Fox Pay VulpFin payments

Changelog

What has actually shipped, newest first.

2026-09-18 — Forgotten passwords

  • Fox Pay holds no password of its own: you sign in with TG11. The sign-in page now says so and links straight to the TG11 reset instead of leaving you to guess.
  • Staff sign-in, the one local credential here, has a reset of its own, and Fox Pay now sends mail through the same server as the rest of TG11 so that reset actually arrives.

2026-09-15 — Seller accounts and connected providers

  • TG11-authenticated seller applications, review states, role-scoped merchant dashboard, immutable agreement records, and live-routing kill switches.
  • Seller-scoped Stripe Connect and Square OAuth, protected NOWPayments credential setup, and feature-gated PayPal Partner Referrals, with multiple prioritized provider routes.
  • Provider-backed card refunds, normalized disputes, Redis abuse controls, reconciliation, and durable Celery delivery for payment work and merchant webhooks.

2026-09-14 — Information pages

  • About, Terms, Privacy, Acceptable use, FAQ, Support, Status and this changelog, linked from every footer.
  • The privacy page is specific about the one thing that matters most here: card numbers never reach Fox Pay, and what it does hold is written out.

2026-09-13 — PayPal

  • PayPal Checkout joins Stripe as a card and wallet route: an Orders v2 order, an approval at PayPal, and a capture before anything is marked paid — approval alone is not payment.
  • The webhook receiver verifies events through PayPal's own signature check and refuses a capture whose amount or currency does not match the intent.
  • Checkout names each option's provider, and amounts render as money rather than as minor units.

2026-09-13 — Accounts, saved methods and theme

  • A TG11 account dashboard: your payments, orders, subscriptions, saved payment methods and connected applications in one place.
  • Saving or removing a card asks you to re-prove it is you first.
  • A light and dark theme that remembers your choice.

2026-09-13 — Square and crypto callbacks

  • Signed Square webhook receiver with a setup command, keyed per merchant and provider.
  • NOWPayments hosted crypto callbacks verified by signature and matched against the invoice amount before an intent settles.
  • Manual capture is refused where a provider does not really support it, rather than pretending; live refunds are guarded and settled intents are preserved.

2026-09-12 — Stripe and the first release

  • Stripe Checkout as the first card provider, with automatic tax behaviour and support for long hosted checkout URLs.
  • The platform itself: merchants, API keys, payment intents and attempts, provider adapters, a double-entry ledger, merchant webhooks and the hosted checkout.
  • Deployment waits for health before declaring success.

Fox Pay is early software; this list is maintained by hand from the release history rather than generated, so it records what changed for you rather than every commit.