@bitpay-labs/bitcore-wallet-service 11.5.2

package/src/externalservices/banxa.ts

@@ -0,0 +1,261 @@
+import * as crypto from 'crypto';
+import * as _ from 'lodash';
+import * as request from 'request';
+import config from '../config';
+import { ClientError } from '../lib/errors/clienterror';
+import { checkRequired } from '../lib/server';
+
+export class BanxaService {
+  request: any = request;
+
+  private banxaGetKeys(req) {
+    if (!config.banxa) throw new Error('Banxa missing credentials');
+
+    let env: 'sandbox' | 'production' | 'sandboxWeb' | 'productionWeb';
+    env = req.body.env === 'production' ? 'production' : 'sandbox';
+    if (req.body.context === 'web') {
+      env += 'Web';
+    }
+
+    delete req.body.env;
+    delete req.body.context;
+
+    const keys: {
+      API: string;
+      API_KEY: string;
+      SECRET_KEY: string;
+    } = {
+      API: config.banxa[env].api,
+      API_KEY: config.banxa[env].apiKey,
+      SECRET_KEY: config.banxa[env].secretKey
+    };
+
+    return keys;
+  }
+
+  private getBanxaSignature(method: 'get' | 'post', endpoint: string, apiKey: string, secret: string, body?: string) {
+    let signature;
+    const nonce = Date.now().toString();
+
+    switch (method) {
+      case 'get':
+        signature = 'GET' + '\n' + `/api${endpoint}` + '\n' + nonce;
+        break;
+      case 'post':
+        const stringifiedBody = body ? JSON.stringify(_.cloneDeep(body)) : '';
+        signature = 'POST' + '\n' + `/api${endpoint}` + '\n' + nonce + '\n' + stringifiedBody;
+        break;
+      default:
+        signature = undefined;
+        break;
+    }
+
+    const localSignature = crypto.createHmac('sha256', secret).update(signature).digest('hex');
+    const auth = `${apiKey}:${localSignature}:${nonce}`;
+    return auth;
+  }
+
+  banxaGetCoins(req): Promise<any> {
+    return new Promise((resolve, reject) => {
+      const keys = this.banxaGetKeys(req);
+      const API = keys.API;
+      const API_KEY = keys.API_KEY;
+      const SECRET_KEY = keys.SECRET_KEY;
+
+      if (!checkRequired(req.body, ['orderType'])) {
+        return reject(new ClientError("Banxa's request missing arguments"));
+      }
+      if (!['buy', 'sell'].includes(req.body.orderType)) {
+        return reject(new ClientError("Banxa's 'orderType' property must be 'sell' or 'buy'"));
+      }
+
+      const UriPath = `/coins/${req.body.orderType}`;
+      const URL: string = API + UriPath;
+      const auth = this.getBanxaSignature('get', UriPath, API_KEY, SECRET_KEY);
+
+      const headers = {
+        'Content-Type': 'application/json',
+        'Authorization': `Bearer ${auth}`
+      };
+
+      this.request.get(
+        URL,
+        {
+          headers,
+          json: true
+        },
+        (err, data) => {
+          if (err) {
+            return reject(err.body ? err.body : err);
+          } else {
+            return resolve(data.body ? data.body : data);
+          }
+        }
+      );
+    });
+  }
+
+  banxaGetPaymentMethods(req): Promise<any> {
+    return new Promise((resolve, reject) => {
+      const keys = this.banxaGetKeys(req);
+      const API = keys.API;
+      const API_KEY = keys.API_KEY;
+      const SECRET_KEY = keys.SECRET_KEY;
+
+      const qs: string[] = [];
+      if (req.body.source) qs.push('source=' + req.body.source);
+      if (req.body.target) qs.push('target=' + req.body.target);
+
+      const UriPath = `/payment-methods${qs.length > 0 ? '?' + qs.join('&') : ''}`;
+      const URL: string = API + UriPath;
+      const auth = this.getBanxaSignature('get', UriPath, API_KEY, SECRET_KEY);
+
+      const headers = {
+        'Content-Type': 'application/json',
+        'Authorization': `Bearer ${auth}`
+      };
+
+      this.request.get(
+        URL,
+        {
