app.rb

# Load env vars from .env file
require 'dotenv'
Dotenv.load

require 'base64'
require 'date'
require 'json'
require 'plaid'
require 'securerandom'
require 'sinatra'

set :port, ENV['APP_PORT'] || 8000

# disable CSRF warning and Rack protection on localhost due to usage of local /api proxy in react app.
# delete this for a production application.
set :protection, :except => [:json_csrf]
set :host_authorization, { permitted_hosts: [] }

configuration = Plaid::Configuration.new
configuration.server_index = Plaid::Configuration::Environment[ENV['PLAID_ENV'] || 'sandbox']
configuration.api_key['PLAID-CLIENT-ID'] = ENV['PLAID_CLIENT_ID']
configuration.api_key['PLAID-SECRET'] = ENV['PLAID_SECRET']
configuration.api_key['Plaid-Version'] = '2020-09-14'

api_client = Plaid::ApiClient.new(
  configuration
)

client = Plaid::PlaidApi.new(api_client)
products = ENV['PLAID_PRODUCTS'].split(',')
# We store the access_token, user_token, and user_id in memory - in production, store it in a secure
# persistent data store.
access_token = nil
user_token = nil
user_id = nil
# The payment_id is only relevant for the UK Payment Initiation product.
# We store the payment_token in memory - in production, store it in a secure
# persistent data store.

payment_id = nil
item_id = nil

# The authorization_id is only relevant for Transfer ACH product.
# We store the authorization_id in memory - in production, store it in a secure
# persistent data store.
authorization_id = nil
account_id = nil

post '/api/info' do
  content_type :json
  {
    item_id:      item_id,
    access_token: access_token,
    products:     ENV['PLAID_PRODUCTS'].split(','),
  }.to_json
end

# Exchange token flow - exchange a Link public_token for
# an API access_token
# https://plaid.com/docs/#exchange-token-flow
post '/api/set_access_token' do
  item_public_token_exchange_request = Plaid::ItemPublicTokenExchangeRequest.new(
    { public_token: params['public_token'] }
  )
  exchange_token_response =
    client.item_public_token_exchange(
      item_public_token_exchange_request
    )
  access_token = exchange_token_response.access_token
  item_id = exchange_token_response.item_id
  pretty_print_response(exchange_token_response.to_hash)
  content_type :json
  exchange_token_response.to_hash.to_json
end

# Retrieve Transactions for an Item
# https://plaid.com/docs/#transactions
get '/api/transactions' do
  begin
    # Set cursor to empty to receive all historical updates
    cursor = ''

    # New transaction updates since "cursor"
    added = []
    modified = []
    removed = [] # Removed transaction ids
    has_more = true
    # Iterate through each page of new transaction updates for item
    while has_more
      request = Plaid::TransactionsSyncRequest.new(
        {
          access_token: access_token,
          cursor: cursor
        }
      )
      response = client.transactions_sync(request)
      cursor = response.next_cursor

      # If no transactions are available yet, wait and poll the endpoint.
      # Normally, we would listen for a webhook but the Quickstart doesn't 
      # support webhooks. For a webhook example, see 
      # https://github.com/plaid/tutorial-resources or
      # https://github.com/plaid/pattern
      if cursor == ""
        sleep 2 
        next 
      end
    
      # Add this page of results
      added += response.added
      modified += response.modified
      removed += response.removed
      has_more = response.has_more
      pretty_print_response(response.to_hash)
    end
    # Return the 8 most recent transactions
    content_type :json
    { latest_transactions: added.sort_by(&:date).last(8).map(&:to_hash) }.to_json
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_json
  end
end

# Retrieve ACH or ETF account numbers for an Item
# https://plaid.com/docs/#auth
get '/api/auth' do
  begin
    auth_get_request = Plaid::AuthGetRequest.new({ access_token: access_token })
    auth_response = client.auth_get(auth_get_request)
    pretty_print_response(auth_response.to_hash)
    content_type :json
    auth_response.to_hash.to_json
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_json
  end
end

