mirror of
https://github.com/hanzo-fi/payments.git
synced 2026-10-30 20:31:20 +00:00
- go.mod module path + all self-imports: github.com/formancehq/payments -> github.com/hanzo-fi/payments (1590 .go files / 3152 refs; 20 modules: root, pkg/client, pkg/domain, 18 ce/plugins). External dep kept: formancehq/go-libs. - plugins: each ce/plugins/* consumed a *published* pkg/domain; added local 'replace .../pkg/domain => ../../../pkg/domain' (consistent with root) so every standalone plugin module builds in-monorepo. compile-plugin.sh MOD var rebranded too. - branding: README, LICENSE (dual MIT+EE; upstream copyright retained + Hanzo added), goreleaser (release images -> registry.hanzo.ai/hanzo-fi, OCI labels, homepage), proto go_package, renovate, speakeasy gen.yaml, connector-template *.gotpl. - CI: removed Numary/Formance workflows + composite action; added canonical hanzo.yml + cicd.yml (hanzoai/ci, gated HANZO_CI_ENABLED) + secretless ci.yml (go build/vet). - kept as data/compat keys: wire capability enums ALLOW_FORMANCE_*, generated SDK type client.Formance, domain field FormanceRedirectURL, OTEL_SERVICE_NAME, upstream base image. - verified: go build ./... (default + -tags ee) + all 20 nested modules green.
88 lines
2.2 KiB
Go
88 lines
2.2 KiB
Go
package client
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"net/http"
|
|
"net/url"
|
|
"strings"
|
|
|
|
"github.com/hanzo-fi/payments/pkg/domain/metrics"
|
|
)
|
|
|
|
type GetUserAccessTokenRequest struct {
|
|
UserID string
|
|
WantedScopes []Scopes
|
|
}
|
|
|
|
type GetUserAccessTokenResponse struct {
|
|
TokenType string `json:"token_type"`
|
|
ExpiresIn int `json:"expires_in"`
|
|
AccessToken string `json:"access_token"`
|
|
Scope string `json:"scope"`
|
|
}
|
|
|
|
type authorizationGrantResponse struct {
|
|
Code string `json:"code"`
|
|
}
|
|
|
|
func (c *client) getAuthorizationGrantCode(ctx context.Context, userID string, userScopes []Scopes) (string, error) {
|
|
ctx = context.WithValue(ctx, metrics.MetricOperationContextKey, "get_authorization_grant_code")
|
|
|
|
endpoint := fmt.Sprintf("%s/api/v1/oauth/authorization-grant", c.endpoint)
|
|
|
|
scopes := make([]string, len(userScopes))
|
|
for i, scope := range userScopes {
|
|
scopes[i] = string(scope)
|
|
}
|
|
|
|
form := url.Values{}
|
|
form.Add("external_user_id", userID)
|
|
form.Add("scope", strings.Join(scopes, ","))
|
|
|
|
req, err := http.NewRequestWithContext(ctx, http.MethodPost, endpoint, strings.NewReader(form.Encode()))
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
|
|
|
|
var resp authorizationGrantResponse
|
|
_, err = c.httpClient.Do(ctx, req, &resp, nil)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
return resp.Code, nil
|
|
}
|
|
|
|
func (c *client) getUserAccessToken(ctx context.Context, req GetUserAccessTokenRequest) (string, error) {
|
|
code, err := c.getAuthorizationGrantCode(ctx, req.UserID, req.WantedScopes)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
ctx = context.WithValue(ctx, metrics.MetricOperationContextKey, "get_user_access_token")
|
|
|
|
endpoint := fmt.Sprintf("%s/api/v1/oauth/token", c.endpoint)
|
|
|
|
form := url.Values{}
|
|
form.Add("client_id", c.clientID)
|
|
form.Add("client_secret", c.clientSecret)
|
|
form.Add("grant_type", "authorization_code")
|
|
form.Add("code", code)
|
|
|
|
request, err := http.NewRequestWithContext(ctx, http.MethodPost, endpoint, strings.NewReader(form.Encode()))
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
request.Header.Set("Content-Type", "application/x-www-form-urlencoded")
|
|
|
|
var resp GetUserAccessTokenResponse
|
|
_, err = c.httpClient.Do(ctx, request, &resp, nil)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
return resp.AccessToken, nil
|
|
}
|