You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
111 lines
4.2 KiB
Python
111 lines
4.2 KiB
Python
# Project imports
|
|
from core.lib import db, notify
|
|
from core.util import logs
|
|
|
|
log = logs.get_logger("antifraud")
|
|
|
|
|
|
class AntiFraud(object):
|
|
async def add_bank_sender(self, platform, platform_buyer, bank_sender):
|
|
"""
|
|
Add the bank senders into Redis.
|
|
:param platform: name of the platform - freeform
|
|
:param platform_buyer: the username of the buyer on the platform
|
|
:param bank_sender: the sender name from the bank
|
|
"""
|
|
key = f"namemap.{platform}.{platform_buyer}"
|
|
await db.r.sadd(key, bank_sender)
|
|
|
|
async def get_previous_senders(self, platform, platform_buyer):
|
|
"""
|
|
Get all the previous bank sender names for the given buyer on the platform.
|
|
:param platform: name of the platform - freeform
|
|
:param platform_buyer: the username of the buyer on the platform
|
|
:return: set of previous buyers
|
|
:rtype: set
|
|
"""
|
|
key = f"namemap.{platform}.{platform_buyer}"
|
|
senders = await db.r.smembers(key)
|
|
if not senders:
|
|
return None
|
|
senders = db.convert(senders)
|
|
return senders
|
|
|
|
async def check_valid_sender(
|
|
self, reference, platform, bank_sender, platform_buyer
|
|
):
|
|
"""
|
|
Check that either:
|
|
* The platform buyer has never had a recognised transaction before
|
|
* The bank sender name matches a previous transaction from the platform buyer
|
|
:param reference: the trade reference
|
|
:param platform: name of the platform - freeform
|
|
:param bank_sender: the sender of the bank transaction
|
|
:param platform_buyer: the username of the buyer on the platform
|
|
:return: whether the sender is valid
|
|
:rtype: bool
|
|
"""
|
|
senders = await self.get_previous_senders(platform, platform_buyer)
|
|
if senders is None: # no senders yet, assume it's valid
|
|
return True
|
|
if platform_buyer in senders:
|
|
return True
|
|
self.ux.notify.notify_sender_name_mismatch(
|
|
reference, platform_buyer, bank_sender
|
|
)
|
|
title = "Sender name mismatch"
|
|
message = (
|
|
f"Sender name mismatch for {reference}:\n"
|
|
f"Platform buyer: {platform_buyer}"
|
|
f"Bank sender: {bank_sender}"
|
|
)
|
|
# await notify.sendmsg(self.instance.) # TODO
|
|
return False
|
|
|
|
async def check_tx_sender(self, tx, reference):
|
|
"""
|
|
Check whether the sender of a given transaction is authorised based on the previous
|
|
transactions of the username that originated the trade reference.
|
|
:param tx: the transaction ID
|
|
:param reference: the trade reference
|
|
"""
|
|
stored_trade = await db.get_ref(reference)
|
|
if not stored_trade:
|
|
return None
|
|
stored_tx = await db.get_tx(tx)
|
|
if not stored_tx:
|
|
return None
|
|
bank_sender = stored_tx["sender"]
|
|
platform_buyer = stored_trade["buyer"]
|
|
platform = stored_trade["subclass"]
|
|
is_allowed = await self.check_valid_sender(
|
|
reference, platform, bank_sender, platform_buyer
|
|
)
|
|
if is_allowed is True:
|
|
return True
|
|
return False
|
|
|
|
# def user_verification_successful(self, uid):
|
|
# """
|
|
# A user has successfully completed verification.
|
|
# """
|
|
# self.log.info(f"User has completed verification: {uid}")
|
|
# trade_list = self.markets.find_trades_by_uid(uid)
|
|
# for platform, trade_id, reference, currency in trade_list:
|
|
# self.markets.send_bank_details(platform, currency, trade_id)
|
|
# self.markets.send_reference(platform, trade_id, reference)
|
|
|
|
# def send_verification_url(self, platform, uid, trade_id):
|
|
# send_setting, post_message = self.markets.get_send_settings(platform)
|
|
# if send_setting == "1":
|
|
# auth_url = self.ux.verify.create_applicant_and_get_link(uid)
|
|
# if platform == "lbtc":
|
|
# auth_url = auth_url.replace("https://", "") # hack
|
|
# post_message(
|
|
# trade_id,
|
|
# f"Hi! To continue the trade, please complete the verification form: {auth_url}",
|
|
# )
|
|
|
|
|
|
antifraud = AntiFraud()
|