pluto/handler/revolut.py

# Twisted/Klein imports
from twisted.logger import Logger

# Other library imports
from json import dumps
from simplejson.errors import JSONDecodeError
import requests
from cryptography.hazmat.primitives import serialization
from cryptography.hazmat.backends import default_backend
import jwt

# Project imports
from settings import settings


class Revolut(object):
    """
    Class to handle Revolut API calls.
    """

    def __init__(self):
        self.log = Logger("revolut")
        self.token = None

    def set_irc(self, irc):
        self.irc = irc

    def setup_auth(self):
        self.create_new_jwt()
        self.get_access_token()

    def create_new_jwt(self):
        payload = {
            "iss": settings.Revolut.Domain,
            "sub": settings.Revolut.ClientID,
            "aud": "https://revolut.com",
            "exp": int(settings.Revolut.Expiry),
        }
        with open(settings.Revolut.PrivateKey, "rb") as f:
            pem_bytes = f.read()

        # payload = {jwt_header, jwt_body}
        private_key = serialization.load_pem_private_key(pem_bytes, password=None, backend=default_backend())
        encoded = jwt.encode(payload, private_key, algorithm="RS256")
        settings.Revolut.JWT = encoded
        settings.write()

    def get_access_token(self):
        headers = {"Content-Type": "application/x-www-form-urlencoded"}
        data = {
            "grant_type": "authorization_code",
            "code": settings.Revolut.AuthCode,
            "client_id": settings.Revolut.ClientID,
            "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer",
            "client_assertion": settings.Revolut.JWT,
        }
        r = requests.post(f"{settings.Revolut.Base}/auth/token", data=data, headers=headers)
        try:
            parsed = r.json()
        except JSONDecodeError:
            self.log.error("Error parsing access token response: {content}", content=r.content)
            return False
        if r.status_code == 200:
            try:
                settings.Revolut.RefreshToken = parsed["refresh_token"]
                settings.Revolut.SetupToken = "0"
                settings.write()
                self.log.info("Refreshed refresh token: {refresh_token}", refresh_token=settings.Revolut.RefreshToken)
                self.token = parsed["access_token"]
                self.log.info("Refreshed access token: {access_token}", access_token=self.token)
            except KeyError:
                self.log.error(f"Token authorization didn't contain refresh or access token: {parsed}", parsed=parsed)
                return False
        else:
            self.log.error(f"Cannot refresh token: {parsed}", parsed=parsed)
            return False

    def get_new_token(self, fail=False):
        headers = {"Content-Type": "application/x-www-form-urlencoded"}
        data = {
            "grant_type": "refresh_token",
            "refresh_token": settings.Revolut.RefreshToken,
            "client_id": settings.Revolut.ClientID,
            "client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer",
            "client_assertion": settings.Revolut.JWT,
        }
        r = requests.post(f"{settings.Revolut.Base}/auth/token", data=data, headers=headers)
        try:
            parsed = r.json()
        except JSONDecodeError:
            if fail:
                exit()
            return False
        if r.status_code == 200:
            if "access_token" in parsed.keys():
                self.token = parsed["access_token"]
                self.log.info("Refreshed access token: {access_token}", access_token=self.token)
                return True
            else:
                self.log.error(f"Token refresh didn't contain access token: {parsed}", parsed=parsed)
                if fail:
                    exit()
                return False
        else:
            self.log.error(f"Cannot refresh token: {parsed}", parsed=parsed)
            if fail:
                exit()
            return False

    def setup_webhook(self):
        webhooks = self.get_webhooks()
        if "url" in webhooks.keys():
            if webhooks["url"] == settings.Revolut.WebhookURL:
                self.log.info("Webhook exists - skipping setup: {url}", url=webhooks["url"])
                return True  # Webhook already exists
        self.log.info("Setting up webhook: {url}", url=settings.Revolut.WebhookURL)
        headers = {"Authorization": f"Bearer {self.token}"}
        data = {"url": settings.Revolut.WebhookURL}
        r = requests.post(f"{settings.Revolut.Base}/webhook", data=dumps(data), headers=headers)
        if r.status_code == 204:
            self.log.info("Set up webhook: {url}", url=settings.Revolut.WebhookURL)
            return True
        else:
            parsed = r.json()
            self.log.info("Failed setting up webhook: {parsed}", parsed=parsed)

    def get_webhooks(self):
        headers = {"Authorization": f"Bearer {self.token}"}
        r = requests.get(f"{settings.Revolut.Base}/webhook", headers=headers)
        if r.status_code == 200:
            parsed = r.json()
            return parsed
        elif r.status_code == 404:
            return {}
        else:
            self.log.error("Cannot get webhooks: {content}", r.content)
            return False