squarefi-bff-api-module 1.32.1 → 1.32.2

package/scripts/supabase-storage-setup.sql

@@ -1,223 +0,0 @@
--- ============================================
--- Supabase Storage Setup
--- ============================================
--- Создание бакетов и настройка политик безопасности для файлового хранилища
--- Политики обеспечивают доступ к файлам только для их создателей и суперадминов
-
--- ============================================
--- 1. Создание бакетов
--- ============================================
-
--- Основной бакет для пользовательских файлов
-INSERT INTO storage.buckets (id, name, public)
-VALUES ('user-files', 'user-files', false)
-ON CONFLICT (id) DO NOTHING;
-
--- Бакет для документов
-INSERT INTO storage.buckets (id, name, public)
-VALUES ('documents', 'documents', false)
-ON CONFLICT (id) DO NOTHING;
-
--- Бакет для изображений
-INSERT INTO storage.buckets (id, name, public)
-VALUES ('images', 'images', false)
-ON CONFLICT (id) DO NOTHING;
-
--- ============================================
--- 2. Функция для проверки прав суперадмина
--- ============================================
--- Создаем функцию для проверки, является ли пользователь суперадмином
--- Примечание: измените логику в зависимости от вашей схемы пользователей
-
-CREATE OR REPLACE FUNCTION public.is_super_admin(user_id uuid)
-RETURNS boolean AS $$
-BEGIN
-  -- Пример: проверяем наличие записи в таблице profiles с ролью 'super_admin'
-  -- Измените эту логику в соответствии с вашей схемой данных
-  RETURN EXISTS (
-    SELECT 1
-    FROM public.profiles
-    WHERE id = user_id
-    AND role = 'super_admin'
-  );
-  
-  -- Альтернативный вариант: проверка по email
-  -- RETURN EXISTS (
-  --   SELECT 1
-  --   FROM auth.users
-  --   WHERE id = user_id
-  --   AND email IN ('admin@example.com', 'superadmin@example.com')
-  -- );
-END;
-$$ LANGUAGE plpgsql SECURITY DEFINER;
-
--- ============================================
--- 3. Политики для бакета 'user-files'
--- ============================================
-
--- Пользователи могут загружать файлы только в свою папку
-CREATE POLICY "Users can upload files to their own folder"
-ON storage.objects
-FOR INSERT
-TO authenticated
-WITH CHECK (
-  bucket_id = 'user-files' 
-  AND (storage.foldername(name))[1] = auth.uid()::text
-);
-
--- Пользователи могут просматривать свои файлы или если они суперадмины
-CREATE POLICY "Users can view their own files or super admins can view all"
-ON storage.objects
-FOR SELECT
-TO authenticated
-USING (
-  bucket_id = 'user-files' 
-  AND (
-    (storage.foldername(name))[1] = auth.uid()::text
-    OR public.is_super_admin(auth.uid())
-  )
-);
-
--- Пользователи могут обновлять свои файлы или суперадмины могут обновлять любые
-CREATE POLICY "Users can update their own files or super admins can update all"
-ON storage.objects
-FOR UPDATE
-TO authenticated
-USING (
-  bucket_id = 'user-files' 
-  AND (
-    (storage.foldername(name))[1] = auth.uid()::text
-    OR public.is_super_admin(auth.uid())
-  )
-);
-
--- Пользователи могут удалять свои файлы или суперадмины могут удалять любые
-CREATE POLICY "Users can delete their own files or super admins can delete all"
-ON storage.objects
-FOR DELETE
-TO authenticated
-USING (
-  bucket_id = 'user-files' 
-  AND (