+          headers,
+          json: true
+        },
+        (err, data) => {
+          if (err) {
+            return reject(err.body ? err.body : err);
+          } else {
+            return resolve(data.body ? data.body : data);
+          }
+        }
+      );
+    });
+  }
+
+  banxaGetQuote(req): Promise<any> {
+    return new Promise((resolve, reject) => {
+      const keys = this.banxaGetKeys(req);
+      const API = keys.API;
+      const API_KEY = keys.API_KEY;
+      const SECRET_KEY = keys.SECRET_KEY;
+
+      if (!checkRequired(req.body, ['source', 'target'])) {
+        return reject(new ClientError("Banxa's request missing arguments"));
+      }
+
+      const qs: string[] = [];
+      qs.push('source=' + req.body.source);
+      qs.push('target=' + req.body.target);
+
+      if (req.body.source_amount) qs.push('source_amount=' + req.body.source_amount);
+      if (req.body.target_amount) qs.push('target_amount=' + req.body.target_amount);
+      if (req.body.payment_method_id) qs.push('payment_method_id=' + req.body.payment_method_id);
+      if (req.body.account_reference) qs.push('account_reference=' + req.body.account_reference);
+      if (req.body.blockchain) qs.push('blockchain=' + req.body.blockchain);
+
+      const UriPath = `/prices${qs.length > 0 ? '?' + qs.join('&') : ''}`;
+      const URL: string = API + UriPath;
+      const auth = this.getBanxaSignature('get', UriPath, API_KEY, SECRET_KEY);
+
+      const headers = {
+        'Content-Type': 'application/json',
+        'Authorization': `Bearer ${auth}`
+      };
+
+      this.request.get(
+        URL,
+        {
+          headers,
+          json: true
+        },
+        (err, data) => {
+          if (err) {
+            return reject(err.body ? err.body : err);
+          } else {
+            return resolve(data.body ? data.body : data);
+          }
+        }
+      );
+    });
+  }
+
+  banxaCreateOrder(req): Promise<any> {
+    return new Promise((resolve, reject) => {
+      const keys = this.banxaGetKeys(req);
+      const API = keys.API;
+      const API_KEY = keys.API_KEY;
+      const SECRET_KEY = keys.SECRET_KEY;
+
+      if (!checkRequired(req.body, ['account_reference', 'source', 'target', 'wallet_address', 'return_url_on_success'])) {
+        return reject(new ClientError("Banxa's request missing arguments"));
+      }
+
+      delete req.body.payment_method_id;
+
+      const UriPath = '/orders';
+      const URL: string = API + UriPath;
+      const auth = this.getBanxaSignature('post', UriPath, API_KEY, SECRET_KEY, req.body);
+
+      const headers = {
+        'Content-Type': 'application/json',
+        'Authorization': `Bearer ${auth}`
+      };
+
+      this.request.post(
+        URL,
+        {
+          headers,
+          body: req.body,
+          json: true
+        },
+        (err, data) => {
+          if (err) {
+            return reject(err.body ? err.body : err);
+          } else {
+            return resolve(data.body ? data.body : data);
+          }
+        }
+      );
+    });
+  }
+
+  banxaGetOrder(req): Promise<any> {
+    return new Promise((resolve, reject) => {
+      const keys = this.banxaGetKeys(req);
+      const API = keys.API;
+      const API_KEY = keys.API_KEY;
+      const SECRET_KEY = keys.SECRET_KEY;
+
+      if (!checkRequired(req.body, ['order_id'])) {
+        return reject(new ClientError("Banxa's request missing arguments"));
+      }
+
+      const qs: string[] = [];
+      if (req.body.fx_currency) qs.push('fx_currency=' + req.body.fx_currency);
+
+      const UriPath = `/orders/${req.body.order_id}${qs.length > 0 ? '?' + qs.join('&') : ''}`;
+      const URL: string = API + UriPath;
+      const auth = this.getBanxaSignature('get', UriPath, API_KEY, SECRET_KEY);
+
