Cloudflare Workers recipe
Implement ATM event verification and checkout handoff from a Workers-style backend.
Compatible with the closed-beta ATM app APIs and versioned ATM event headers. Check atm-api-version on every webhook or XRPC receiver event.
Install SDK
Workers apps should keep webhook secrets in environment bindings and store idempotency in Durable Objects, D1, KV, or an external database.
npm install @atmosphere-money/app-node@betaCreate checkout route
Create an app order first, check the recipient's payout status, confirm creator app approval, then ask ATM to create the hosted checkout. Persist ATM's app status token beside the order before returning only the checkout URL to the browser. The URL contains a separate browser bearer.
import { createAtmAppClient } from "@atmosphere-money/app-node";
export default {
async fetch(request: Request, env: Env): Promise<Response> {
const atm = createAtmAppClient({
getServiceAuthToken: ({ lxm, aud }) => mintAppServiceAuthJwt(env, { lxm, aud })
});
if (request.method === "POST" && new URL(request.url).pathname === "/checkout") {
const { recipientDid, amountCents } = await request.json();
const payout = await atm.getPayoutStatus(recipientDid);
if (!payout.payable) return Response.json({ error: "RecipientNotPayable" }, { status: 409 });
const approval = await atm.requestRecipientApproval({
recipientDid,
environment: "test",
paymentTypes: ["shop"],
feeShareBps: 300,
requestReason: "Enable Workers checkout"
});
if (approval.status !== "approved") {
return Response.json({
error: "RecipientAppApprovalRequired",
approvalUrl: approval.dashboardUrl
}, { status: 409 });
}
const order = await createAppOrder(env, { recipientDid, amountCents });
const checkout = await atm.initiatePayment({
environment: "test",
recipient: order.recipientDid,
amount: order.amountCents,
currency: "usd",
paymentType: "shop",
returnUrl: `https://app.example/orders/${order.id}/return`,
cancelUrl: `https://app.example/orders/${order.id}`,
metadata: { appOrderId: order.id }
});
await saveAtmStatusToken(env, order.id, checkout.token);
return Response.json({ url: checkout.url });
}
return new Response("Not found", { status: 404 });
}
};Add event receiver
New AT Protocol-native apps use the canonical#AtmEventReceiver / money.atmosphere.event.receiveEvent wake-up transport. A conventional web app can explicitly select the signed HTTP webhook compatibility path shown by this framework recipe. Verify the configured receiver before using it to wake an immediate canonical status/query read.
import { createCloudflareWorkerWebhookHandler } from "@atmosphere-money/app-node";
export async function handleWebhook(request: Request, env: Env) {
const handler = createCloudflareWorkerWebhookHandler({
secret: env.ATM_WEBHOOK_SECRET,
expectedType: "payment.completed",
deliveryStore: {
claim: (deliveryId, event) => claimWebhookDelivery(env, deliveryId, event),
complete: (deliveryId, claimId, event) =>
completeWebhookDelivery(env, deliveryId, claimId, event),
release: (deliveryId, claimId, event, error) =>
releaseWebhookDelivery(env, deliveryId, claimId, event, error)
},
onEvent: async (event) => {
const metadata = event.data.payment.metadata as
| { appOrderId?: string }
| undefined;
const appOrderId = String(metadata?.appOrderId ?? "");
if (!appOrderId) return { status: 422, body: { error: "MissingAppOrderId" } };
await fulfillOrder(env, appOrderId, event.data.payment.id);
return { body: { ok: true } };
}
});
return handler.fetch(request);
}Fulfill payment or ticket
The fulfillment step is the same in Cloudflare Workers: poll with the stored status handle, map the completed ATM payment back to your app order, and write the app-side fulfillment state once. Deduplicate each receiver delivery id before waking the same poller.
- 01
Deduplicate
Apply the same completed status once; optionally claim a push delivery id before waking reconciliation.
- 02
Match order
Load the app order that stores the initiation status token and private correlation data.
- 03
Fulfill
Grant access, issue app content, reveal tickets, update a subscription, or notify the buyer.
- 04
Reconcile
Store canonical ATM state and any optional event id beside the app order for refunds and disputes.
Run local test fixture
Use the runnable starter when one exists. Your core test should prove status-token persistence, authenticated polling, duplicate terminal handling, and the app fulfillment mutation. If you enable push, also generate a signed fixture with@atmosphere-money/testing and prove raw-body verification plus duplicate delivery handling.
cd examples/atm-hono-worker-starter
npm install
npm run smoke
# Then add a Workers-specific integration test around your chosen storage layerRuntime notes
| Storage | Use Durable Objects, D1, KV with compare-and-set, or Postgres for delivery idempotency. Do not use in-memory Sets. |
|---|---|
| Secrets | Use Workers environment bindings for webhook secrets and app signing material. |
| Starter | The Hono / Workers starter demonstrates the same Web Request shape and signed event fixture. |