-    (storage.foldername(name))[1] = auth.uid()::text
-    OR public.is_super_admin(auth.uid())
-  )
-);
-
--- ============================================
--- 4. Политики для бакета 'documents'
--- ============================================
-
--- Аналогичные политики для бакета documents
-CREATE POLICY "Users can upload documents to their own folder"
-ON storage.objects
-FOR INSERT
-TO authenticated
-WITH CHECK (
-  bucket_id = 'documents' 
-  AND (storage.foldername(name))[1] = auth.uid()::text
-);
-
-CREATE POLICY "Users can view their own documents or super admins can view all"
-ON storage.objects
-FOR SELECT
-TO authenticated
-USING (
-  bucket_id = 'documents' 
-  AND (
-    (storage.foldername(name))[1] = auth.uid()::text
-    OR public.is_super_admin(auth.uid())
-  )
-);
-
-CREATE POLICY "Users can update their own documents or super admins can update all"
-ON storage.objects
-FOR UPDATE
-TO authenticated
-USING (
-  bucket_id = 'documents' 
-  AND (
-    (storage.foldername(name))[1] = auth.uid()::text
-    OR public.is_super_admin(auth.uid())
-  )
-);
-
-CREATE POLICY "Users can delete their own documents or super admins can delete all"
-ON storage.objects
-FOR DELETE
-TO authenticated
-USING (
-  bucket_id = 'documents' 
-  AND (
-    (storage.foldername(name))[1] = auth.uid()::text
-    OR public.is_super_admin(auth.uid())
-  )
-);
-
--- ============================================
--- 5. Политики для бакета 'images'
--- ============================================
-
--- Аналогичные политики для бакета images
-CREATE POLICY "Users can upload images to their own folder"
-ON storage.objects
-FOR INSERT
-TO authenticated
-WITH CHECK (
-  bucket_id = 'images' 
-  AND (storage.foldername(name))[1] = auth.uid()::text
-);
-
-CREATE POLICY "Users can view their own images or super admins can view all"
-ON storage.objects
-FOR SELECT
-TO authenticated
-USING (
-  bucket_id = 'images' 
-  AND (
-    (storage.foldername(name))[1] = auth.uid()::text
-    OR public.is_super_admin(auth.uid())
-  )
-);
-
-CREATE POLICY "Users can update their own images or super admins can update all"
-ON storage.objects
-FOR UPDATE
-TO authenticated
-USING (
-  bucket_id = 'images' 
-  AND (
-    (storage.foldername(name))[1] = auth.uid()::text
-    OR public.is_super_admin(auth.uid())
-  )
-);
-
-CREATE POLICY "Users can delete their own images or super admins can delete all"
-ON storage.objects
-FOR DELETE
-TO authenticated
-USING (
-  bucket_id = 'images' 
-  AND (
-    (storage.foldername(name))[1] = auth.uid()::text
-    OR public.is_super_admin(auth.uid())
-  )
-);
-
--- ============================================
--- 6. Включение RLS
--- ============================================
-
--- Убедитесь, что RLS включен для таблицы storage.objects
-ALTER TABLE storage.objects ENABLE ROW LEVEL SECURITY;
-
--- ============================================
--- ПРИМЕЧАНИЯ
--- ============================================
--- 1. Замените функцию is_super_admin() на вашу реализацию проверки прав
--- 2. Структура папок: {userId}/{fileName}
--- 3. Политики работают только для authenticated пользователей
--- 4. Для публичного доступа нужно создать отдельные бакеты с public = true
--- 5. Подписанные URL (signed URLs) работают независимо от RLS политик
-
-