+      const headers = {
+        'Content-Type': 'application/json',
+        'Authorization': `Bearer ${auth}`
+      };
+
+      this.request.get(
+        URL,
+        {
+          headers,
+          json: true
+        },
+        (err, data) => {
+          if (err) {
+            return reject(err.body ? err.body : err);
+          } else {
+            return resolve(data.body ? data.body : data);
+          }
+        }
+      );
+    });
+  }
+}

package/src/externalservices/changelly.ts

@@ -0,0 +1,371 @@
+import * as crypto from 'crypto';
+import * as request from 'request';
+import config from '../config';
+import { ClientError } from '../lib/errors/clienterror';
+import { Errors } from '../lib/errors/errordefinitions';
+import logger from '../lib/logger';
+import { checkRequired } from '../lib/server';
+
+export class ChangellyService {
+  request: any = request;
+
+  changellyGetKeysV2(req) {
+
+    const stablecoins = [
+      'usdt', 'usdc', 'dai', 'busd', 'tusd', 'usdp', 'usdn',
+      'usdt20', 'usdtarb', 'usdtop', 'usdtpolygon', 'usdtsol',
+      'usdcmatic', 'usdcarb', 'usdcbase', 'usdcop', 'usdcsol',
+      'daipolygon'
+    ];
+
+    if (!config.changelly) {
+      logger.warn('Changelly missing credentials');
+      throw new Error('ClientError: Service not configured.');
+    } else if (!config.changelly.v2) {
+      logger.warn('Changelly v2 missing credentials');
+      throw new Error('ClientError: Service v2 not configured.');
+    }
+
+    const { api, secret, secret_stablecoin } = config.changelly.v2;
+
+    const apiKey = stablecoins.includes(req.body?.coinFrom) && stablecoins.includes(req.body?.coinTo)
+      ? (secret_stablecoin ?? secret)
+      : secret;
+    
+    const keys = {
+      API: api,
+      SECRET: apiKey
+    };
+
+    return keys;
+  }
+
+  changellySignRequestsV2(message, secret: string) {
+    if (!message || !secret) throw new Error('Missing parameters to sign Changelly v2 request');
+
+    const privateKey = crypto.createPrivateKey({
+      key: Buffer.from(secret, 'hex'),
+      format: 'der',
+      type: 'pkcs8',
+    });
+
+    const publicKey = crypto.createPublicKey(privateKey).export({
+      type: 'pkcs1',
+      format: 'der'
+    });
+
+    const signature = crypto.sign('sha256', Buffer.from(JSON.stringify(message)), privateKey);
+
+    return { signature, publicKey };
+  }
+
+  changellyGetCurrencies(req): Promise<any> {
+    return new Promise((resolve, reject) => {
+      let keys;
+      if (req.body.useV2) {
+        keys = this.changellyGetKeysV2(req);
+      } else {
+        return reject(Errors.UPGRADE_NEEDED.withMessage('Credentials expired, please update the app to continue using Changelly services.'));
+      }
+
+      if (!checkRequired(req.body, ['id'])) {
+        return reject(new ClientError('changellyGetCurrencies request missing arguments'));
+      }
+
+      const message = {
+        jsonrpc: '2.0',
+        id: req.body.id,
+        method: req.body.full ? 'getCurrenciesFull' : 'getCurrencies',
+        params: {}
+      };
+
+      const URL: string = keys.API;
+      const { signature, publicKey } = this.changellySignRequestsV2(message, keys.SECRET);
+      const headers = {
+        'Content-Type': 'application/json',
+        'X-Api-Key': crypto.createHash('sha256').update(publicKey).digest('base64'),
+        'X-Api-Signature': signature.toString('base64'),
+      };
+
+      this.request.post(
+        URL,
+        {
+          headers,
+          body: message,
+          json: true
+        },
+        (err, data) => {
+          if (err) {
+            return reject(err.body ?? err);
+          } else {
+            return resolve(data.body);
+          }
+        }
+      );
+    });
+  }
+
+  changellyGetPairsParams(req): Promise<any> {
