Signing in and approving access through the official CLI succeeds, but signing-key generation fails.
Steps to reproduce:
- Run
npx -y @paybox-sh/sdk@latest login.
- Sign in and approve access in the browser.
- Click Generate signing key.
Actual result: The page displays missing_presence_tokens, no signing key is generated, and the CLI keeps waiting for it. The signing-key page also appears to open a second time during the flow.
Expected result: A signing key is generated after the required confirmations, allowing CLI login to complete.
Environment: macOS, Chrome, passkey stored in 1Password. SDK latest resolved to 0.8.5.
Possible cause: From inspecting the publicly served JavaScript, the PayBox web app and the embedded MoonX iframe appear to expect different provisioning flows. The app seems to send a single-step request, while the iframe expects a separate preparation step followed by a confirmation with additional data. This could explain why the iframe reports missing presence tokens even after successful authentication.
Could you check whether the deployed web app and iframe versions are compatible?
Also, where can I find the source code for the PayBox SDK and the browser SDK used in this flow? Is there a public repository?
Signing in and approving access through the official CLI succeeds, but signing-key generation fails.
Steps to reproduce:
npx -y @paybox-sh/sdk@latest login.Actual result: The page displays
missing_presence_tokens, no signing key is generated, and the CLI keeps waiting for it. The signing-key page also appears to open a second time during the flow.Expected result: A signing key is generated after the required confirmations, allowing CLI login to complete.
Environment: macOS, Chrome, passkey stored in 1Password. SDK
latestresolved to0.8.5.Possible cause: From inspecting the publicly served JavaScript, the PayBox web app and the embedded MoonX iframe appear to expect different provisioning flows. The app seems to send a single-step request, while the iframe expects a separate preparation step followed by a confirmation with additional data. This could explain why the iframe reports missing presence tokens even after successful authentication.
Could you check whether the deployed web app and iframe versions are compatible?
Also, where can I find the source code for the PayBox SDK and the browser SDK used in this flow? Is there a public repository?