Fix MoonPay "Send with Edge" sell link

MoonPay surfaces a "Send with Edge" button for pending sell orders (in
their email and order-history page) that reflects back the deposit
redirect URL our app hands them. That URL was RETURN_URL_PAYMENT =
https://edge.app/redirect/payment/, but the apex edge.app host is NOT
claimed as a universal link on iOS or Android (only deep.edge.app, dl,
and return are), so the button dead-ended on a static redirect page and
the user could not complete the deposit. The buy redirects already use
deep.edge.app; only the sell payment redirect used the unclaimed apex.

Point RETURN_URL_PAYMENT at the claimed deep.edge.app host (in-app
webview interception is host-agnostic via startsWith, so it is
unaffected) and parse the redirect/payment deep link into a new
paymentRedirect link that opens the Send scene, resolving the wallet
from the base currency code and pre-filling the deposit address, amount,
and destination tag (needed for chains like XRP). Both the deep.edge.app
and legacy edge.app hosts are parsed.

Author: j0ntz

CHANGELOG.md

@@ -3,6 +3,7 @@
 ## Unreleased (develop)
 
 - added: Remote enable/disable of gift card providers via the info server's giftCardInfo config, supporting whole-provider disabling for Phaze and Bitrefill and per-brand disabling for Phaze.
+- fixed: MoonPay "Send with Edge" sell link now opens the app to a pre-filled Send scene. The sell deposit redirect points at the claimed deep.edge.app universal-link host (was the unclaimed edge.app apex), and the deep-link parser routes it to Send with the deposit address, amount, and destination tag.
 
 ## 4.49.0 (staging)
 

src/__tests__/DeepLink.test.ts

@@ -189,6 +189,44 @@ describe('parseDeepLink', function () {
     })
   })
 
+  describe('paymentRedirect', () => {
+    makeLinkTests({
+      // Real-world MoonPay "Send with Edge" sell link (extra params ignored):
+      'https://edge.app/redirect/payment/?transactionId=6ae325aa-d930-47cd-9ef0-d26e03b68f3c&baseCurrencyCode=btc&baseCurrencyAmount=0.00212&depositWalletAddress=bc1qqp44yqt9nzrca7cw4hrl2hu5nmpw5fg0r32z62&paymentMethod=moonpay_balance':
+        {
+          type: 'paymentRedirect',
+          currencyCode: 'btc',
+          depositAddress: 'bc1qqp44yqt9nzrca7cw4hrl2hu5nmpw5fg0r32z62',
+          amount: '0.00212',
+          addressTag: undefined
+        },
+      // XRP needs a destination tag, carried as depositWalletAddressTag:
+      'edge://redirect/payment/?baseCurrencyCode=xrp&baseCurrencyAmount=10&depositWalletAddress=rEXAMPLExrpADDRESS&depositWalletAddressTag=123456':
+        {
+          type: 'paymentRedirect',
+          currencyCode: 'xrp',
+          depositAddress: 'rEXAMPLExrpADDRESS',
+          amount: '10',
+          addressTag: '123456'
+        },
+      // deep.edge.app is an already-claimed universal-link host:
+      'https://deep.edge.app/redirect/payment/?baseCurrencyCode=ltc&baseCurrencyAmount=1.5&depositWalletAddress=ltc1qexample':
+        {
+          type: 'paymentRedirect',
+          currencyCode: 'ltc',
+          depositAddress: 'ltc1qexample',
+          amount: '1.5',
+          addressTag: undefined
+        },
+      // Missing the deposit address falls back to opening in a browser:
+      'https://edge.app/redirect/payment/?baseCurrencyCode=btc': {
+        type: 'other',
+        protocol: 'https',
+        uri: 'https://edge.app/redirect/payment/?baseCurrencyCode=btc'
+      }
+    })
+  })
+
   describe('plugin', function () {
     makeLinkTests({
       'edge://plugin/simplex/rabbit/hole?param=alice': {