+    return new Promise((resolve, reject) => {
+      let keys;
+      if (req.body.useV2) {
+        keys = this.changellyGetKeysV2(req);
+      } else {
+        return reject(Errors.UPGRADE_NEEDED.withMessage('Credentials expired, please update the app to continue using Changelly services.'));
+      }
+
+      if (!checkRequired(req.body, ['id', 'coinFrom', 'coinTo'])) {
+        return reject(new ClientError('changellyGetPairsParams request missing arguments'));
+      }
+
+      const message = {
+        id: req.body.id,
+        jsonrpc: '2.0',
+        method: 'getPairsParams',
+        params: [
+          {
+            from: req.body.coinFrom,
+            to: req.body.coinTo
+          }
+        ]
+      };
+
+      const URL: string = keys.API;
+      const { signature, publicKey } = this.changellySignRequestsV2(message, keys.SECRET);
+      const headers = {
+        'Content-Type': 'application/json',
+        'X-Api-Key': crypto.createHash('sha256').update(publicKey).digest('base64'),
+        'X-Api-Signature': signature.toString('base64'),
+      };
+
+      this.request.post(
+        URL,
+        {
+          headers,
+          body: message,
+          json: true
+        },
+        (err, data) => {
+          if (err) {
+            return reject(err.body ?? err);
+          } else {
+            return resolve(data.body);
+          }
+        }
+      );
+    });
+  }
+
+  changellyGetFixRateForAmount(req): Promise<any> {
+    return new Promise((resolve, reject) => {
+      let keys;
+      if (req.body.useV2) {
+        keys = this.changellyGetKeysV2(req);
+      } else {
+        return reject(Errors.UPGRADE_NEEDED.withMessage('Credentials expired, please update the app to continue using Changelly services.'));
+      }
+
+      if (!checkRequired(req.body, ['id', 'coinFrom', 'coinTo', 'amountFrom'])) {
+        return reject(new ClientError('changellyGetFixRateForAmount request missing arguments'));
+      }
+
+      const message = {
+        id: req.body.id,
+        jsonrpc: '2.0',
+        method: 'getFixRateForAmount',
+        params: [
+          {
+            from: req.body.coinFrom,
+            to: req.body.coinTo,
+            amountFrom: req.body.amountFrom
+          }
+        ]
+      };
+
+      const URL: string = keys.API;
+      const { signature, publicKey } = this.changellySignRequestsV2(message, keys.SECRET);
+      const headers = {
+        'Content-Type': 'application/json',
+        'X-Api-Key': crypto.createHash('sha256').update(publicKey).digest('base64'),
+        'X-Api-Signature': signature.toString('base64'),
+      };
+
+      this.request.post(
+        URL,
+        {
+          headers,
+          body: message,
+          json: true
+        },
+        (err, data) => {
+          if (err) {
+            return reject(err.body ?? err);
+          } else {
+            return resolve(data.body);
+          }
+        }
+      );
+    });
+  }
+
+  changellyCreateFixTransaction(req): Promise<any> {
+    return new Promise((resolve, reject) => {
+      let keys;
+      if (req.body.useV2) {
+        keys = this.changellyGetKeysV2(req);
+      } else {
+        return reject(Errors.UPGRADE_NEEDED.withMessage('Credentials expired, please update the app to continue using Changelly services.'));
+      }
+
+      if (
+        !checkRequired(req.body, [
+          'id',
+          'coinFrom',
+          'coinTo',
+          'amountFrom',
+          'addressTo',
+          'fixedRateId',
+          'refundAddress'
+        ])
+      ) {
+        return reject(new ClientError('changellyCreateFixTransaction request missing arguments'));
+      }
+
+      const message = {
+        id: req.body.id,
+        jsonrpc: '2.0',
+        method: 'createFixTransaction',
+        params: {