package/src/api/auth.ts

@@ -1,78 +0,0 @@
-import { API } from './types/types';
-
-import { apiClientV2 } from '../utils/apiClientFactory';
-import { convertPhoneToSupabaseFormat } from '../utils/converters';
-
-export const telegramSignInPath = '/auth/sign-in/telegram'; // V2 path
-// export const telegramSignInPath = '/auth/signin/telegram'; // V1 path
-
-export const telegramSignUpPath = '/auth/sign-up/telegram';
-export const refreshTokenPath = '/auth/refresh/refresh-token';
-
-export const auth = {
-  otp: {
-    verify: {
-      email: (email: string, token: string): Promise<API.Auth.VerifyOtp.Response> =>
-        apiClientV2.postRequest<API.Auth.VerifyOtp.Response>('/auth/verify/email/otp', {
-          data: { email, token, type: 'email' },
-          context: { bypassUnauthorizedHandler: true },
-        }),
-      phone: (phone: string, token: string): Promise<API.Auth.VerifyOtp.Response> =>
-        apiClientV2.postRequest<API.Auth.VerifyOtp.Response>('/auth/verify/phone/otp', {
-          data: {
-            phone: convertPhoneToSupabaseFormat(phone),
-            token,
-            type: 'sms',
-          },
-          context: { bypassUnauthorizedHandler: true },
-        }),
-    },
-  },
-  signin: {
-    omni: {
-      email: (data: API.Auth.SignIn.Omni.Email.OTP.Request): Promise<API.Auth.Tokens> =>
-        apiClientV2.postRequest('/auth/sign-in/omni/email/otp', {
-          data,
-          context: { bypassUnauthorizedHandler: true },
-        }),
-      phone: ({ phone, ...data }: API.Auth.SignIn.Omni.Phone.OTP.Request): Promise<API.Auth.Tokens> =>
-        apiClientV2.postRequest('/auth/sign-in/omni/phone/otp', {
-          data: { phone: convertPhoneToSupabaseFormat(phone), ...data },
-          context: { bypassUnauthorizedHandler: true },
-        }),
-    },
-    byType: (data: API.Auth.SignIn.ByType.Request): Promise<API.Auth.Tokens> =>
-      apiClientV2.postRequest('/auth/sign-in', {
-        data,
-        context: { bypassUnauthorizedHandler: true },
-      }),
-    telegram: (data: API.Auth.Telegram.Signin.Request): Promise<API.Auth.Telegram.Signin.Response> =>
-      apiClientV2.postRequest<API.Auth.Telegram.Signin.Response>(telegramSignInPath, { data }),
-    password: (
-      email: string,
-      password: string, // check on backend V2
-    ): Promise<API.Auth.Tokens> =>
-      apiClientV2.postRequest<API.Auth.Tokens>('/auth/sign-in/password/email', {
-        data: { email, password },
-        context: { bypassUnauthorizedHandler: true },
-      }),
-  },
-  signup: {
-    byType: (data: API.Auth.SignUp.ByType.Request): Promise<API.Auth.Tokens> =>
-      apiClientV2.postRequest('/auth/sign-up', {
-        data,
-        context: { bypassUnauthorizedHandler: true },
-      }),
-    password: (email: string, password: string): Promise<API.Auth.Tokens> =>
-      apiClientV2.postRequest<API.Auth.Tokens>('/auth/sign-up/password/email', {
-        data: { email, password },
-        context: { bypassUnauthorizedHandler: true },
-      }),
-    telegram: (data: API.Auth.Telegram.Signup.Request): Promise<API.Auth.Telegram.Signup.Response> =>
-      apiClientV2.postRequest<API.Auth.Telegram.Signup.Response>(telegramSignUpPath, { data }),
-  },
-  refresh: {
-    refresh_token: (data: API.Auth.RefreshToken.Request): Promise<API.Auth.RefreshToken.Response> =>
-      apiClientV2.postRequest<API.Auth.RefreshToken.Response>(refreshTokenPath, { data }),
-  },
-};

package/src/api/bank-data.ts

@@ -1,11 +0,0 @@
-import { apiClientV2 } from '../utils/apiClientFactory';
-import { API } from './types/types';
-
-export const bankData = {
-  getBankDataByAccountNumber: (
-    params: API.BankData.GetBankDataByAccountNumber.Request,
-  ): Promise<API.BankData.GetBankDataByAccountNumber.Response> =>
-    apiClientV2.getRequest<API.BankData.GetBankDataByAccountNumber.Response>(`/bank-data`, {
-      params,
-    }),
-};

