’Aquino 4a4a58c7b5 iap: handle login and logout
This commit adapts the functionality around login/logout with relation
to Damus Purple In-App purchases (IAP). Due to (apparent) limitations on
Renewable subscription In-app purchases (It seems that there can only be
one active IAP subscription per device or Apple ID), these changes add
support for only one IAP subscription at a time.

To prevent confusion, a customer who logs out and logs into a separate
account will see a message indicating the limitation. Any other Nostr
account won't be able to manage IAP on a device that contains an IAP
registered to a different user.

To make this feature possible, the following changes were made to the
code:

1. IAP purchases are now associated with an account UUID. This account
   UUID is generated by the server. Each npub gets one and only one UUID
   for this purpose.

2. This UUID is used to determine which npub owns the IAP on the device.
   It is used as the source of truth when determining whether a
   particular Purple account is manageable on a device or not

3. `DamusPurple` was changed to adhere to a new IAP flow API design
   changes. Previously, the client would create an (inactive) account,
   and then send the IAP receipt to the server for activation. Now, the
   client fetches the npub's UUID from the server, associates it with an
   IAP during purchase, and sends the IAP receipt to the server. The
   server will then bump the expiry (if it's a renewal) or create a new
   active account (if it's the first time).

4. Several changes were made to the StoreKit handling code to improve
   handling:

  a. The `DamusPurple.StoreKitManager` class now records all purchased
     product updates, and sends them to the delegate each time the
     delegate is updated. This helps ensure we do not miss purchased
     product updates regardless of when and if `DamusPurpleView` is ever
     instantiated.

  b. `DamusPurple.StoreKitManager` is now used by `DamusPurple` in a
     singleton pattern via `DamusPurple.StoreKitManager.standard`. This
     helps maintain the local purchase history consistent (and avoid
     losing such data) after `DamusState` or its `DamusPurple` are
     destroyed and re-initialized.

  c. Added logs (using the logger) to help us debug/troubleshoot
     problems in the future

5. Changed the views around DamusPurple, to only show IAP
   purchase/management options if applicable to a particular account. It
   also shows instructive messages in other scenarios.

Testing
-------

damus: This commit
damus-api: d3956ee004a358a39c8570fdbd481d2f5f6f94ab
Device: iPhone 15 simulator
iOS: 17.2
Setup:

- Xcode (local) StoreKit environment
- All StoreKit transactions deleted before starting
- Running `damus` app target (which contains test StoreKit products)

- Local damus-api server running with `npm run dev` and
  `MOCK_VERIFY=true` to disable real receipt verification

- Damus setup with experimental IAP support enabled, and Purple
  environment set to "Test (local)" (localhost)

- Two `nsecs` readily available for account switching
- Clean DB (Delete db files before starting)

Steps:
1. Open the app and sign in to the first account

2. Go to Damus Purple screen. Marketing screen with buttons to purchase
   products should be visible. PASS

3. Buy a product and monitor server logs as well as the screen.
  a. IAP confirmation dialog should appear. PASS

  b. After confirmation, server logs should show a receipt was sent
     IMMEDIATELY and the response should be an HTTP 200. PASS

  c. The welcome and onboarding screens should appear as normal. PASS

  d. Once the onboarding sheet goes away, the Purple screen should now
     show the account information. PASS

  e. The account information should be correct. PASS

  f. Under the account information, there should be a "manage" button. PASS

4. Click on "manage" and verify that the iOS subscription management
   screen appears. PASS

5. Now log out and sign in to the second account

6. Go to Damus Purple screen.
  a. Marketing screen should be visible. PASS

  b. There should be no purchase buttons. instead, there should be a
     message indicating that there can only be one active subscription
     at a time, and that the app is unable to manage subscription for
     this second acocunt. PASS

7. Log out and sign in to the first account. Go to the Purple screen.
  a. Account info with the manage button should be visible like before. PASS

8. Through Xcode, delete transactions, and restart the app. This will
   simulate the case where the user bought the subscription externally.