+          from: req.body.coinFrom,
+          to: req.body.coinTo,
+          address: req.body.addressTo,
+          amountFrom: req.body.amountFrom,
+          rateId: req.body.fixedRateId,
+          refundAddress: req.body.refundAddress
+        }
+      };
+
+      const URL: string = keys.API;
+      const { signature, publicKey } = this.changellySignRequestsV2(message, keys.SECRET);
+      const headers = {
+        'Content-Type': 'application/json',
+        'X-Api-Key': crypto.createHash('sha256').update(publicKey).digest('base64'),
+        'X-Api-Signature': signature.toString('base64'),
+      };
+
+      this.request.post(
+        URL,
+        {
+          headers,
+          body: message,
+          json: true
+        },
+        (err, data) => {
+          if (err) {
+            return reject(err.body ?? err);
+          } else {
+            return resolve(data.body);
+          }
+        }
+      );
+    });
+  }
+
+  changellyGetTransactions(req): Promise<any> {
+    return new Promise((resolve, reject) => {
+      let keys;
+      if (req.body.useV2) {
+        keys = this.changellyGetKeysV2(req);
+      } else {
+        return reject(Errors.UPGRADE_NEEDED.withMessage('Credentials expired, please update the app to continue using Changelly services.'));
+      }
+
+      if (!checkRequired(req.body, ['id', 'exchangeTxId'])) {
+        return reject(new ClientError('changellyGetTransactions request missing arguments'));
+      }
+
+      const message = {
+        id: req.body.id,
+        jsonrpc: '2.0',
+        method: 'getTransactions',
+        params:
+        {
+          id: req.body.exchangeTxId,
+          limit: req.body.limit ?? 1,
+        }
+      };
+
+      const URL: string = keys.API;
+      const { signature, publicKey } = this.changellySignRequestsV2(message, keys.SECRET);
+      const headers = {
+        'Content-Type': 'application/json',
+        'X-Api-Key': crypto.createHash('sha256').update(publicKey).digest('base64'),
+        'X-Api-Signature': signature.toString('base64'),
+      };
+
+      this.request.post(
+        URL,
+        {
+          headers,
+          body: message,
+          json: true
+        },
+        (err, data) => {
+          if (err) {
+            return reject(err.body ?? err);
+          } else {
+            return resolve(data.body);
+          }
+        }
+      );
+    });
+  }
+
+  changellyGetStatus(req): Promise<any> {
+    return new Promise((resolve, reject) => {
+      let keys;
+      if (req.body.useV2) {
+        keys = this.changellyGetKeysV2(req);
+      } else {
+        return reject(Errors.UPGRADE_NEEDED.withMessage('Credentials expired, please update the app to continue using Changelly services.'));
+      }
+
+      if (!checkRequired(req.body, ['id', 'exchangeTxId'])) {
+        return reject(new ClientError('changellyGetStatus request missing arguments'));
+      }
+
+      const message = {
+        jsonrpc: '2.0',
+        id: req.body.id,
+        method: 'getStatus',
+        params: {
+          id: req.body.exchangeTxId
+        }
+      };
+
+      const URL: string = keys.API;
+      const { signature, publicKey } = this.changellySignRequestsV2(message, keys.SECRET);
+      const headers = {
+        'Content-Type': 'application/json',
+        'X-Api-Key': crypto.createHash('sha256').update(publicKey).digest('base64'),
+        'X-Api-Signature': signature.toString('base64'),
+      };
+
+      this.request.post(
+        URL,
+        {
+          headers,
+          body: message,
+          json: true
+        },
+        (err, data) => {
+          if (err) {
+            return reject(err.body ?? err);
+          } else {
+            return resolve(data.body);
+          }
+        }
+      );
+    });
+  }
+}