Fringg
8175bc8bfe
- CloudPayments: require webhook signature when secret configured (all 4 handlers) - Platega: timing-safe HMAC comparison via hmac.compare_digest - CryptoBot/Heleket: return False when API token unconfigured - Tribute: return 503 when API key not configured - Freekassa: use request.client.host instead of X-Forwarded-For - Pal24: verify webhook amount matches stored payment amount - YooKassa: reject test-mode payments in production; add YOOKASSA_TEST_MODE config - CloudPayments: reject test-mode payments in production - WebAPI: add upper bounds to duration_days, traffic_limit_gb, device_limit schemas - WebAPI: bound balance update amount to ±100M kopeks - WebAPI: sign-dispatch for balance updates (negative → subtract_user_balance) - WebAPI miniapp: add blocked/deleted user checks, restriction_topup/subscription guards - Admin handlers: add @admin_required and @error_handler to moderator panel - add_user_balance: guard against negative amounts (use subtract_user_balance instead)
53 lines
1.4 KiB
Python
53 lines
1.4 KiB
Python
from __future__ import annotations
|
|
|
|
from datetime import datetime
|
|
|
|
from pydantic import BaseModel, Field
|
|
|
|
|
|
class SubscriptionResponse(BaseModel):
|
|
id: int
|
|
user_id: int
|
|
status: str
|
|
actual_status: str
|
|
is_trial: bool
|
|
start_date: datetime
|
|
end_date: datetime
|
|
traffic_limit_gb: int
|
|
traffic_used_gb: float
|
|
device_limit: int
|
|
autopay_enabled: bool
|
|
autopay_days_before: int | None = None
|
|
subscription_url: str | None = None
|
|
subscription_crypto_link: str | None = None
|
|
connected_squads: list[str] = Field(default_factory=list)
|
|
created_at: datetime | None = None
|
|
updated_at: datetime | None = None
|
|
|
|
|
|
class SubscriptionCreateRequest(BaseModel):
|
|
user_id: int
|
|
is_trial: bool = False
|
|
duration_days: int | None = Field(None, ge=1, le=36500)
|
|
traffic_limit_gb: int | None = Field(None, ge=0, le=1_000_000)
|
|
device_limit: int | None = Field(None, ge=1, le=10_000)
|
|
squad_uuid: str | None = None
|
|
connected_squads: list[str] | None = None
|
|
replace_existing: bool = False
|
|
|
|
|
|
class SubscriptionExtendRequest(BaseModel):
|
|
days: int = Field(..., gt=0, le=36500)
|
|
|
|
|
|
class SubscriptionTrafficRequest(BaseModel):
|
|
gb: int = Field(..., gt=0, le=1_000_000)
|
|
|
|
|
|
class SubscriptionDevicesRequest(BaseModel):
|
|
devices: int = Field(..., gt=0, le=10_000)
|
|
|
|
|
|
class SubscriptionSquadRequest(BaseModel):
|
|
squad_uuid: str
|