9. Go to the Purple screen.
  a. Account info should be visible and correct. PASS
  b. Below the account info, there should be a small note telling the
     user to visit the website to manage their billing. PASS

Closes: https://github.com/damus-io/damus/issues/1815
Signed-off-by: Daniel D’Aquino <daniel@daquino.me>
Reviewed-by: William Casarin <jb55@jb55.com>
Signed-off-by: William Casarin <jb55@jb55.com>
2024-02-19 10:38:59 -08:00
2024-02-19 10:38:59 -08:00
2024-01-16 16:55:24 -08:00
2023-05-24 18:26:18 -07:00
2024-01-10 10:06:15 -08:00
2023-08-26 20:46:42 -07:00
2023-07-04 12:21:12 -07:00
2023-12-13 11:02:15 -08:00
2024-01-24 09:45:40 -08:00
2023-08-06 13:50:20 -07:00
2024-02-06 10:06:07 -06:00
2023-08-06 13:50:20 -07:00
2023-08-06 13:50:20 -07:00

Run Test Suite

damus

A twitter-like nostr client for iPhone, iPad and MacOS.

How is Damus better than twitter?

There are no toxic algorithms.
You can send or receive zaps (satoshis) without asking for permission.
There is no central database. Therefore, Damus is censorship resistant.
There are no ads.
You don't have to reveal sensitive personal information to sign up.
No email is required.
No phone number is required.
Damus is free and open source software.
There is no Big Tech moat. Therefore, seamless interoperability with thousands or millions of other nostr apps is possible, and is how Damus and nostr win.

If there are no ads, how is Damus funded?

Damus offers a paid subscription 🟣 purple 🟣 https://damus.io/purple/.
Initial benefits include a unique subscriber number, subscriber badge, and auto-translate powered by DeepL.

Damus has also graciously received donations or grants from hundreds of Damus users, Opensats, and the Human Rights Foundation.

Spec Compliance

damus implements the following Nostr Implementation Possibilities

Getting Started on Damus

Damus iOS

  1. Get the Damus app on the iOS App Store: https://apps.apple.com/ca/app/damus/id1628663131

⚙️ Settings (gear icon, top right)

  • Relays: You can add more relays to send your notes to by tapping the "+".
  • Public Key (pubkey): Your public, personal address and how people can find and tag you
  • Secret Key: Your private key unique to you. Never share your private key publicly and share with other clients at your own risk!
    • Save your keys somewhere safe
  • Log out

🏠 Personal Feed (home icon, bottom navigation)

  • Feed from everyone you follow
  • Can post notes by tapping the blue + button

Notes (under 🏠 Personal Feed)

  • Sending a Note is easy and it goes to both your 🏠 Personal and 🔍 Global Feeds
  • To tag a user you must grab their pubkey:
    1. Search their username in the search bar at the top of the 🔍 Global Feed and click their profile
    2. Tap the 🔑 icon which will copy their pubkey to your clipboard
    3. Go back to your 🏠 Personal Feed and tap the blue + button to compose your Note
    4. Add @ directly followed by the pubkey (e.g., @npub1xtscya34g58tk0z605fvr788k263gsu6cy9x0mhnm87echrgufzsevkk5s)
  • You can also tap the ellipsis menu of a Note (three dots in top right of note) to grab their User ID aka pubkey or Note ID to link directly to a Note.
  • Currently you can't delete your Notes in the iOS app
  • Share images by pasting the image url which you can grab from nostr.build, imgbb, imgur, etc. (i.e., https://i.ibb.co/2SHZbwm/alpha60.jpg). Currently images only load for people you follow in the 🏠 Personal Feed. Images are not automatically loaded in 🔍 Global Feed
  • Engaging with Notes
    • 💬 Replying to a Note: Tap the chat icon underneath the note. This will show up in the users notifications and in your 🏠 Personal and 🔍 Global Feeds
    • ♺ Reposts: Tap the repost icon which will show up in your 🏠 Personal and 🔍 Global Feeds
    • ♡ Likes: Tap the heart icon. Users will not get a notification, and cannot see who liked their note (currently, web clients can see your pfp only)

