mirror of
https://github.com/hanzoai/commerce.git
synced 2026-10-30 15:08:42 +00:00
zeekay
1943f1c093
Multi-tenant commerce and billing: orders, subscriptions, invoices, plans, usage metering and a credit ledger. One Go binary. MIT OR Apache-2.0. Claude-Session: https://claude.ai/code/session_01SAtaDFm8VDiWrhYHNNtxMw
66 lines
2.2 KiB
Go
66 lines
2.2 KiB
Go
package wire
|
|
|
|
import (
|
|
"errors"
|
|
|
|
"github.com/zap-proto/zip"
|
|
|
|
"github.com/hanzoai/commerce/log"
|
|
"github.com/hanzoai/commerce/middleware"
|
|
"github.com/hanzoai/commerce/thirdparty/kms"
|
|
"github.com/hanzoai/commerce/util/json/http"
|
|
)
|
|
|
|
type wireInstructionsResponse struct {
|
|
BankName string `json:"bankName,omitempty"`
|
|
AccountHolder string `json:"accountHolder,omitempty"`
|
|
RoutingNumber string `json:"routingNumber,omitempty"`
|
|
AccountNumber string `json:"accountNumber,omitempty"`
|
|
SWIFT string `json:"swift,omitempty"`
|
|
IBAN string `json:"iban,omitempty"`
|
|
BankAddress string `json:"bankAddress,omitempty"`
|
|
Reference string `json:"reference,omitempty"`
|
|
Instructions string `json:"instructions,omitempty"`
|
|
}
|
|
|
|
// Instructions returns the caller org's wire-transfer instructions.
|
|
// GET /v1/checkout/wire/instructions
|
|
//
|
|
// Fails CLOSED: the org comes ONLY from the authenticated principal (set by the
|
|
// identity/token middleware). A request with no resolved org gets a clean 401 —
|
|
// never a panic (the previous GetOrganization MustGet 500'd on any org-less
|
|
// call after EdgeAuth strips a spoofed X-Org-Id) and never another org's bank
|
|
// details. Account/routing/SWIFT are org-specific sensitive data, so there is
|
|
// no anonymous read.
|
|
func Instructions(c *zip.Ctx) error {
|
|
org, ok := middleware.GetOrganizationOK(c)
|
|
if !ok || org == nil {
|
|
return http.Fail(c, 401, "Authentication required",
|
|
errors.New("no authenticated organization for wire instructions"))
|
|
}
|
|
|
|
// Hydrate payment credentials from KMS
|
|
if kmsClient, ok := c.Locals("kms").(*kms.CachedClient); ok {
|
|
if err := kms.Hydrate(kmsClient, org); err != nil {
|
|
log.Error("KMS hydration failed for org %q: %v", org.Name, err, c)
|
|
}
|
|
}
|
|
|
|
w := org.Wire
|
|
if w.BankName == "" && w.AccountHolder == "" {
|
|
return http.Fail(c, 404, "Wire transfer not configured", nil)
|
|
}
|
|
|
|
return http.Render(c, 200, wireInstructionsResponse{
|
|
BankName: w.BankName,
|
|
AccountHolder: w.AccountHolder,
|
|
RoutingNumber: w.RoutingNumber,
|
|
AccountNumber: w.AccountNumber,
|
|
SWIFT: w.SWIFT,
|
|
IBAN: w.IBAN,
|
|
BankAddress: w.BankAddress,
|
|
Reference: w.Reference,
|
|
Instructions: w.Instructions,
|
|
})
|
|
}
|