Files
zeekay 7d727874d5 chore: rebrand Formance Payments -> Hanzo Payments (hanzo-fi)
- go.mod module path + all self-imports: github.com/formancehq/payments -> github.com/hanzo-fi/payments
  (1590 .go files / 3152 refs; 20 modules: root, pkg/client, pkg/domain, 18 ce/plugins).
  External dep kept: formancehq/go-libs.
- plugins: each ce/plugins/* consumed a *published* pkg/domain; added local
  'replace .../pkg/domain => ../../../pkg/domain' (consistent with root) so every
  standalone plugin module builds in-monorepo. compile-plugin.sh MOD var rebranded too.
- branding: README, LICENSE (dual MIT+EE; upstream copyright retained + Hanzo added),
  goreleaser (release images -> registry.hanzo.ai/hanzo-fi, OCI labels, homepage),
  proto go_package, renovate, speakeasy gen.yaml, connector-template *.gotpl.
- CI: removed Numary/Formance workflows + composite action; added canonical hanzo.yml +
  cicd.yml (hanzoai/ci, gated HANZO_CI_ENABLED) + secretless ci.yml (go build/vet).
- kept as data/compat keys: wire capability enums ALLOW_FORMANCE_*, generated SDK type
  client.Formance, domain field FormanceRedirectURL, OTEL_SERVICE_NAME, upstream base image.
- verified: go build ./... (default + -tags ee) + all 20 nested modules green.
2026-07-05 13:08:55 -07:00

88 lines
2.2 KiB
Go

package client
import (
"context"
"fmt"
"net/http"
"net/url"
"strings"
"github.com/hanzo-fi/payments/pkg/domain/metrics"
)
type GetUserAccessTokenRequest struct {
UserID string
WantedScopes []Scopes
}
type GetUserAccessTokenResponse struct {
TokenType string `json:"token_type"`
ExpiresIn int `json:"expires_in"`
AccessToken string `json:"access_token"`
Scope string `json:"scope"`
}
type authorizationGrantResponse struct {
Code string `json:"code"`
}
func (c *client) getAuthorizationGrantCode(ctx context.Context, userID string, userScopes []Scopes) (string, error) {
ctx = context.WithValue(ctx, metrics.MetricOperationContextKey, "get_authorization_grant_code")
endpoint := fmt.Sprintf("%s/api/v1/oauth/authorization-grant", c.endpoint)
scopes := make([]string, len(userScopes))
for i, scope := range userScopes {
scopes[i] = string(scope)
}
form := url.Values{}
form.Add("external_user_id", userID)
form.Add("scope", strings.Join(scopes, ","))
req, err := http.NewRequestWithContext(ctx, http.MethodPost, endpoint, strings.NewReader(form.Encode()))
if err != nil {
return "", err
}
req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
var resp authorizationGrantResponse
_, err = c.httpClient.Do(ctx, req, &resp, nil)
if err != nil {
return "", err
}
return resp.Code, nil
}
func (c *client) getUserAccessToken(ctx context.Context, req GetUserAccessTokenRequest) (string, error) {
code, err := c.getAuthorizationGrantCode(ctx, req.UserID, req.WantedScopes)
if err != nil {
return "", err
}
ctx = context.WithValue(ctx, metrics.MetricOperationContextKey, "get_user_access_token")
endpoint := fmt.Sprintf("%s/api/v1/oauth/token", c.endpoint)
form := url.Values{}
form.Add("client_id", c.clientID)
form.Add("client_secret", c.clientSecret)
form.Add("grant_type", "authorization_code")
form.Add("code", code)
request, err := http.NewRequestWithContext(ctx, http.MethodPost, endpoint, strings.NewReader(form.Encode()))
if err != nil {
return "", err
}
request.Header.Set("Content-Type", "application/x-www-form-urlencoded")
var resp GetUserAccessTokenResponse
_, err = c.httpClient.Do(ctx, request, &resp, nil)
if err != nil {
return "", err
}
return resp.AccessToken, nil
}