246 lines
11 KiB
Ruby
246 lines
11 KiB
Ruby
# encoding: UTF-8
|
|
# frozen_string_literal: true
|
|
|
|
module API
|
|
module V2
|
|
module Account
|
|
class Withdraws < Grape::API
|
|
|
|
before { withdraws_must_be_permitted! }
|
|
helpers API::V2::Account::Utils
|
|
|
|
desc 'List your withdraws as paginated collection.',
|
|
is_array: true,
|
|
success: API::V2::Entities::Withdraw
|
|
params do
|
|
optional :currency,
|
|
type: String,
|
|
values: { value: -> { Currency.visible.codes(bothcase: true) }, message: 'account.currency.doesnt_exist'},
|
|
desc: 'Currency code.'
|
|
optional :limit,
|
|
type: { value: Integer, message: 'account.withdraw.non_integer_limit' },
|
|
values: { value: 1..100, message: 'account.withdraw.invalid_limit' },
|
|
default: 100,
|
|
desc: "Number of withdraws per page (defaults to 100, maximum is 100)."
|
|
optional :state,
|
|
values: { value: ->(v) { (Array.wrap(v) - Withdraw::STATES.map(&:to_s)).blank? }, message: 'account.withdraw.invalid_state' },
|
|
desc: 'Filter withdrawals by states.'
|
|
optional :rid,
|
|
type: String,
|
|
allow_blank: false,
|
|
desc: 'Wallet address on the Blockchain.'
|
|
optional :time_from,
|
|
allow_blank: { value: false, message: 'account.withdraw.empty_time_from' },
|
|
type: { value: Integer, message: 'account.withdraw.non_integer_time_from' },
|
|
desc: 'An integer represents the seconds elapsed since Unix epoch.'
|
|
optional :time_to,
|
|
type: { value: Integer, message: 'account.withdraw.non_integer_time_to' },
|
|
allow_blank: { value: false, message: 'account.withdraw.empty_time_to' },
|
|
desc: 'An integer represents the seconds elapsed since Unix epoch.'
|
|
optional :page,
|
|
type: { value: Integer, message: 'account.withdraw.non_integer_page' },
|
|
values: { value: -> (p){ p.try(:positive?) }, message: 'account.withdraw.non_positive_page'},
|
|
default: 1,
|
|
desc: 'Page number (defaults to 1).'
|
|
end
|
|
get '/withdraws' do
|
|
user_authorize! :read, ::Withdraw
|
|
|
|
currency = Currency.find(params[:currency]) if params[:currency].present?
|
|
|
|
current_user.withdraws.order(id: :desc)
|
|
.tap { |q| q.where!(currency: currency) if currency }
|
|
.tap { |q| q.where!(aasm_state: params[:state]) if params[:state] }
|
|
.tap { |q| q.where!(rid: params[:rid]) if params[:rid] }
|
|
.tap { |q| q.where!('updated_at >= ?', Time.at(params[:time_from])) if params[:time_from].present? }
|
|
.tap { |q| q.where!('updated_at <= ?', Time.at(params[:time_to])) if params[:time_to].present? }
|
|
.tap { |q| present paginate(q), with: API::V2::Entities::Withdraw }
|
|
end
|
|
|
|
desc 'Returns withdrawal sums for last 4 hours and 1 month'
|
|
get '/withdraws/sums' do
|
|
user_authorize! :read, ::Withdraw
|
|
|
|
sum_24_hours, sum_1_month = Withdraw.sanitize_execute_sum_queries(current_user.id)
|
|
|
|
present({ last_24_hours: sum_24_hours, last_1_month: sum_1_month })
|
|
end
|
|
|
|
desc 'Creates new withdrawal to active beneficiary.'
