MyECLPay

.env.template

@@ -2,7 +2,7 @@
 ACCESS_TOKEN_SECRET_KEY = ""
 RSA_PRIVATE_PEM_STRING = ""
 AUTH_CLIENTS=[]
-
+MYECLPAY_DATA_VERIFIER_ACCESS_TOKEN = ""
 # Host or url of the instance of Hyperion
 # This url will be especially used for oidc/oauth2 discovery endpoint and links send by email
 # NOTE: A trailing / is required
@@ -57,7 +57,9 @@ USE_FIREBASE=false
 #HELLOASSO_CLIENT_ID = ""
 #HELLOASSO_CLIENT_SECRET = ""
 
-CDR_PAYMENT_REDIRECTION_URL: str | None = None
+CDR_PAYMENT_REDIRECTION_URL: str | None
+MYECLPAY_PAYMENT_REDIRECTION_URL: str | None
+MYECLPAY_MAXIMUM_WALLET_BALANCE: int | None
 
 # Redis configuration #
 REDIS_HOST = "hyperion-redis" #May be left at "" during dev if you don't have a redis server running, in production it should be set to the name of the redis container

app/api.py

@@ -8,6 +8,7 @@
 from app.core.auth import endpoints_auth
 from app.core.google_api import endpoints_google_api
 from app.core.groups import endpoints_groups
+from app.core.myeclpay import endpoints_myeclpay
 from app.core.notification import endpoints_notification
 from app.core.payment import endpoints_payment
 from app.core.schools import endpoints_schools
@@ -22,6 +23,7 @@
 api_router.include_router(endpoints_core.router)
 api_router.include_router(endpoints_google_api.router)
 api_router.include_router(endpoints_groups.router)
+api_router.include_router(endpoints_myeclpay.module.router)
 api_router.include_router(endpoints_notification.router)
 api_router.include_router(endpoints_payment.router)
 api_router.include_router(endpoints_users.router)

app/core/config.py

@@ -111,15 +111,16 @@ class Settings(BaseSettings):
     HELLOASSO_CLIENT_SECRET: str | None = None
 
     CDR_PAYMENT_REDIRECTION_URL: str | None = None
+    RAID_PAYMENT_REDIRECTION_URL: str | None = None
+    MYECLPAY_PAYMENT_REDIRECTION_URL: str | None = None
+    MYECLPAY_MAXIMUM_WALLET_BALANCE: int = 1000
 
     # Drive configuration for the raid registering app
     RAID_DRIVE_REFRESH_TOKEN: str | None = None
     RAID_DRIVE_API_KEY: str | None = None
     RAID_DRIVE_CLIENT_ID: str | None = None
     RAID_DRIVE_CLIENT_SECRET: str | None = None
 
-    RAID_PAYMENT_REDIRECTION_URL: str | None = None
-
     ############################
     # PostgreSQL configuration #
     ############################
@@ -155,6 +156,7 @@ class Settings(BaseSettings):
     ACCESS_TOKEN_EXPIRE_MINUTES: int = 30
     REFRESH_TOKEN_EXPIRE_MINUTES: int = 60 * 24 * 14  # 14 days
     AUTHORIZATION_CODE_EXPIRE_MINUTES: int = 7
+    MYECLPAY_MANAGER_TRANSFER_TOKEN_EXPIRES_MINUTES: int = 20
 
     ###############################################
     # Authorization using OAuth or Openid connect #
@@ -186,6 +188,11 @@ class Settings(BaseSettings):
     # NOTE: AUTH_CLIENTS property should never be used in the code. To get an auth client, use `KNOWN_AUTH_CLIENTS`
     AUTH_CLIENTS: list[tuple[str, str | None, list[str], str]]
 
+    # MyECLPay requires an external service to recurrently check for transactions and state integrity, this service needs an access to all the data related to the transactions and the users involved
+    # This service will use a special token to access the data
+    # If this token is not set, the service will not be able to access the data and no integrity check will be performed
+    MYECLPAY_DATA_VERIFIER_ACCESS_TOKEN: str | None = None
+
     #################################
     # Hardcoded Hyperion parameters #
     #################################
@@ -195,6 +202,8 @@ class Settings(BaseSettings):
     HYPERION_VERSION: str = "4.0.0"
     MINIMAL_TITAN_VERSION_CODE: int = 139
 
+    # Maximum wallet balance for MyECLPay in cents, we will prevent user from adding more money to their wallet if it will make their balance exceed this value
+
     ######################################
     # Automatically generated parameters #
     ######################################
@@ -239,10 +248,6 @@ def RSA_PUBLIC_JWK(cls) -> dict[str, list[dict[str, Any]]]:
         )
         return {"keys": [jwk]}
 
-    # Tokens validity
-    USER_ACTIVATION_TOKEN_EXPIRES_HOURS: int = 24
-    PASSWORD_RESET_TOKEN_EXPIRES_HOURS: int = 12
-
     # This property parse AUTH_CLIENTS to create a dictionary of auth clients:
     # {"client_id": AuthClientClassInstance}
     @computed_field  # type: ignore[misc]

app/core/groups/groups_type.py

@@ -14,6 +14,7 @@ class GroupType(str, Enum):
     # Core groups
     admin = "0a25cb76-4b63-4fd3-b939-da6d9feabf28"
     AE = "45649735-866a-49df-b04b-a13c74fd5886"
+    # payment = "5571adfd-47fc-4dde-a44b-6e1289476499"
 
     # Module related groups
     amap = "70db65ee-d533-4f6b-9ffa-a4d70a17b7ef"