# Retrieve Identity data for an Item
# https://plaid.com/docs/#identity
get '/api/identity' do
  begin
    identity_get_request = Plaid::IdentityGetRequest.new({ access_token: access_token })
    identity_response = client.identity_get(identity_get_request)
    pretty_print_response(identity_response.to_hash)
    content_type :json
    { identity: identity_response.to_hash[:accounts] }.to_json
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_json
  end
end

# Retrieve real-time balance data for each of an Item's accounts
# https://plaid.com/docs/#balance
get '/api/balance' do
  begin
    balance_request = Plaid::AccountsBalanceGetRequest.new({ access_token: access_token })
    balance_response = client.accounts_balance_get(balance_request)
    pretty_print_response(balance_response.to_hash)
    content_type :json
    balance_response.to_hash.to_json
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_json
  end
end

# Retrieve an Item's accounts
# https://plaid.com/docs/#accounts
get '/api/accounts' do
  begin
    accounts_get_request = Plaid::AccountsGetRequest.new({ access_token: access_token })
    account_response = client.accounts_get(accounts_get_request)
    pretty_print_response(account_response.to_hash)
    content_type :json
    account_response.to_hash.to_json
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_json
  end
end

# Retrieve Holdings data for an Item
# https://plaid.com/docs/#investments
get '/api/holdings' do
  begin
    investments_holdings_get_request = Plaid::InvestmentsHoldingsGetRequest.new({ access_token: access_token })
    product_response = client.investments_holdings_get(investments_holdings_get_request)
    pretty_print_response(product_response.to_hash)
    content_type :json
    { holdings: product_response.to_hash }.to_json
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_hash.to_json
  end
end

# Retrieve Investment Transactions for an Item
# https://plaid.com/docs/#investments
get '/api/investments_transactions' do
  begin
    start_date = (Date.today - 30)
    end_date = Date.today
    investments_transactions_get_request = Plaid::InvestmentsTransactionsGetRequest.new(
      {
        access_token: access_token,
        start_date: start_date,
        end_date: end_date
      }
    )
    transactions_response = client.investments_transactions_get(investments_transactions_get_request)
    pretty_print_response(transactions_response.to_hash)
    content_type :json
    { investments_transactions: transactions_response.to_hash }.to_json
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_json
  end
end

# Create and then retrieve an Asset Report for one or more Items. Note that an
# Asset Report can contain up to 100 items, but for simplicity we're only
# including one Item here.
# https://plaid.com/docs/#assets
# rubocop:disable Metrics/BlockLength
get '/api/assets' do
  begin
    options = {
      client_report_id: '123',
      webhook: 'https://www.example.com',
      user: {
        client_user_id: '789',
        first_name: 'Jane',
        middle_name: 'Leah',
        last_name: 'Doe',
        ssn: '123-45-6789',
        phone_number: '(555) 123-4567',
        email: 'jane.doe@example.com'
      }
    }
    asset_report_create_request = Plaid::AssetReportCreateRequest.new(
      {
        access_tokens: [access_token],
        days_requested: 20,
        options: options
      }
    )
    asset_report_create_response =
      client.asset_report_create(asset_report_create_request)
    pretty_print_response(asset_report_create_response.to_hash)
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_json
  end

  asset_report_token = asset_report_create_response.asset_report_token
  asset_report_json = nil
  num_retries_remaining = 20
  while num_retries_remaining.positive?
    begin
      asset_report_get_request = Plaid::AssetReportGetRequest.new({ asset_report_token: asset_report_token })
      asset_report_get_response = client.asset_report_get(asset_report_get_request)
      asset_report_json = asset_report_get_response.report
      break
    rescue Plaid::ApiError => e
      json_response = JSON.parse(e.response_body)
      if json_response['error_code'] == 'PRODUCT_NOT_READY'
        num_retries_remaining -= 1
        sleep(1)
        next
      end
      error_response = format_error(e)
      pretty_print_response(error_response)
      content_type :json
      return error_response.to_json
    end
  end

  if asset_report_json.nil?
    content_type :json
    return {
      error: {
        error_code: 0,
        error_message: 'Timed out when polling for Asset Report'
      }
    }.to_json
  end