|
|
params do
|
|
requires :otp,
|
|
type: { value: Integer, message: 'account.withdraw.non_integer_otp' },
|
|
allow_blank: false,
|
|
desc: 'OTP to perform action'
|
|
requires :beneficiary_id,
|
|
type: { value: Integer, message: 'account.withdraw.non_integer_beneficiary_id' },
|
|
allow_blank: false,
|
|
desc: 'ID of Active Beneficiary belonging to user.'
|
|
requires :currency,
|
|
type: String,
|
|
values: { value: -> { Currency.visible.codes(bothcase: true) }, message: 'account.currency.doesnt_exist'},
|
|
desc: 'The currency code.'
|
|
requires :amount,
|
|
type: { value: BigDecimal, message: 'account.withdraw.non_decimal_amount' },
|
|
values: { value: ->(v) { v.try(:positive?) }, message: 'account.withdraw.non_positive_amount' },
|
|
desc: 'The amount to withdraw.'
|
|
optional :note,
|
|
type: String,
|
|
values: { value: ->(v) { v.size <= 256 }, message: 'account.withdraw.too_long_note' },
|
|
desc: 'Optional user metadata to be applied to the transaction. Used to tag transactions with memorable comments.'
|
|
end
|
|
post '/withdraws' do
|
|
user_authorize! :create, ::Withdraw
|
|
|
|
withdraw_api_must_be_enabled!
|
|
|
|
if current_user.otp.present? && current_user.read_cache('withdraw_2fa').blank?
|
|
error!({ errors: ['account.withdraw.need.2fa'] }, 403)
|
|
end
|
|
|
|
totp = Vault::TOTPAction.new('withdraw-coin')
|
|
error!({ errors: ['withdraw.totp.code'] }, 422) unless totp.validate?(current_user.uid, params[:otp])
|
|
|
|
beneficiary = current_user
|
|
.beneficiaries
|
|
.available_to_member
|
|
.find_by(id: params[:beneficiary_id])
|
|
|
|
if beneficiary.blank?
|
|
error!({ errors: ['account.beneficiary.doesnt_exist'] }, 422)
|
|
elsif !beneficiary.active?
|
|
error!({ errors: ['account.beneficiary.invalid_state_for_withdrawal'] }, 422)
|
|
end
|
|
|
|
currency = Currency.find(params[:currency])
|
|
error!({ errors: ['account.currency.withdrawal_disabled'] }, 422) unless currency.withdrawal_enabled?
|
|
|
|
# TODO: Delete subclasses from Deposit and Withdraw
|
|
withdraw = "withdraws/#{currency.type}".camelize.constantize.new \
|
|
beneficiary: beneficiary,
|
|
sum: params[:amount],
|
|
member: current_user,
|
|
currency: currency,
|
|
note: params[:note]
|
|
withdraw.save!
|
|
withdraw.with_lock { withdraw.accept! }
|
|
current_user.delete_cache('withdraw_2fa')
|
|
present withdraw, with: API::V2::Entities::Withdraw
|
|
|
|
rescue ::Account::AccountError => e
|
|
report_api_error(e, request)
|
|
error!({ errors: ['account.withdraw.insufficient_balance'] }, 422)
|
|
rescue ActiveRecord::RecordInvalid => e
|
|
report_api_error(e, request)
|
|
# TODO: Check if there are other errors possible here.
|
|
# For now single error which is not handled by params validations is
|
|
# sum precision validation error (PrecisionValidator).
|
|
error!({ errors: ['account.withdraw.invalid_amount'] }, 422)
|
|
rescue => e
|
|
report_exception(e)
|
|
error!({ errors: ['account.withdraw.create_error'] }, 422)
|
|
end
|
|
|
|
desc 'Creates new fiat withdrawal'
|
|
params do
|
|
requires :amount,
|
|
type: { value: BigDecimal, message: 'account.withdraw.non_decimal_amount' },
|
|
values: { value: ->(v) { v.try(:positive?) }, message: 'account.withdraw.non_positive_amount' },
|
|
desc: 'The amount to withdraw.'
