mirror of
https://github.com/hanzo-fi/payments.git
synced 2026-10-30 20:31:20 +00:00
zeekay
7d727874d5
- go.mod module path + all self-imports: github.com/formancehq/payments -> github.com/hanzo-fi/payments (1590 .go files / 3152 refs; 20 modules: root, pkg/client, pkg/domain, 18 ce/plugins). External dep kept: formancehq/go-libs. - plugins: each ce/plugins/* consumed a *published* pkg/domain; added local 'replace .../pkg/domain => ../../../pkg/domain' (consistent with root) so every standalone plugin module builds in-monorepo. compile-plugin.sh MOD var rebranded too. - branding: README, LICENSE (dual MIT+EE; upstream copyright retained + Hanzo added), goreleaser (release images -> registry.hanzo.ai/hanzo-fi, OCI labels, homepage), proto go_package, renovate, speakeasy gen.yaml, connector-template *.gotpl. - CI: removed Numary/Formance workflows + composite action; added canonical hanzo.yml + cicd.yml (hanzoai/ci, gated HANZO_CI_ENABLED) + secretless ci.yml (go build/vet). - kept as data/compat keys: wire capability enums ALLOW_FORMANCE_*, generated SDK type client.Formance, domain field FormanceRedirectURL, OTEL_SERVICE_NAME, upstream base image. - verified: go build ./... (default + -tags ee) + all 20 nested modules green.
90 lines
2.0 KiB
Go
90 lines
2.0 KiB
Go
package fireblocks
|
|
|
|
import (
|
|
"crypto/rsa"
|
|
"crypto/x509"
|
|
"encoding/json"
|
|
"encoding/pem"
|
|
"fmt"
|
|
|
|
"github.com/hanzo-fi/payments/pkg/domain/models"
|
|
errorsutils "github.com/hanzo-fi/payments/pkg/domain/errors"
|
|
"github.com/go-playground/validator/v10"
|
|
"github.com/pkg/errors"
|
|
)
|
|
|
|
type Config struct {
|
|
APIKey string `json:"apiKey" validate:"required"`
|
|
PrivateKey string `json:"privateKey" validate:"required"`
|
|
Endpoint string `json:"endpoint"`
|
|
|
|
privateKey *rsa.PrivateKey `json:"-"`
|
|
}
|
|
|
|
const (
|
|
PAGE_SIZE = 200
|
|
DefaultEndpoint = "https://api.fireblocks.io"
|
|
)
|
|
|
|
func (c *Config) validate() error {
|
|
p, _ := pem.Decode([]byte(c.PrivateKey))
|
|
if p == nil {
|
|
return errorsutils.NewWrappedError(
|
|
fmt.Errorf("invalid private key PEM in config"),
|
|
models.ErrInvalidConfig,
|
|
)
|
|
}
|
|
|
|
privateKey, err := x509.ParsePKCS1PrivateKey(p.Bytes)
|
|
if err != nil {
|
|
// Try PKCS8 format
|
|
key, err2 := x509.ParsePKCS8PrivateKey(p.Bytes)
|
|
if err2 != nil {
|
|
return errorsutils.NewWrappedError(
|
|
fmt.Errorf("failed to parse private key as PKCS1 (%w) or PKCS8 (%v)", err, err2),
|
|
models.ErrInvalidConfig,
|
|
)
|
|
}
|
|
rsaKey, ok := key.(*rsa.PrivateKey)
|
|
if !ok {
|
|
return errorsutils.NewWrappedError(
|
|
fmt.Errorf("private key is not RSA"),
|
|
models.ErrInvalidConfig,
|
|
)
|
|
}
|
|
privateKey = rsaKey
|
|
}
|
|
|
|
c.privateKey = privateKey
|
|
|
|
if c.Endpoint == "" {
|
|
c.Endpoint = DefaultEndpoint
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func unmarshalAndValidateConfig(payload json.RawMessage) (Config, error) {
|
|
var raw struct {
|
|
APIKey string `json:"apiKey"`
|
|
PrivateKey string `json:"privateKey"`
|
|
Endpoint string `json:"endpoint"`
|
|
}
|
|
if err := json.Unmarshal(payload, &raw); err != nil {
|
|
return Config{}, errors.Wrap(models.ErrInvalidConfig, err.Error())
|
|
}
|
|
|
|
config := Config{
|
|
APIKey: raw.APIKey,
|
|
PrivateKey: raw.PrivateKey,
|
|
Endpoint: raw.Endpoint,
|
|
}
|
|
|
|
validate := validator.New(validator.WithRequiredStructEnabled())
|
|
if err := validate.Struct(config); err != nil {
|
|
return config, errors.Wrap(models.ErrInvalidConfig, err.Error())
|
|
}
|
|
|
|
return config, config.validate()
|
|
}
|