  asset_report_pdf_get_request = Plaid::AssetReportPDFGetRequest.new({ asset_report_token: asset_report_token })
  asset_report_pdf = client.asset_report_pdf_get( asset_report_pdf_get_request)

  content_type :json
  { json: asset_report_json.to_hash,
    pdf: Base64.encode64(File.read(asset_report_pdf)) }.to_json
end

get '/api/statements' do
  begin
    statements_list_request = Plaid::StatementsListRequest.new(
      {
        access_token: access_token
      }
    )
    statements_list_response =
      client.statements_list(statements_list_request)
    pretty_print_response(statements_list_response.to_hash)
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_json
  end
  statement_id = statements_list_response.accounts[0].statements[0].statement_id
  statements_download_request = Plaid::StatementsDownloadRequest.new({ access_token: access_token, statement_id: statement_id })
  statement_pdf = client.statements_download(statements_download_request)

  content_type :json
  { json: statements_list_response.to_hash,
    pdf: Base64.encode64(File.read(statement_pdf)) }.to_json
end

# rubocop:enable Metrics/BlockLength

# Retrieve high-level information about an Item
# https://plaid.com/docs/#retrieve-item
get '/api/item' do
  begin
    item_get_request = Plaid::ItemGetRequest.new({ access_token: access_token})
    item_response = client.item_get(item_get_request)
    institutions_get_by_id_request = Plaid::InstitutionsGetByIdRequest.new(
      {
        institution_id: item_response.item.institution_id,
        country_codes: ['US']
      }
    )
    institution_response =
      client.institutions_get_by_id(institutions_get_by_id_request)
    pretty_print_response(item_response.to_hash)
    pretty_print_response(institution_response.to_hash)
    content_type :json
    { item: item_response.item.to_hash,
      institution: institution_response.institution.to_hash }.to_json
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_json
  end
end

# This functionality is only relevant for the ACH Transfer product.
# Retrieve Transfer for a specified Transfer ID

get '/api/transfer_authorize' do
  begin
    # We call /accounts/get to obtain first account_id - in production,
    # account_id's should be persisted in a data store and retrieved
    # from there.
    accounts_get_request = Plaid::AccountsGetRequest.new({ access_token: access_token })
    accounts_get_response = client.accounts_get(accounts_get_request)
    account_id = accounts_get_response.accounts[0].account_id

    transfer_authorization_create_request = Plaid::TransferAuthorizationCreateRequest.new({
      access_token: access_token,
      account_id: account_id,
      type: 'debit',
      network: 'ach',
      amount: '1.00',
      ach_class: 'ppd',
      user: {
        legal_name: 'FirstName LastName',
        email_address: 'foobar@email.com',
        address: {
          street: '123 Main St.',
          city: 'San Francisco',
          region: 'CA',
          postal_code: '94053',
          country: 'US'
        }
      },
    })
    transfer_authorization_create_response = client.transfer_authorization_create(transfer_authorization_create_request)
    pretty_print_response(transfer_authorization_create_response.to_hash)
    authorization_id = transfer_authorization_create_response.authorization.id
    content_type :json
    transfer_authorization_create_response.to_hash.to_json
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_json
  end
end

get '/api/signal_evaluate' do
  begin
    # We call /accounts/get to obtain first account_id - in production,
    # account_id's should be persisted in a data store and retrieved
    # from there.
    accounts_get_request = Plaid::AccountsGetRequest.new({ access_token: access_token })
    accounts_get_response = client.accounts_get(accounts_get_request)
    account_id = accounts_get_response.accounts[0].account_id

    # Generate unique transaction ID using timestamp and random component
    client_transaction_id = "txn-#{Time.now.to_i}-#{SecureRandom.hex(4)}"

    signal_request_params = {
      access_token: access_token,
      account_id: account_id,
      client_transaction_id: client_transaction_id,
      amount: 100.00
    }

    if ENV['SIGNAL_RULESET_KEY'] && !ENV['SIGNAL_RULESET_KEY'].empty?
      signal_request_params[:ruleset_key] = ENV['SIGNAL_RULESET_KEY']
    end

