1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
|
const bitcoin = require("bitcoinjs-lib");
const reverse = require("buffer-reverse");
module.exports = async (req, res) => {
let { user } = req;
let { address, tx } = req.body;
let { hex } = tx;
let fee = toSats(tx.fee);
const isChange = async address =>
(await bc.getAddressInfo(address)).ismine && (
!Object.keys(addresses).includes(address) ||
address === user.address);
tx = await bc.decodeRawTransaction(hex);
let total = 0;
let change = 0;
for (let i = 0; i < tx.vout.length; i++) {
let o = tx.vout[i];
total += toSats(o.value);
if (o.scriptPubKey.addresses) {
if ((await isChange(o.scriptPubKey.addresses[0]))) {
change += toSats(o.value);
}
}
}
total = (total - change) + fee;
let amount = total - fee;
l.info("attempting bitcoin payment", user.username, amount, fee);
try {
await db.transaction(async transaction => {
let { balance } = await db.User.findOne({
where: {
username: user.username
},
lock: transaction.LOCK.UPDATE,
transaction
});
if (amount !== balance && total > balance) {
l.error("amount exceeds balance", amount, fee, balance);
throw new Error("insufficient funds");
}
user.balance -= total;
await user.save({ transaction });
});
} catch (e) {
l.warn("insufficient funds for bitcoin payment", user.username);
return res.status(500).send("Not enough satoshis");
}
try {
if (config.bitcoin.walletpass)
await bc.walletPassphrase(config.bitcoin.walletpass, 300);
hex = (await bc.signRawTransactionWithWallet(hex)).hex;
let txid = await bc.sendRawTransaction(hex);
await db.transaction(async transaction => {
await user.save({ transaction });
emit(user.username, "user", user);
const payment = await db.Payment.create(
{
amount: -total,
fee,
user_id: user.id,
hash: txid,
rate: app.get("rates")[user.currency],
currency: user.currency,
address,
confirmed: true,
received: false,
asset: "BTC"
},
{ transaction }
);
l.info("sent bitcoin", user.username, total);
emit(user.username, "payment", payment);
res.send(payment);
});
} catch (e) {
l.error("error sending bitcoin", e);
return res.status(500).send(e.message);
}
};
|
