[{"_1":2,"_172":-5,"_173":-5},"loaderData",{"_3":4,"_91":92},"root",{"_5":6,"_34":35,"_64":65},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":32,"_33":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","notificationCount",0,"flagDenols","ENV",{"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":57,"_58":59,"_60":61,"_62":63},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","27e22c097e5e96465ab67eef87dd7028052b8031","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_66":67},"__internal_clerk_state",{"_68":69,"_70":45,"_71":72,"_73":72,"_74":20,"_75":72,"_76":72,"_77":72,"_78":72,"_79":80,"_89":20,"_90":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_81":20,"_19":20,"_82":72,"_83":84,"_85":72,"_86":45,"_87":20,"_88":72},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_93":94,"_95":96,"_97":98,"_99":100,"_147":148,"_169":170,"_171":-5},"handle","cgshaq","name","AccessBankMobile","path","backend/routes/transfers.ts","project",{"_101":102,"_95":96,"_103":104,"_105":-5,"_106":20,"_107":108,"_109":-5,"_110":-5,"_12":111,"_112":-5,"_113":20,"_114":-5,"_115":32,"_14":116,"_117":118,"_119":118,"_120":121,"_122":121,"_123":121,"_124":118,"_125":118,"_23":126,"_129":130,"_132":133,"_146":20},"id","93fde244-6b4e-11f0-ba48-0224a6c84d84","createdAt",["D",1753664568269],"deletedAt","legacyEnvVars","privacy","public","description","imageUrl","621eed50-3646-11f0-b033-79986dd337ba","pinnedFileId","pinPreview","screenshotVersion","likeCount","24aca6c6-2196-47e2-8492-13944ae1b063","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_93":94,"_127":128},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzJ4UEo4eXpqZnZPYlE1MVcwTGpkUXJFNFR0YyJ9","org",{"_93":94,"_131":128},"avatar","branch",{"_134":135,"_95":43,"_101":136,"_137":102,"_138":-5,"_139":140,"_141":-5,"_142":-5,"_143":-5,"_144":96,"_145":94},"version",1,"94007342-6b4e-11f0-ba48-0224a6c84d84","projectId","forkedBranchId","forkedBranchVersion",59,"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_101":149,"_95":150,"_151":152,"_153":154,"_155":136,"_156":135,"_157":158,"_103":159,"_134":32,"_160":161,"_162":163,"_164":20,"_165":-5,"_97":166},"94055fa6-6b4e-11f0-ba48-0224a6c84d84","transfers.ts","fileId","01984e8d-bc0e-764a-9cab-a9f751e41b3f","parentId","01984e8d-bc0e-764a-9cab-ac66eebf3755","branchId","branchVersion","latest",true,["D",1753664568269],"fileType","script","content","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { getCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\nimport * as queries from \"../database/queries.ts\";\nimport { generateReference } from \"../../shared/utils.ts\";\nimport type { ApiResponse, TransferRequest, EuropeanBank } from \"../../shared/types.ts\";\n\nconst transfers = new Hono();\n\n// Middleware to verify authentication\nasync function verifyAuth(c: any, next: any) {\n const token = getCookie(c, 'auth_token') || c.req.header('Authorization')?.replace('Bearer ', '');\n \n if (!token) {\n return c.json({ success: false, message: 'Authentication required' }, 401);\n }\n\n const session = await queries.getSessionByToken(token);\n if (!session || new Date(session.expiresAt) < new Date()) {\n return c.json({ success: false, message: 'Invalid or expired session' }, 401);\n }\n\n c.set('userId', session.userId);\n await next();\n}\n\ntransfers.use('*', verifyAuth);\n\n// Get list of European banks\ntransfers.get('/banks', async (c) => {\n try {\n const banks = await queries.getAllEuropeanBanks();\n\n return c.json>({\n success: true,\n data: banks\n });\n\n } catch (error) {\n console.error('Get banks error:', error);\n return c.json({\n success: false,\n error: 'Failed to fetch banks'\n }, 500);\n }\n});\n\n// Create external transfer\ntransfers.post('/external', async (c) => {\n try {\n const userId = c.get('userId');\n const body = await c.req.json() as TransferRequest;\n\n const { fromAccountId, toBank, toAccount, recipientName, amount, currency, description } = body;\n\n // Validate required fields\n if (!fromAccountId || !toBank || !toAccount || !recipientName || !amount || !currency) {\n return c.json({\n success: false,\n error: 'All transfer fields are required'\n }, 400);\n }\n\n // Validate amount\n if (amount <= 0) {\n return c.json({\n success: false,\n error: 'Transfer amount must be greater than zero'\n }, 400);\n }\n\n // Verify source account belongs to user\n const sourceAccount = await queries.getAccountById(fromAccountId);\n if (!sourceAccount || sourceAccount.userId !