package/src/api/counterparties.ts

@@ -1,73 +0,0 @@
-import { apiClientV2 } from '../utils/apiClientFactory';
-import { API } from './types/types';
-
-export const counterparties = {
-  getAll: ({ wallet_id, ...params }: API.Counterparties.List.Request): Promise<API.Counterparties.List.Response> =>
-    apiClientV2.getRequest<API.Counterparties.List.Response>(`/counterparties/${wallet_id}`, {
-      params,
-    }),
-  getById: ({
-    wallet_id,
-    counterparty_account_id,
-  }: API.Counterparties.GetById.Request): Promise<API.Counterparties.GetById.Response> =>
-    apiClientV2.getRequest<API.Counterparties.GetById.Response>(
-      `/counterparties/${wallet_id}/${counterparty_account_id}`,
-    ),
-  create: ({ wallet_id, ...data }: API.Counterparties.Create.Request): Promise<API.Counterparties.Create.Response> =>
-    apiClientV2.postRequest<API.Counterparties.Create.Response>(`/counterparties/${wallet_id}`, { data }),
-  update: ({
-    wallet_id,
-    counterparty_account_id,
-    ...data
-  }: API.Counterparties.Update.Request): Promise<API.Counterparties.Update.Response> =>
-    apiClientV2.patchRequest<API.Counterparties.Update.Response>(
-      `/counterparties/${wallet_id}/${counterparty_account_id}`,
-      { data },
-    ),
-  destinations: {
-    getAll: ({
-      wallet_id,
-      counterparty_account_id,
-      ...params
-    }: API.Counterparties.Destination.List.Request): Promise<API.Counterparties.Destination.List.Response> =>
-      apiClientV2.getRequest<API.Counterparties.Destination.List.Response>(
-        `/counterparties/${wallet_id}/${counterparty_account_id}/destinations`,
-        { params },
-      ),
-    getById: ({
-      wallet_id,
-      counterparty_account_id,
-      counterparty_destination_id,
-    }: API.Counterparties.Destination.Detail.Request): Promise<API.Counterparties.Destination.Detail.Response> =>
-      apiClientV2.getRequest<API.Counterparties.Destination.Detail.Response>(
-        `/counterparties/${wallet_id}/${counterparty_account_id}/destinations/${counterparty_destination_id}`,
-      ),
-    create: ({
-      wallet_id,
-      counterparty_account_id,
-      ...data
-    }: API.Counterparties.Destination.Create.Request): Promise<API.Counterparties.Destination.Create.Response> =>
-      apiClientV2.postRequest<API.Counterparties.Destination.Create.Response>(
-        `/counterparties/${wallet_id}/${counterparty_account_id}/destinations`,
-        { data },
-      ),
-    update: ({
-      wallet_id,
-      counterparty_account_id,
-      counterparty_destination_id,
-      ...data
-    }: API.Counterparties.Destination.Update.Request): Promise<API.Counterparties.Destination.Update.Response> =>
-      apiClientV2.patchRequest<API.Counterparties.Destination.Update.Response>(
-        `/counterparties/${wallet_id}/${counterparty_account_id}/destinations/${counterparty_destination_id}`,
-        { data },
-      ),
-    delete: ({
-      wallet_id,
-      counterparty_account_id,
-      counterparty_destination_id,
-    }: API.Counterparties.Destination.Delete.Request): Promise<void> =>
-      apiClientV2.deleteRequest(
-        `/counterparties/${wallet_id}/${counterparty_account_id}/destinations/${counterparty_destination_id}`,
-      ),
-  },
-};

package/src/api/developer.ts

@@ -1,20 +0,0 @@
-import { API } from './types/types';
-
-import { apiClientV1 } from '../utils/apiClientFactory';
-
-export const developer = {
-  apiKeys: {
-    getAll: (): Promise<API.Developer.ApiCode.ApiCode[]> =>
-      apiClientV1.getRequest<API.Developer.ApiCode.ApiCode[]>('/developer/access/list'),
-    create: (data: API.Developer.ApiCode.Create.Request): Promise<API.Developer.ApiCode.Create.Response> =>
-      apiClientV1.postRequest<API.Developer.ApiCode.Create.Response>('/developer/access/create', { data }),
-    rotate: (data: API.Developer.ApiCode.Rotate.Request): Promise<API.Developer.ApiCode.Rotate.Response> =>
-      apiClientV1.postRequest<API.Developer.ApiCode.Rotate.Response>(`/developer/access/rotate`, { data }),
-    update: (data: API.Developer.ApiCode.Update.Request): Promise<void> =>
-      apiClientV1.postRequest(`/developer/access/update`, { data }),
-  },
-  vendors: {
-    list: (): Promise<API.Developer.Vendors.Vendor[]> =>
-      apiClientV1.getRequest<API.Developer.Vendors.Vendor[]>('/developer/vendors/list'),
-  },
-};

