mirror of
https://github.com/grassrootseconomics/cic-custodial.git
synced 2024-11-10 17:26:46 +01:00
Mohamed Sohail
9e1d62a014
* wip: add transfer auithorization * feat: update transferAuthPayload * switch to MAX_INT for value and use revoke flag * tranfer handler: fix nonce rollback on EOA account * feat: switch to session based session transfer auth * Demurrage contracts require setting the approval value to 0 before updating the value after the initial limit is set * This implementation auto-revokes every 15 min after arequest is created. Subsequent requests will fail untill the value is set back to 0 * feat: settable approve session timeout
106 lines
2.7 KiB
Go
106 lines
2.7 KiB
Go
package main
|
|
|
|
import (
|
|
"net/http"
|
|
|
|
"github.com/VictoriaMetrics/metrics"
|
|
"github.com/go-playground/validator/v10"
|
|
_ "github.com/grassrootseconomics/cic-custodial/docs"
|
|
"github.com/grassrootseconomics/cic-custodial/internal/api"
|
|
"github.com/grassrootseconomics/cic-custodial/internal/custodial"
|
|
"github.com/grassrootseconomics/cic-custodial/pkg/util"
|
|
"github.com/labstack/echo/v4"
|
|
"github.com/labstack/echo/v4/middleware"
|
|
echoSwagger "github.com/swaggo/echo-swagger"
|
|
)
|
|
|
|
const (
|
|
systemGlobalLockKey = "system:global_lock"
|
|
)
|
|
|
|
// Bootstrap API server.
|
|
func initApiServer(custodialContainer *custodial.Custodial) *echo.Echo {
|
|
customValidator := validator.New()
|
|
|
|
server := echo.New()
|
|
server.HideBanner = true
|
|
server.HidePort = true
|
|
server.Validator = &api.Validator{
|
|
ValidatorProvider: customValidator,
|
|
}
|
|
server.HTTPErrorHandler = customHTTPErrorHandler
|
|
|
|
server.Use(middleware.Recover())
|
|
server.Use(middleware.BodyLimit("1M"))
|
|
server.Use(middleware.ContextTimeout(util.SLATimeout))
|
|
|
|
if ko.Bool("service.metrics") {
|
|
server.GET("/metrics", func(c echo.Context) error {
|
|
metrics.WritePrometheus(c.Response(), true)
|
|
return nil
|
|
})
|
|
}
|
|
|
|
if ko.Bool("service.docs") {
|
|
server.GET("/docs/*", echoSwagger.WrapHandler)
|
|
}
|
|
|
|
apiRoute := server.Group("/api", systemGlobalLock(custodialContainer))
|
|
|
|
apiRoute.POST("/account/create", api.HandleAccountCreate(custodialContainer))
|
|
apiRoute.GET("/account/status/:address", api.HandleNetworkAccountStatus(custodialContainer))
|
|
apiRoute.POST("/sign/transfer", api.HandleSignTransfer(custodialContainer))
|
|
apiRoute.POST("/sign/transferAuth", api.HandleSignTranserAuthorization(custodialContainer))
|
|
apiRoute.GET("/track/:trackingId", api.HandleTrackTx(custodialContainer))
|
|
|
|
return server
|
|
}
|
|
|
|
func customHTTPErrorHandler(err error, c echo.Context) {
|
|
if c.Response().Committed {
|
|
return
|
|
}
|
|
|
|
if he, ok := err.(*echo.HTTPError); ok {
|
|
var errorMsg string
|
|
|
|
if m, ok := he.Message.(error); ok {
|
|
errorMsg = m.Error()
|
|
} else if m, ok := he.Message.(string); ok {
|
|
errorMsg = m
|
|
}
|
|
|
|
c.JSON(he.Code, api.ErrResp{
|
|
Ok: false,
|
|
Message: errorMsg,
|
|
})
|
|
return
|
|
}
|
|
|
|
lo.Error("api: echo error", "path", c.Path(), "err", err)
|
|
c.JSON(http.StatusInternalServerError, api.ErrResp{
|
|
Ok: false,
|
|
Message: "Internal server error.",
|
|
})
|
|
}
|
|
|
|
func systemGlobalLock(cu *custodial.Custodial) echo.MiddlewareFunc {
|
|
return func(next echo.HandlerFunc) echo.HandlerFunc {
|
|
return func(c echo.Context) error {
|
|
locked, err := cu.RedisClient.Get(c.Request().Context(), systemGlobalLockKey).Bool()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
if locked {
|
|
return c.JSON(http.StatusServiceUnavailable, api.ErrResp{
|
|
Ok: false,
|
|
Message: "System manually locked.",
|
|
})
|
|
}
|
|
|
|
return next(c)
|
|
}
|
|
}
|
|
}
|