    signal_evaluate_request = Plaid::SignalEvaluateRequest.new(signal_request_params)
    signal_evaluate_response = client.signal_evaluate(signal_evaluate_request)
    pretty_print_response(signal_evaluate_response.to_hash)
    content_type :json
    signal_evaluate_response.to_hash.to_json
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_json
  end
end

get '/api/transfer_create' do
  begin
      transfer_create_request = Plaid::TransferCreateRequest.new({
      access_token: access_token,
      account_id: account_id,
      authorization_id: authorization_id,
      description: 'Debit'
    })
    transfer_create_response = client.transfer_create(transfer_create_request)
    pretty_print_response(transfer_create_response.to_hash)
    content_type :json
    transfer_create_response.to_hash.to_json
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_json
  end
end

# This functionality is only relevant for the UK Payment Initiation product.
# Retrieve Payment for a specified Payment ID
get '/api/payment' do
  begin
    payment_initiation_payment_get_request = Plaid::PaymentInitiationPaymentGetRequest.new({ payment_id: payment_id})
    payment_get_response = client.payment_initiation_payment_get(payment_initiation_payment_get_request)
    pretty_print_response(payment_get_response.to_hash)
    content_type :json
    { payment: payment_get_response.to_hash}.to_json
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_json
  end
end

post '/api/create_link_token' do
  begin
    link_token_create_request = Plaid::LinkTokenCreateRequest.new(
      {
        user: { client_user_id: 'user-id' },
        client_name: 'Plaid Quickstart',
        products: ENV['PLAID_PRODUCTS'].split(','),
        country_codes: ENV['PLAID_COUNTRY_CODES'].split(','),
        language: 'en',
        redirect_uri: nil_if_empty_envvar('PLAID_REDIRECT_URI')
      }
    )
    if ENV['PLAID_PRODUCTS'].split(',').include?("statements")
      today = Date.today
      statements = Plaid::LinkTokenCreateRequestStatements.new(
        end_date: today,
        start_date: today-30
      )
      link_token_create_request.statements=statements
    end
    if products.any? { |product| product.start_with?("cra_") }
      link_token_create_request.cra_options = Plaid::LinkTokenCreateRequestCraOptions.new(
        days_requested: 60
      )
      # Use user_token if available, otherwise use user_id
      if user_token
        link_token_create_request.user_token = user_token
        # Keep user object when using user_token
      elsif user_id
        link_token_create_request.user_id = user_id
        # Remove user object when using user_id
        link_token_create_request.user = nil
      end
      link_token_create_request.consumer_report_permissible_purpose = Plaid::ConsumerReportPermissiblePurpose::ACCOUNT_REVIEW_CREDIT
    end
    link_response = client.link_token_create(link_token_create_request)
    pretty_print_response(link_response.to_hash)
    content_type :json
    { link_token: link_response.link_token }.to_json
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_json
  end
end

# Create a user token which can be used for Plaid Check, Income, or Multi-Item link flows
# https://plaid.com/docs/api/users/#usercreate
post '/api/create_user_token' do
  begin
    client_user_id = 'user_' + SecureRandom.uuid

    request_data = {
      # Typically this will be a user ID number from your application.
      client_user_id: client_user_id
    }

    if products.any? { |product| product.start_with?("cra_") }
      # Try with Identity field first (new-style)
      request_data[:identity] = {
        name: {
          given_name: 'Harry',
          family_name: 'Potter'
        },
        date_of_birth: '1980-07-31',
        phone_numbers: [{
          data: '+16174567890',
          primary: true
        }],
        emails: [{
          data: 'harrypotter@example.com',
          primary: true
        }],
        addresses: [{
          street_1: '4 Privet Drive',
          city: 'New York',
          region: 'NY',
          postal_code: '11111',
          country: 'US',
          primary: true
        }]
      }
    end

