From 2354e90ff0aff42b420eefd2afb2166169ec5857 Mon Sep 17 00:00:00 2001
From: alpaylan
Date: Wed, 14 Apr 2021 00:55:24 +0300
Subject: add balance check to transactions.

---
 src/handlers.rs | 35 +++++++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)

(limited to 'src')

diff --git a/src/handlers.rs b/src/handlers.rs
index 362a341..be2a020 100644
--- a/src/handlers.rs
+++ b/src/handlers.rs
@@ -291,6 +291,40 @@ pub async fn authorized_propose_transaction(
 
     // `user` is an authenticated student, can propose
 
+    // check if user can afford the transaction
+    if new_transaction.by == new_transaction.source {  // Propose to transact with another user
+        if internal_user.balance < new_transaction.amount {
+            return Ok(warp::reply::with_status(
+                warp::reply::json(&GradeCoinResponse {
+                    res: ResponseType::Error,
+                    message: "User does not have enough balance in their account"
+                        .to_owned(),
+                }),
+                StatusCode::BAD_REQUEST,
+            ));
+        }
+    } else if new_transaction.by == new_transaction.target {
+        if internal_user.balance < new_transaction.amount {
+            return Ok(warp::reply::with_status(
+                warp::reply::json(&GradeCoinResponse {
+                    res: ResponseType::Error,
+                    message: "Bank does not have enough balance"
+                        .to_owned(),
+                }),
+                StatusCode::BAD_REQUEST,
+            ));
+        }
+    } else {
+        return Ok(warp::reply::with_status(
+            warp::reply::json(&GradeCoinResponse {
+                res: ResponseType::Error,
+                message: "Invalid by field for the proposed transaction"
+                    .to_owned(),
+            }),
+            StatusCode::BAD_REQUEST,
+        ));
+    }
+
     // This public key was already written to the database, we can panic if it's not valid at
     // *this* point
     let proposer_public_key = &internal_user.public_key;
@@ -331,6 +365,7 @@ pub async fn authorized_propose_transaction(
 
     debug!("clear for transaction proposal");
 
+
     let mut transactions = db.pending_transactions.write();
     transactions.insert(new_transaction.source.to_owned(), new_transaction);
     Ok(warp::reply::with_status(
-- 
cgit v1.2.3-70-g09d2