|
|
requires :iban,
|
|
type: String,
|
|
desc: 'iban bank number'
|
|
requires :currency,
|
|
type: String,
|
|
default: 'irt',
|
|
desc: -> { 'currency' }
|
|
optional :note,
|
|
type: String,
|
|
values: { value: ->(v) { v.size <= 256 }, message: 'account.withdraw.too_long_note' },
|
|
desc: 'Optional user metadata to be applied to the transaction. Used to tag transactions with memorable comments.'
|
|
end
|
|
post '/withdraws/fiat' do
|
|
user_authorize! :create, ::Withdraw
|
|
withdraw_api_must_be_enabled!
|
|
|
|
if current_user.otp.present? && current_user.read_cache('withdraw_2fa').blank?
|
|
error!({ errors: ['account.withdraw.need.2fa'] }, 403)
|
|
end
|
|
|
|
error!({ errors: ['account.withdraw.use_valid_iban'] }, 403) if current_user.ibans.exclude?(params[:iban])
|
|
|
|
currency = Currency.find(params[:currency])
|
|
|
|
withdraw = "withdraws/#{currency.type}".camelize.constantize.new \
|
|
rid: params[:iban],
|
|
sum: params[:amount],
|
|
member: current_user,
|
|
currency: currency,
|
|
transfer_type: :fiat,
|
|
note: params[:note]
|
|
|
|
withdraw.save
|
|
error!({ errors: withdraw.errors.full_messages }, 422) unless withdraw.valid?
|
|
# delete 2fa cache
|
|
current_user.delete_cache('withdraw_2fa')
|
|
publish_confirmation_code(current_user, 'withdraw-fiat')
|
|
present withdraw, with: API::V2::Entities::Withdraw
|
|
end
|
|
#
|
|
#
|
|
desc 'confirm fiat withdrawal'
|
|
params do
|
|
requires :id,
|
|
type: Integer,
|
|
desc: 'withdraw id'
|
|
requires :otp,
|
|
type: Integer,
|
|
desc: 'auth otp in sms or email'
|
|
end
|
|
post '/withdraws/confirm' do
|
|
user_authorize! :create, ::Withdraw
|
|
withdraw = current_user.withdraws.find_by(id: params[:id])
|
|
error!({ errors: ['account.withdraw.not.found'] }, 403) unless withdraw.present?
|
|
|
|
error!({ errors: ['account.withdraw.process_before'] }, 403) unless withdraw.aasm_state == 'prepared'
|
|
|
|
totp = Vault::TOTPAction.new('withdraw-fiat')
|
|
error!({ errors: ['withdraw.totp.code'] }, 422) unless totp.validate?(current_user.uid, params[:otp])
|
|
|
|
# here must lock found
|
|
withdraw.with_lock { withdraw.accept! }
|
|
response = ::VandarService.new.create_withdraw(amount: withdraw.sum, iban: withdraw.rid)
|
|
if response.dig('status').to_i.positive?
|
|
withdraw.update(txid: response['data'].dig('settlement', 0, 'transaction_id'), aasm_state: 'confirming')
|
|
else
|
|
withdraw.with_lock { withdraw.reject! }
|
|
end
|
|
|
|
present(response: response)
|
|
end
|
|
|
|
#
|
|
#
|
|
desc 'Get fiat withdrawal'
|
|
params do
|
|
requires :id,
|
|
type: Integer,
|
|
desc: 'withdraw id'
|
|
optional :with_otp,
|
|
type: String,
|
|
desc: -> { 'send otp or not' }
|
|
end
|
|
get '/withdraw' do
|
|
user_authorize! :read, ::Withdraw
|
|
|
|
withdraw = current_user.withdraws.find_by(id: params[:id])
|
|
if withdraw.present? && withdraw.accepted? && params['with_otp'].present?
|
|
publish_confirmation_code(current_user, 'withdraw')
|
|
end
|
|
present withdraw, with: API::V2::Entities::Withdraw
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end
|