    begin
      user = client.user_create(Plaid::UserCreateRequest.new(request_data))
      # Store both user_token and user_id
      user_token = user.user_token if user.user_token
      user_id = user.user_id if user.user_id
      content_type :json
      user.to_hash.to_json
    rescue Plaid::ApiError => e
      error_body = JSON.parse(e.response_body) rescue {}
      if error_body['error_code'] == 'INVALID_FIELD' &&
         products.any? { |product| product.start_with?("cra_") }
        retry_request_data = {
          client_user_id: client_user_id,
          consumer_report_user_identity: {
            first_name: 'Harry',
            last_name: 'Potter',
            date_of_birth: '1980-07-31',
            phone_numbers: ['+16174567890'],
            emails: ['harrypotter@example.com'],
            primary_address: {
              city: 'New York',
              region: 'NY',
              street: '4 Privet Drive',
              postal_code: '11111',
              country: 'US'
            }
          }
        }
        user = client.user_create(Plaid::UserCreateRequest.new(retry_request_data))
        # Store both user_token and user_id
        user_token = user.user_token if user.user_token
        user_id = user.user_id if user.user_id
        content_type :json
        user.to_hash.to_json
      else
        raise e
      end
    end
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_json
  end
end

def nil_if_empty_envvar(field)
  val = ENV[field]
  puts "val #{val}"
  if !val.nil? && val.length > 0
    return val
  else
    return nil
  end
end

# This functionality is only relevant for the UK/EU Payment Initiation product.
# Sets the payment token in memory on the server side. We generate a new
# payment token so that the developer is not required to supply one.
# This makes the quickstart easier to use.
# See:
# - https://plaid.com/docs/payment-initiation/
# - https://plaid.com/docs/#payment-initiation-create-link-token-request
post '/api/create_link_token_for_payment' do
  begin
    payment_initiation_recipient_create_request = Plaid::PaymentInitiationRecipientCreateRequest.new(
      {
        name: 'Bruce Wayne',
        iban: 'GB33BUKB20201555555555',
        address: {
          street: ['686 Bat Cave Lane'],
          city: 'Gotham',
          postal_code: '99999',
          country: 'GB',
        },
        bacs: {
          account: '26207729',
          sort_code: '560029',
        }
      }
    )
    create_recipient_response = client.payment_initiation_recipient_create(
      payment_initiation_recipient_create_request
    )
    recipient_id = create_recipient_response.recipient_id

    payment_initiation_recipient_get_request = Plaid::PaymentInitiationRecipientGetRequest.new(
      {
        recipient_id: recipient_id
      }
    )
    get_recipient_response = client.payment_initiation_recipient_get(
      payment_initiation_recipient_get_request
    )

    payment_initiation_payment_create_request = Plaid::PaymentInitiationPaymentCreateRequest.new(
      {
        recipient_id: recipient_id,
        reference: 'testpayment',
        amount: {
          value: 100.00,
          currency: 'GBP'
        }
      }
    )
    create_payment_response = client.payment_initiation_payment_create(
      payment_initiation_payment_create_request
    )
    payment_id = create_payment_response.payment_id

    link_token_create_request = Plaid::LinkTokenCreateRequest.new(
      {
        client_name: 'Plaid Quickstart',  
        user: { 
          # This should correspond to a unique id for the current user.
          # Typically, this will be a user ID number from your application.
          # Personally identifiable information, such as an email address or phone number, should not be used here.
          client_user_id: 'user-id' 
        },
        
        # Institutions from all listed countries will be shown.
        country_codes: ENV['PLAID_COUNTRY_CODES'].split(','),
        language: 'en',

        # The 'payment_initiation' product has to be the only element in the 'products' list.
        products: ['payment_initiation'],
        
        payment_initiation: { 
          payment_id: payment_id 
        },
        redirect_uri: nil_if_empty_envvar('PLAID_REDIRECT_URI')
      }
    )
    link_response = client.link_token_create(link_token_create_request)
    pretty_print_response(link_response.to_hash)
    content_type :json
    { link_token: link_response.link_token }.to_hash.to_json
    
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_json
  end
end

# Retrieve CRA Base Report and PDF
# Base report: https://plaid.com/docs/check/api/#cracheck_reportbase_reportget
# PDF: https://plaid.com/docs/check/api/#cracheck_reportpdfget
get '/api/cra/get_base_report' do
  begin
    get_response = get_cra_base_report_with_retries(client, user_token, user_id)
    pretty_print_response(get_response.to_hash)

