Validación de cuentas

const BASE = 'https://stage.tonder.io/api/v1'; // app.tonder.io en producción
const headers = { Authorization: `Token ${process.env.TONDER_API_KEY}`, 'Content-Type': 'application/json' };

async function validateAccount(clabe, user) {
  let v = await fetch(`${BASE}/account-verifications/`, {
    method: 'POST',
    headers,
    body: JSON.stringify({
      account_number: clabe,
      business_id: process.env.TONDER_BUSINESS_ID,
      mode: 'withdrawal',
      expected_holder_name: user.fullName,
      expected_holder_id: user.rfc,
    }),
  }).then((r) => r.json());

  // Consulta mientras esté pendiente — suelen ser segundos. Renuncia a *esperar*, no a la cuenta.
  for (let i = 0; i < 20 && v.status === 'pending'; i++) {
    await new Promise((r) => setTimeout(r, 3000));
    v = await fetch(
      `${BASE}/account-verifications/${clabe}?business_id=${process.env.TONDER_BUSINESS_ID}`,
      { headers },
    ).then((r) => r.json());
  }

  await db.saveVerification(user.id, clabe, v.verification_id, v.status);

  if (v.status === 'pending') return { decision: 'retry_later' };
  if (v.status === 'failed') return { decision: 'block', reason: v.reason };
  if (v.rfc_match === false) return { decision: 'block', reason: 'rfc_mismatch' };
  if (v.name_match === false) return { decision: 'flag', reason: 'name_mismatch' };
  return { decision: 'pay', holder: v.holder_name };
}

import os, time, requests

BASE = "https://stage.tonder.io/api/v1"  # app.tonder.io en producción
HEADERS = {"Authorization": f"Token {os.environ['TONDER_API_KEY']}", "Content-Type": "application/json"}
BUSINESS_ID = os.environ["TONDER_BUSINESS_ID"]

def validate_account(clabe: str, user) -> dict:
    v = requests.post(f"{BASE}/account-verifications/", headers=HEADERS, json={
        "account_number": clabe,
        "business_id": BUSINESS_ID,
        "mode": "withdrawal",
        "expected_holder_name": user.full_name,
        "expected_holder_id": user.rfc,
    }).json()

    # Consulta mientras esté pendiente — suelen ser segundos. Renuncia a *esperar*, no a la cuenta.
    for _ in range(20):
        if v["status"] != "pending":
            break
        time.sleep(3)
        v = requests.get(
            f"{BASE}/account-verifications/{clabe}",
            headers=HEADERS, params={"business_id": BUSINESS_ID},
        ).json()

    db.save_verification(user.id, clabe, v["verification_id"], v["status"])

    if v["status"] == "pending":
        return {"decision": "retry_later"}
    if v["status"] == "failed":
        return {"decision": "block", "reason": v["reason"]}
    if v["rfc_match"] is False:
        return {"decision": "block", "reason": "rfc_mismatch"}
    if v["name_match"] is False:
        return {"decision": "flag", "reason": "name_mismatch"}
    return {"decision": "pay", "holder": v["holder_name"]}