💬 Encrypted DMs (chat app, bottom navigation)

  • Tap the chat icon and you'll notice there's nothing to see at first. Go to a user profile and tap the 💬 chat icon next to the follow button to begin a DM

🔍 Global Feed (magnify glass, bottom navigation)

  • View the Global Feed from all the relays you've added in ⚙️ Settings. Currently you can only search hashtags and user names and pubkeys

🔔 Notifications

  • All your notifications except 💬 DMs

👤 Change Your Profile (PFP) and Bio

  1. Go to your Profile Page on Damus app
  2. Tap on Edit button at the top
  3. You will see text fields to update your information and bio
  4. For PFP, insert a URL containing your image (support video: https://cdn.jb55.com/vid/pfp-editor.mp4)
  5. Save

Request Sats

Paste an invoice from your favorite LN wallet. (Sats or Satoshis are the smallest denomination of bitcoin)

Alby (browser extension)

  • Get the Alby browser extension and create your Alby address [yourname]@getalby.com or connect your existing Lightning wallet
  • Convert your Damus secret key from nsec to hex at https://damus.io/key then go to Settings in Alby and under the Nostr section at the bottom of the page add your private hex key. You can also generate new address in the extension
  • Click the Alby extension > click Receive > enter the amount of Sats > click Get Invoice > click Copy > then paste into Damus
  • Note: On Damus Web it will appear as a string of characters but on Damus iOS it will appear as a clickable image

Zeus (mobile app)

  • Download Zeus app (iOS, Google, APK)
  • Tap Get Started button > tap Connect a node > click on + sign (top right) > select Indhub > press Scan Lndhub QR > (from the Alby browser extension… click your account on the top left > click Manage Accounts > click 3-dot menu to right of your account and click Export Account to get a QR code then go back to Zeus app) > scan the QR Code and tap Save Node Config button
  • To create an invoice tap Lightning > tap Receive > type in amount > tap Create Invoice > tap Copy Invoice > paste into a new Damus note

Contributing

Contributors welcome! Start by examining known issues: https://github.com/damus-io/damus/issues.

Mailing lists

We have a few mailing lists that anyone can join to get involved in damus development:

  • dev - development discussions
  • patches - code submission and review
  • product - product discussions
  • design - design discussions

Contributing

See docs/CONTRIBUTING.md

Privacy

Your internet protocol (IP) address is exposed to the relays you connect to, and third party media hosters (e.g. nostr.build, imgur.com, giphy.com, youtube.com etc.) that render on Damus. If you want to improve your privacy, consider utilizing a service that masks your IP address (e.g. a VPN) from trackers online.

The relay also learns which public keys you are requesting, meaning your public key will be tied to your IP address.

It is public information which other profiles (npubs) you are exchanging DMs with. The content of the DMs is encrypted.

Translations

Translators welcome! Join the Transifex project.

All user-facing strings must have a comment in order to provide context to translators. If a SwiftUI component has a comment parameter, use that. Otherwise, wrap your string with NSLocalizedString with the comment field populated.

Awards

Damus lead dev and founder Will awards developers with satoshis! There may be nostr badges awarded for contributors in the future... :)

First contributors:

  1. @randymcmillan
  2. @jcarucci27

git log bot

npub1fjtdwclt9lspjy8huu3qklr7eklp5uq90u6yh8mec290pqxraccqlufnas

Description
iOS nostr client
Readme GPL-3.0 35 MiB
Languages
Swift 54.1%
C 42%
Assembly 2%
Python 0.6%
Rust 0.5%
Other 0.7%