src/actions/DeepLinkingActions.tsx

@@ -1,3 +1,4 @@
+import { mul } from 'biggystring'
 import type { EdgeParsedUri, EdgeTokenId } from 'edge-core-js'
 import * as React from 'react'
 import { Linking } from 'react-native'
@@ -21,6 +22,7 @@ import {
   fiatProviderDeeplinkHandler
 } from '../plugins/gui/fiatPlugin'
 import { rampDeeplinkManager } from '../plugins/ramps/rampDeeplinkHandler'
+import { getExchangeDenom } from '../selectors/DenominationSelectors'
 import { config } from '../theme/appConfig'
 import type { DeepLink } from '../types/DeepLinkTypes'
 import type { Dispatch, RootState, ThunkAction } from '../types/reduxTypes'
@@ -233,6 +235,66 @@ async function handleLink(
       })
       break
 
+    case 'paymentRedirect': {
+      // A provider sell-completion redirect (e.g. MoonPay "Send with Edge").
+      // Resolve the provider's base currency code to candidate assets, then
+      // open the Send scene pre-filled with the deposit address, amount, and
+      // destination tag / memo so the user can finish the sell order.
+      const { currencyCode, depositAddress, amount, addressTag } = link
+
+      // Prefer a native (mainnet) match; otherwise fall back to tokens that
+      // share the symbol and let the user disambiguate via the wallet picker.
+      const symbol = currencyCode.split('_')[0].toUpperCase()
+      const nativeAssets: EdgeAsset[] = []
+      const tokenAssets: EdgeAsset[] = []
+      for (const pluginId of Object.keys(account.currencyConfig)) {
+        const currencyConfig = account.currencyConfig[pluginId]
+        if (currencyConfig.currencyInfo.currencyCode.toUpperCase() === symbol) {
+          nativeAssets.push({ pluginId, tokenId: null })
+        }
+        const { builtinTokens } = currencyConfig
+        for (const tokenId of Object.keys(builtinTokens)) {
+          if (builtinTokens[tokenId].currencyCode.toUpperCase() === symbol) {
+            tokenAssets.push({ pluginId, tokenId })
+          }
+        }
+      }
+      const assets = nativeAssets.length > 0 ? nativeAssets : tokenAssets
+
+      if (assets.length === 0) {
+        showToast(lstrings.alert_deep_link_no_wallet_for_uri)
+        break
+      }
+
+      const result = await pickWallet({
+        account,
+        assets,
+        navigation,
+        showCreateWallet: true
+      })
+      if (result?.type !== 'wallet') break
+      const { walletId, tokenId } = result
+      const wallet = account.currencyWallets[walletId]
+      if (wallet == null) break
+
+      const nativeAmount =
+        amount != null
+          ? mul(
+              amount,
+              getExchangeDenom(wallet.currencyConfig, tokenId).multiplier
+            )
+          : undefined
+
+      const parsedUri: EdgeParsedUri = {
+        publicAddress: depositAddress,
+        nativeAmount,
+        uniqueIdentifier: addressTag,
+        tokenId
+      }
+      await dispatch(handleWalletUris(navigation, wallet, parsedUri))
+      break
+    }
+
     case 'price-change': {
       const { pluginId, body } = link
       const currencyCode =

src/plugins/gui/providers/common.ts

@@ -10,7 +10,14 @@ import {
 export const RETURN_URL_SUCCESS = 'https://edge.app/redirect/success/'
 export const RETURN_URL_FAIL = 'https://edge.app/redirect/fail/'
 export const RETURN_URL_CANCEL = 'https://edge.app/redirect/cancel/'
-export const RETURN_URL_PAYMENT = 'https://edge.app/redirect/payment/'
+// This URL is handed to the provider as the sell deposit redirect and is
+// reflected back to the user outside the app (provider email / order-history
+// "complete payment" button), so it must be a host the app actually claims as a
+// universal link. `deep.edge.app` is claimed on iOS and Android (the apex
+// `edge.app` is not), matching the buy redirects, so an external click opens the
+// app and the deep-link parser routes it to the Send scene. In-app interception
+// is host-agnostic (`uri.startsWith(RETURN_URL_PAYMENT)`), so it is unaffected.
+export const RETURN_URL_PAYMENT = 'https://deep.edge.app/redirect/payment/'
 