package/src/api/exchange.ts

@@ -1,44 +0,0 @@
-import { API } from './types/types';
-
-import { apiClientV1 } from '../utils/apiClientFactory';
-
-import { OrderType } from '../constants';
-
-type IExchangeByOrderType = {
-  getByFromCurrency: (from_uuid: string) => Promise<API.Exchange.Exchange[]>;
-  getByToCurrency: (to_uuid: string) => Promise<API.Exchange.Exchange[]>;
-  getByOrderType: () => Promise<API.Exchange.Exchange[]>;
-};
-
-type IExchangeModule = {
-  byOrderType: {
-    [key in OrderType]: IExchangeByOrderType;
-  };
-};
-
-const createOrderTypeMethods = (orderType: OrderType): IExchangeByOrderType => ({
-  getByFromCurrency: (from_uuid: string): Promise<API.Exchange.Exchange[]> =>
-    apiClientV1.getRequest<API.Exchange.Exchange[]>('/exchange/', {
-      params: { from_uuid, order_type: orderType },
-    }),
-  getByToCurrency: (to_uuid: string): Promise<API.Exchange.Exchange[]> =>
-    apiClientV1.getRequest<API.Exchange.Exchange[]>('/exchange/', {
-      params: { to_uuid, order_type: orderType },
-    }),
-  getByOrderType: (): Promise<API.Exchange.Exchange[]> =>
-    apiClientV1.getRequest<API.Exchange.Exchange[]>('/exchange/', {
-      params: { order_type: orderType },
-    }),
-});
-
-const orderTypes = Object.values(OrderType);
-
-export const exchange: IExchangeModule = {
-  byOrderType: orderTypes.reduce(
-    (acc, orderType) => {
-      acc[orderType] = createOrderTypeMethods(orderType);
-      return acc;
-    },
-    {} as Record<OrderType, IExchangeByOrderType>,
-  ),
-};

package/src/api/frontend.ts

@@ -1,20 +0,0 @@
-import { create } from 'domain';
-import { apiClientV1 } from '../utils/apiClientFactory';
-import { API } from './types/types';
-
-export const frontend = {
-  access: {
-    keys: {
-      create: (data: API.Frontend.Access.Keys.Create.Request): Promise<API.Frontend.Access.Keys.Create.Response> =>
-        apiClientV1.postRequest<API.Frontend.Access.Keys.Create.Response>('/frontend/access/keys', { data }),
-      list: (): Promise<API.Frontend.Access.Keys.List.Response> =>
-        apiClientV1.getRequest<API.Frontend.Access.Keys.List.Response>('/frontend/access/keys'),
-      regenerate: (key_id: string): Promise<API.Frontend.Access.Keys.Regenerate.Response> =>
-        apiClientV1.postRequest<API.Frontend.Access.Keys.Regenerate.Response>(
-          `/frontend/access/keys/${key_id}/regenerate`,
-        ),
-      revoke: (key_id: string): Promise<API.Frontend.Access.Keys.Revoke.Response> =>
-        apiClientV1.deleteRequest(`/frontend/access/keys/${key_id}`),
-    },
-  },
-};

package/src/api/index.ts

@@ -1,57 +0,0 @@
-import { auth } from './auth';
-import { bankData } from './bank-data';
-import { counterparties } from './counterparties';
-import { developer } from './developer';
-import { exchange } from './exchange';
-import { frontend } from './frontend';
-import { issuing } from './issuing';
-import { kyc } from './kyc';
-import { list } from './list';
-import { orders } from './orders';
-import { persona } from './persona';
-import { storage } from './storage';
-import { tenants } from './tenants';
-import { totp } from './totp';
-import { user } from './user';
-import { virtualAccounts } from './virtual-accounts';
-import { wallets } from './wallets';
-
-type Api = {
-  auth: typeof auth;
-  bankData: typeof bankData;
-  counterparties: typeof counterparties;
-  developer: typeof developer;
-  exchange: typeof exchange;
-  frontend: typeof frontend;
-  issuing: typeof issuing;
-  kyc: typeof kyc;
-  list: typeof list;
-  orders: typeof orders;
-  persona: typeof persona;
-  storage: typeof storage;
-  tenants: typeof tenants;
-  totp: typeof totp;
-  user: typeof user;
-  virtualAccounts: typeof virtualAccounts;
-  wallets: typeof wallets;
-};
-
-export const squarefi_bff_api_client: Api = {
-  auth,
-  bankData,
-  counterparties,
-  developer,
-  exchange,
-  frontend,
-  issuing,
-  kyc,
-  list,
-  orders,
-  persona,
-  storage,
-  tenants,
-  totp,
-  user,
-  virtualAccounts,
-  wallets,
-};