User Provided Refund Address

[wtogami]

A Bitcoin transaction normally has no way of knowing where to send a refund. The invoice should let the user set a refund address once, but for security reasons they must not be able to change it thereafter.

invoice.refund can be set during invoice creation with options:

• mandatory - invoice will only show the "Pay Now" button and thus reveal the payment address only after the refund address is set.
• never - policy of this payment is to never allow refunds, by not asking for one it makes the payment process a bit smoother

In the mandatory case they can bypass the restriction if they use the API, but users are only hurting themselves.

The refund address can also be set by the Bitcoin client directly when a later version of Baron supports the payment protocol.

[wtogami]

If the user has javascript, can a tooltip pop-up when the Refund address text box has focus to inform the user that they may not change the address after it is set?

"Warning: You may not change the refund address after it is set. Please be certain that this address really does belong to you."

[wtogami]

      var bitcore = require('bitcore');
      var Address = bitcore.Address;
      var a = new Address('1KerhGhLn3SYBEQwby7VyVMWf16fXQUj5d');
      console.log('1KerhGhLn3SYBEQwby7VyVMWf16fXQUj5d is valid? '+a.isValid());

Address validation with this code was fixed in Bitcore v1.0.25, so be aware this requires an upgrade.