 export const NOT_SUCCESS_TOAST_HIDE_MS = 5000
 

src/types/DeepLinkTypes.ts

@@ -56,6 +56,25 @@ export interface PaymentProtoLink {
   uri: string
 }
 
+/**
+ * A provider sell-completion redirect (e.g. MoonPay's "Send with Edge" button).
+ * Carries everything needed to open the Send scene so the user can finish
+ * depositing crypto for a pending sell order:
+ *
+ *   https://edge.app/redirect/payment/?baseCurrencyCode=btc&baseCurrencyAmount=0.001&depositWalletAddress=...&depositWalletAddressTag=...
+ *
+ * `currencyCode` is the provider's base currency code (resolved to a wallet at
+ * handle time), `addressTag` is the destination tag / memo (required for chains
+ * like XRP), and `amount` is in whole units of the base currency.
+ */
+export interface PaymentRedirectLink {
+  type: 'paymentRedirect'
+  currencyCode: string
+  depositAddress: string
+  amount?: string
+  addressTag?: string
+}
+
 export interface EdgeLoginLink {
   type: 'edgeLogin'
   lobbyId: string
@@ -169,6 +188,7 @@ export type DeepLink =
   | NoopLink
   | PasswordRecoveryLink
   | PaymentProtoLink
+  | PaymentRedirectLink
   | PluginLink
   | PriceChangeLink
   | PromotionLink

src/util/DeepLinkParser.ts

@@ -14,6 +14,7 @@ import {
   type PromotionLink
 } from '../types/DeepLinkTypes'
 import type { AppParamList } from '../types/routerTypes'
+import type { UriQueryMap } from '../types/WebTypes'
 import { parseQuery, stringifyQuery } from './WebUtils'
 
 /**
@@ -244,6 +245,16 @@ function parseEdgeProtocol(url: URL<string>): DeepLink {
       }
     }
 
+    case 'redirect': {
+      // Provider sell-completion redirect (e.g. MoonPay "Send with Edge"):
+      const [section] = pathParts
+      if (section === 'payment') {
+        const link = parsePaymentRedirect(parseQuery(url.query))
+        if (link != null) return link
+      }
+      break
+    }
+
     case 'recovery': {
       // The new & improved format stores the token as a fragment:
       if (url.hash != null && url.hash !== '') {
@@ -361,6 +372,13 @@ function parseEdgeAppLink(url: URL<string>): DeepLink {
     }
   }
 
+  // Handle provider sell-completion redirects (e.g. MoonPay "Send with Edge"),
+  // which point at https://edge.app/redirect/payment/?baseCurrencyCode=...
+  if (firstPath === 'redirect' && pathParts[1] === 'payment') {
+    const link = parsePaymentRedirect(query)
+    if (link != null) return link
+  }
+
   // No special handling supported. Open in browser.
   return {
     type: 'other',
@@ -369,6 +387,27 @@ function parseEdgeAppLink(url: URL<string>): DeepLink {
   }
 }
 
+/**
+ * Parse a provider sell-completion redirect such as MoonPay's "Send with Edge"
+ * button, which sends the user to a `/redirect/payment/` URL carrying the
+ * deposit details for a pending sell order. Returns null when the required
+ * deposit parameters are missing so the caller can fall back to its default
+ * handling (e.g. opening the link in a browser).
+ */
+function parsePaymentRedirect(query: UriQueryMap): DeepLink | null {
+  const baseCurrencyCode = query.baseCurrencyCode ?? undefined
+  const depositWalletAddress = query.depositWalletAddress ?? undefined
+  if (baseCurrencyCode == null || depositWalletAddress == null) return null
+
+  return {
+    type: 'paymentRedirect',
+    currencyCode: baseCurrencyCode,
+    depositAddress: depositWalletAddress,
+    amount: query.baseCurrencyAmount ?? undefined,
+    addressTag: query.depositWalletAddressTag ?? undefined
+  }
+}
+
 /**
  * Parse a request for address link.
  */