ZIP: 321 Title: Payment Request URIs Owners: Kris Nuttycombe (email@example.com) Daira Hopwood (firstname.lastname@example.org) Status: Proposed Category: Standards / Wallet Created: 2020-08-28 Discussions-To: <https://github.com/zcash/zips/issues/347> Pull-Request: <https://github.com/zcash/zips/pull/395> License: MIT
The key words "MUST", "MUST NOT", "SHOULD", "RECOMMENDED", and "MAY" in this document are to be interpreted as described in RFC 2119. 1
The terms "Testnet" and "Mainnet" are to be interpreted as described in section 3.11 of the Zcash Protocol Specification 10.
The terms below are to be interpreted as follows:
This ZIP proposes a standard format for payment request URIs. Wallets that recognize this format enable users to construct transactions simply by clicking links on webpages or scanning QR codes.
In order for a robust transactional ecosystem to evolve for Zcash, it is necessary for vendors to be able to issue requests for payment. At present, the best option available is to manually specify a payment address, a payment amount, and potentially memo field content. Of these three components, existing wallets only provide functionality for reading payment addresses in a semi-automated fashion. It is then necessary for the user to manually enter payment amounts and any associated memo information, which is tedious and may be error-prone, particularly if a payment is intended for multiple recipients or the memo field information contains structured data that must be faithfully reproduced.
This ZIP seeks to eliminate these issues by proposing a standard format that wallet vendors may support so that human intervention is required only for approval, not creation, of such a transaction.
In Bitcoin, two different standards exist to permit vendors to issue payment requests that are understood by wallets: BIP-0021 5 and BIP-0070 6. BIP-0021 provides a URI format that can be interpreted by a wallet to construct simple, single-recipient transactions; BIP-0070 uses a protobuf-based protocol that permits requests for transactions of arbitrary complexity.
The format proposed in this ZIP seeks a middle ground between these approaches: to provide a URI-based format which supports both the trivial use case and the slightly-more-complex situation where a transaction may include payments to multiple recipients.
The format must be a valid URI.
The format must permit the representation of one or more (payment address, amount, memo) tuples.
The following syntax specification uses ABNF 2.
zcashurn = "zcash:" ( zcashaddress [ "?" zcashparams ] / "?" zcashparams ) zcashaddress = 1*( ALPHA / DIGIT ) zcashparams = zcashparam [ "&" zcashparams ] zcashparam = [ addrparam / amountparam / memoparam / messageparam / labelparam / reqparam / otherparam ] NONZERO = %x31-39 DIGIT = %x30-39 paramindex = "." NONZERO 0*3DIGIT addrparam = "address" [ paramindex ] "=" zcashaddress amountparam = "amount" [ paramindex ] "=" 1*DIGIT [ "." 1*8DIGIT ] labelparam = "label" [ paramindex ] "=" *qchar memoparam = "memo" [ paramindex ] "=" *base64url messageparam = "message" [ paramindex ] "=" *qchar paramname = ALPHA *( ALPHA / DIGIT / "+" / "-" ) reqparam = "req-" paramname [ paramindex ] [ "=" *qchar ] otherparam = paramname [ paramindex ] [ "=" *qchar ] qchar = unreserved / pct-encoded / allowed-delims / ":" / "@" allowed-delims = "!" / "$" / "'" / "(" / ")" / "*" / "+" / "," / ";"
pct-encoded are as defined in 3. "base64url" is defined as in 4 with padding omitted. (Note that this uses a different alphabet to the usual base64; the values 62 and 63 in the alphabet are encoded as
_ respectively. Implementations MUST NOT accept the characters
= that occur only in the usual base64.)
Productions of the form
1*x indicate one or more successive instances of the production
x. Productions of the form
<n>*<m>x indicate at least <n> and at most <m> instances of production
Note that this grammar does not allow percent encoding outside the productions that use
qchar, i.e. the values of label, message,
A ZIP-321 URI represents a request for the construction of a transaction having one or more payments. In the case that only a single payment is being requested, the recipient address SHOULD be included in the
hier-part component of the RFC 3986 URI; otherwise, multiple recipient addresses can be specified using
addrparam parameters with different indices.
Addresses, amounts, labels, and messages sharing the same
paramindex (including the empty
paramindex) are interpreted to be associated with the same payment for the purposes of payment construction. A
paramindex MUST NOT have leading zero(s). There is no significance to the ordering of parameters, and
paramindex values need not be sequential.
Due to restrictions on transaction construction described in 11, there may be no more than 2109 distinct payments requested by a single ZIP-321 URI.