    # Use user_token if available, otherwise use user_id
    pdf_params = {}
    if user_token
      pdf_params[:user_token] = user_token
    elsif user_id
      pdf_params[:user_id] = user_id
    end
    pdf_response = client.cra_check_report_pdf_get(
      Plaid::CraCheckReportPDFGetRequest.new(pdf_params)
    )

    content_type :json
    {
      report: get_response.report.to_hash,
      pdf: Base64.encode64(File.read(pdf_response))
    }.to_json
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_json
  end
end

def get_cra_base_report_with_retries(plaid_client, user_token, user_id)
  poll_with_retries do
    # Use user_token if available, otherwise use user_id
    params = {}
    if user_token
      params[:user_token] = user_token
    elsif user_id
      params[:user_id] = user_id
    end
    plaid_client.cra_check_report_base_report_get(
      Plaid::CraCheckReportBaseReportGetRequest.new(params)
    )
  end
end

# Retrieve CRA Income Insights and PDF with Insights
# Income insights: https://plaid.com/docs/check/api/#cracheck_reportincome_insightsget
# PDF w/ income insights: https://plaid.com/docs/check/api/#cracheck_reportpdfget
get '/api/cra/get_income_insights' do
  begin
    get_response = get_income_insights_with_retries(client, user_token, user_id)
    pretty_print_response(get_response.to_hash)

    # Use user_token if available, otherwise use user_id
    pdf_params = { add_ons: [Plaid::CraPDFAddOns::INCOME_INSIGHTS] }
    if user_token
      pdf_params[:user_token] = user_token
    elsif user_id
      pdf_params[:user_id] = user_id
    end
    pdf_response = client.cra_check_report_pdf_get(
      Plaid::CraCheckReportPDFGetRequest.new(pdf_params)
    )

    content_type :json
    {
      report: get_response.report.to_hash,
      pdf: Base64.encode64(File.read(pdf_response))
    }.to_json
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_json
  end
end

def get_income_insights_with_retries(plaid_client, user_token, user_id)
  poll_with_retries do
    # Use user_token if available, otherwise use user_id
    params = {}
    if user_token
      params[:user_token] = user_token
    elsif user_id
      params[:user_id] = user_id
    end
    plaid_client.cra_check_report_income_insights_get(
      Plaid::CraCheckReportIncomeInsightsGetRequest.new(params)
    )
  end
end

# Retrieve CRA Partner Insights
# https://plaid.com/docs/check/api/#cracheck_reportpartner_insightsget
get '/api/cra/get_partner_insights' do
  begin
    response = get_check_partner_insights_with_retries(client, user_token, user_id)
    pretty_print_response(response.to_hash)

    content_type :json
    response.to_hash.to_json
  rescue Plaid::ApiError => e
    error_response = format_error(e)
    pretty_print_response(error_response)
    content_type :json
    error_response.to_json
  end
end

def get_check_partner_insights_with_retries(plaid_client, user_token, user_id)
  poll_with_retries do
    # Use user_token if available, otherwise use user_id
    params = {}
    if user_token
      params[:user_token] = user_token
    elsif user_id
      params[:user_id] = user_id
    end
    plaid_client.cra_check_report_partner_insights_get(
      Plaid::CraCheckReportPartnerInsightsGetRequest.new(params)
    )
  end
end

# Since this quickstart does not support webhooks, this function can be used to poll
# an API that would otherwise be triggered by a webhook.
# For a webhook example, see
# https://github.com/plaid/tutorial-resources or
# https://github.com/plaid/pattern
def poll_with_retries(ms = 1000, retries_left = 20)
  begin
    yield
  rescue Plaid::ApiError => e
    if retries_left > 0
      sleep(ms / 1000.0)
      poll_with_retries(ms, retries_left - 1) { yield }
    else
      raise 'Ran out of retries while polling'
    end
  end
end

def format_error(err)
  body = JSON.parse(err.response_body)
  {
    error: {
      status_code: err.code,
      error_code: body['error_code'],
      error_message: body['error_message'],
      error_type: body['error_type']
    }
  }
end

def pretty_print_response(response)
  puts JSON.pretty_generate(response)
end