== userId) {\n return c.json({\n success: false,\n error: 'Source account not found or access denied'\n }, 403);\n }\n\n // Check sufficient balance\n if (sourceAccount.balance < amount) {\n return c.json({\n success: false,\n error: 'Insufficient balance'\n }, 400);\n }\n\n // Verify destination bank exists\n const destinationBank = await queries.getBankBySwiftCode(toBank);\n if (!destinationBank) {\n return c.json({\n success: false,\n error: 'Invalid destination bank'\n }, 400);\n }\n\n // Always decline transfers with security token message\n // Do not create transactions or update balances\n return c.json({\n success: false,\n error: 'transfer decline: please apply for a security Token'\n }, 400);\n\n } catch (error) {\n console.error('External transfer error:', error);\n return c.json({\n success: false,\n error: 'Transfer failed. Please try again.'\n }, 500);\n }\n});\n\n// Get transfer status\ntransfers.get('/status/:reference', async (c) => {\n try {\n const userId = c.get('userId');\n const reference = c.req.param('reference');\n\n // Get user accounts to verify access\n const userAccounts = await queries.getAccountsByUserId(userId);\n const accountIds = userAccounts.map(acc => acc.id);\n\n if (accountIds.length === 0) {\n return c.json({\n success: false,\n error: 'No accounts found'\n }, 404);\n }\n\n // Find transaction by reference (simplified query)\n // In a real system, you'd have a more sophisticated transaction lookup\n let transaction = null;\n for (const accountId of accountIds) {\n const transactions = await queries.getTransactionsByAccountId(accountId, 100);\n transaction = transactions.find(t => t.reference === reference);\n if (transaction) break;\n }\n\n if (!transaction) {\n return c.json({\n success: false,\n error: 'Transaction not found'\n }, 404);\n }\n\n return c.json({\n success: true,\n data: {\n reference: transaction.reference,\n amount: transaction.amount,\n currency: transaction.currency,\n status: transaction.status,\n description: transaction.description,\n recipientName: transaction.recipientName,\n recipientBank: transaction.recipientBank,\n createdAt: transaction.createdAt\n }\n });\n\n } catch (error) {\n console.error('Get transfer status error:', error);\n return c.json({\n success: false,\n error: 'Failed to fetch transfer status'\n }, 500);\n }\n});\n\n// Get transfer history\ntransfers.get('/history', async (c) => {\n try {\n const userId = c.get('userId');\n const limit = parseInt(c.req.query('limit') || '15');\n\n // Get user accounts\n const userAccounts = await queries.getAccountsByUserId(userId);\n \n if (userAccounts.length === 0) {\n return c.json({\n success: true,\n data: []\n });\n }\n\n // Get transactions for all user accounts\n const allTransactions = [];\n for (const account of userAccounts) {\n const transactions = await queries.getTransactionsByAccountId(account.id, limit);\n // Filter for external transfers (transactions with recipient bank)\n const externalTransfers = transactions.filter(t => t.recipientBank);\n allTransactions.push(...externalTransfers);\n }\n\n // Sort by date and limit results\n allTransactions.sort((a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime());\n const limitedTransactions = allTransactions.slice(0, limit);\n\n return c.json({\n success: true,\n data: limitedTransactions\n });\n\n } catch (error) {\n console.error('Get transfer history error:', error);\n return c.json({\n success: false,\n error: 'Failed to fetch transfer history'\n }, 500);\n }\n});\n\nexport default transfers;","deleted","label",[167,168,150],"backend","routes","permalink","https://www.val.town/x/cgshaq/AccessBankMobile/code/backend/routes/transfers.ts","extension","actionData","errors"]