George Lambert
1b199ca4d4
Some checks are pending
offline / test (push) Waiting to run
Zapier is one ingress. Direct web, customer API, and S2S leaf nodes are their own services. Every hop to an internal subject must pass verae.access.authz.check (default deny by plane).
50 lines
2.1 KiB
JavaScript
50 lines
2.1 KiB
JavaScript
const AUTHZ = (process.env.AUTHZ_URL || 'http://127.0.0.1:3020').replace(/\/$/, '');
|
|
const BOOKS = (process.env.ACCOUNT_BALANCE_URL || 'http://127.0.0.1:3010').replace(/\/$/, '');
|
|
|
|
export const PLANE = 'web';
|
|
export const AUTHZ_CHECK = 'verae.access.authz.check';
|
|
|
|
export async function check(subject, { principal, kind, payload } = {}) {
|
|
const r = await fetch(`${AUTHZ}/check`, {
|
|
method: 'POST',
|
|
headers: { 'content-type': 'application/json' },
|
|
body: JSON.stringify({ plane: PLANE, subject, principal, kind, payload }),
|
|
});
|
|
return { status: r.status, body: await r.json().catch(() => ({ allow: false })) };
|
|
}
|
|
|
|
export async function statement(customerId, principal) {
|
|
const gate = await check('verae.billing.statement.get', { principal });
|
|
if (!gate.body.allow) return { status: 403, body: gate.body };
|
|
const url = process.env.NATS_URL;
|
|
if (url) {
|
|
try {
|
|
const { connect, StringCodec } = await import('nats');
|
|
const nc = await connect({ servers: url.split(','), name: 'verae-access-web' });
|
|
const sc = StringCodec();
|
|
const m = await nc.request(
|
|
'verae.billing.statement.get',
|
|
sc.encode(JSON.stringify({ customerId, plane: PLANE, principal })),
|
|
{ timeout: 2000 },
|
|
);
|
|
const out = JSON.parse(sc.decode(m.data) || '{}');
|
|
await nc.close();
|
|
return { status: 200, body: { ...out, source: 'nats', plane: PLANE } };
|
|
} catch {
|
|
/* HTTP fallback */
|
|
}
|
|
}
|
|
const r = await fetch(`${BOOKS}/statement/${customerId}`);
|
|
return { status: r.status, body: { ...(await r.json().catch(() => ({}))), source: 'account-balance', plane: PLANE } };
|
|
}
|
|
|
|
export async function reload(customerId, cents, principal) {
|
|
const gate = await check('verae.billing.balance.adjust', { principal, kind: 'reload' });
|
|
if (!gate.body.allow) return { status: 403, body: gate.body };
|
|
const r = await fetch(`${BOOKS}/adjust`, {
|
|
method: 'POST',
|
|
headers: { 'content-type': 'application/json' },
|
|
body: JSON.stringify({ customerId, cents, reason: 'reload', agent: principal || 'web', kind: 'reload' }),
|
|
});
|
|
return { status: r.status, body: { ...(await r.json().catch(() => ({}))), plane: PLANE } };
|
|
}
|