A URI of the form
zcash:<address>?... MUST be considered equivalent to a URI of the form
<address> is an instance of
If there are any non-address parameters having a given
paramindex, then the URI MUST contain an address parameter having that
paramindex. There MUST NOT be more than one occurrence of a given parameter and
Implementations SHOULD check that each instance of
zcashaddress is a valid string encoding of either:
New address formats may be added in future. If the context of whether the payment URI is intended for Testnet or Mainnet is available, then each address SHOULD be checked to be for the correct network.
Sprout addresses MUST NOT be supported in payment requests. The rationale for this is that transfers to Sprout addresses will, at activation of the Canopy network upgrade, be restricted by ZIP 211 9; it cannot generally be expected that senders will have funds available in the Sprout pool with which to satisfy requests for payment to a Sprout address.
If an amount is provided, it MUST be specified in decimal ZEC. If a decimal fraction is present then a period (.) MUST be used as the separating character to separate the whole number from the decimal fraction, and both the whole number and the decimal fraction MUST be nonempty. No other separators (such as commas for grouping or thousands) are permitted. Leading zeros in the whole number or trailing zeros in the decimal fraction are ignored. There MUST NOT be more than 8 digits in the decimal fraction.
amount=050is treated as 50 ZEC;
amount=00.500is treated as 0.5 ZEC; and
The amount MUST NOT be greater than 21000000 ZEC (in general, monetary amounts in Zcash cannot be greater than this value).
paramindex, a client rendering a payment for inspection by the user SHOULD display this label (if possible) as well as the associated address. If the label is displayed, it MUST be identifiable as distinct from the address.
=padding. The decoded memo contents MUST NOT exceed 512 bytes, and if shorter, will be filled with trailing zeros to 512 bytes. Parsers MUST consider the entire URI invalid if the address associated with the same
paramindexis not a valid shielded address.
paramindexto the user.
A valid payment request for a payment of 1 ZEC to a single shielded address, with a base64url-encoded memo and a message for display by the wallet.
A valid payment request with one transparent and one shielded recipient address, with an encoded Unicode memo for the shielded recipient.
An invalid payment request; this is missing a payment address with empty
Also invalid; this request is missing
amount.0= are not permitted as leading 0s are forbidden in
Also invalid; duplicate
zcash:tmEZhbWHTpdKMw5it8YDspUXSMGQyFwovpU?amount=1%30 zcash:tmEZhbWHTpdKMw5it8YDspUXSMGQyFwovpU?%61mount=1 zcash:%74mEZhbWHTpdKMw5it8YDspUXSMGQyFwovpU?amount=1
Invalid; percent encoding is only allowed in
qchar productions, which do not include addresses, amounts, or parameter names.
Variables which are prefixed with a
req- are considered required. If a parser does not recognize any variables which are prefixed with
req-, it MUST consider the entire URI invalid. Any other variables that are not recognized, but that are not prefixed with a
req-, SHOULD be ignored.
As this ZIP is written, several clients already implement a
zcash: URI scheme similar to this one, however usually without the additional
req- prefix requirement or the facility to specify multiple payments using
paramindex. These implementations also generally do not support URIs, even with a single payment, where the address is specified as an
address= query parameter rather than in the
hier-part of the URI. They may also not support the
memo parameter, or may not treat it as base64url-encoded.
Thus, it is RECOMMENDED that these features not be used in a mission-critical way until a grace period of 6 months from the finalization of this ZIP has passed, in order to allow client developers to release new versions, and users of old clients to upgrade.
|1||RFC 2119: Key words for use in RFCs to Indicate Requirement Levels|
|2||RFC 5234: Augmented BNF for Syntax Specifications: ABNF|
|3||RFC 3986: URI Generic Syntax, Appendix A. Collected ABNF for URI|
|4||RFC 4648 section 5: Base64 Encoding with URL and Filename Safe Alphabet|
|5||BIP 21: URI Scheme|
|6||BIP 70: Payment Protocol|
|7||Bitcoin Wiki: Base58Check encoding|
|8||ZIP 173: Bech32 Format|
|9||ZIP 211: Disabling Addition of New Value to the Sprout Value Pool|
|10||Zcash Protocol Specification, Version 2020.1.15. Section 3.11: Mainnet and Testnet|
|11||Zcash Protocol Specification, Version 2020.1.15. Section 4.12: Balance and Binding Signature (Sapling)|
|12||Zcash Protocol Specification, Version 2020.1.15. Section 5.6.1: Transparent Addresses|
|13||Zcash Protocol Specification, Version 2020.1.15. Section 5.6.4: Sapling Payment Addresses|