mattsains / bank-api Goto Github PK
View Code? Open in Web Editor NEWThis is an old abandoned project I started in high school. It remains here for nostalgia
This is an old abandoned project I started in high school. It remains here for nostalgia
branch this to frontend-web
Not sure about specifics. Have permission ID which is referenced by users table. Edit as more ideas arrive
If additional information is required, send as a JSON response in addition to the error code.
for example, with any credentials, I can view information about every account in the database. This is bad.
Rename /accounts/pull to /accounts/index
Make an error handler to return consistent errors, (perhaps in JSON) and to do logging if it is required. This can coexist with a config getter (ie., time zone, bank name, currency symbol server)
It'd be cool if there was some fancy statistics thing that would notice dodgy errors (potential attacks_
Exactly what is returned in a list of transactions needs work. For example:
Will I just add interest at some point based on what is in the account? Or pro-rata? Either way, figure this out, and then implement it.
When you deposit money at an ATM, the money is immediately reflected, but it is "unavailable". Add functionality to keep track of that money which is not cleared. Add a permission that allows a member of staff to clear money. (given to bean counters)
///comment
API does not take advantage of all API features.
Add a config entry called "allow-http". If this is false, always direct requests to the HTTPS url.
These functions need to be more aware of their errors, and return a status code: (true, false)
Write this API function to see what the balance was at some optionally given timestamp, for a given account. This will be used by accounts->index to show current balances.
If no timestamp given, function returns current balance.
So that accounts have types, such as "Student current" or "Fixed deposit" and later on we can add conditions to this in Milestone 0.4-alpha.
Just named for now.
to do transfers, get specific information about transactions on an account, etc
Hash the hash with a salt.
Basically, hash hash hash salt salt salted hash hash salt hash.
Like https, dat stuff
Any user can discover aids that exist, because non-existent account return 404, while accounts not belonging to that user return 403. By querying all integer account ids, a user can figure out all the account ids in the database.
Just return a 403 (access denied) error for all accounts which either do not exist, or are not owned by the user.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.