rdcDigiliti.i

<?php
# 12/12/18 For port to Odyssey -
# changed usage of 'Cn' to 'MBRACCT' or 'Uid' as needed
# updated sql to use Odyssey schema
# removed use of loanbalance info -- Digiliti does not support deposit to loans
# various 'check an email' functions consolidated to Odyssey function validateEmail()
#
function RDCconfig($dbh, &$parms) {
    $parms['QA'] = (!HCU_array_key_value('QA', $parms) ? 0 : HCU_array_key_value('QA', $parms) );
    if ($parms['QA']) {
        $parms['dgMgmtURL'] = HCU_array_key_value('qaMgmtURL', $parms); # External Services / User Management
        $parms['dgUser'] = HCU_array_key_value('qaUser', $parms);    # HomeCU login
        $parms['dgPass'] = htmlentities(HCU_array_key_value('qaPass', $parms), ENT_COMPAT | ENT_XML1); # HomeCU password
        $parms['dgMobileURL'] = HCU_array_key_value('qaMobileURL', $parms);  # Mobile Services / Deposits & History
    } else {
        $parms['dgMgmtURL'] = HCU_array_key_value('prodMgmtURL', $parms); # External Services / User Management
        $parms['dgUser'] = HCU_array_key_value('prodUser', $parms);    # HomeCU login
        $parms['dgPass'] = htmlentities(HCU_array_key_value('prodPass', $parms), ENT_COMPAT | ENT_XML1); # HomeCU password
        $parms['dgMobileURL'] = HCU_array_key_value('prodMobileURL', $parms);  # Mobile Services / Deposits & History
    }
    # check the 4 we just set, and the default phone user password also.
    if (empty($parms['dgMobileURL']) || empty($parms['dgMgmtURL']) ||
        empty($parms['dgUser']) || empty($parms['dgPass']) || empty($parms['PhonePass']) ) {
        throw new Exception("Missing Parameters", 100);
    }
}

function RDCauth($dbh, $HB_ENV, $MC, $parms) {
# requires: $parms['Cu']
#       $parms['rdcvendor']
# Additional values rdcvendor retrieved and decoded from cutrusteddetail
#
# returns:
    # assume we are going to succeed...
    $return['status']['response'] = 'true';
    $return['status']['code'] = '000';
    $return['status']['message'] = 'Success';

    try {
//        # just to test and get a vendor logging entry:
//        $dgtest = digiGetAccountTypeNames($parms);
//        $dgtest = digiGetABANumbers($parms);
//
        # If authorizing at HomeCU, is member authorized?
        if (HCU_array_key_value('HomeCUAuth', $parms)) {
            $mbr_rdc = Get_RDCSetting($dbh, $HB_ENV, 'RDCDigiliti', $parms['MBRACCT']);
            if ($mbr_rdc['status']['code'] != '000') {
                throw new Exception($mbr_rdc['status']['message'], $mbr_rdc['status']['code']);
            }
            $dl = $mbr_rdc['rdcsetting'];
            if (abs(intval($dl)) == 0) {

                $HB_Notices_ary = Get_NoticeInfo($dbh, $HB_ENV, $MC, 'M', "mblNoRDC", true);
                if ($HB_Notices_ary['status']['code'] == '000') {
                    $noticeData = $HB_Notices_ary["notice"][0]["notice_text"];
                } else {
                    $noticeData = "";
                }
                if (strlen($noticeData)) {
                    $message = $noticeData;
                    $code = 111;
                } else {
                    $message = "Account not permitted for Remote Deposit.  Please contact the Credit Union for more information";
                    $code = 110;
                }
                throw new Exception($message, $code);
            }
        }
        # member is authorized - check for terms
        $parms['rdcstatus'] = 'S';
        $rdcterms = array();

        if (HCU_array_key_value('HomeCUterms', $parms)) {
            $rdcterms = hcuGetRDCterms($dbh, $HB_ENV, $MC);

            if ($rdcterms['status']['response'] == 'false') {
                $e = "HCU GetTerms call failed ({$rdcterms['status']['code']} {$rdcterms['status']['message']}";
                throw new Exception($e, 301);
            }
            if ($rdcterms['data']['notice_popup'] == 1) {
                $parms['rdcstatus'] = 'T';
            }
        }

        # Get HomeCU-eligible accounts
        $parms['Fset2'] = $HB_ENV['Fset2']; # HB_ENV
        $parms['Fset3'] = $HB_ENV['Fset3']; # HB_ENV
        $parms['Uid'] = $HB_ENV['Uid'];
        $hculist = RDCGetAccts($dbh, $parms);

        if ($hculist['status']['code'] !== '000') {
            throw new Exception($hculist['status']['message'], $hculist['status']['code']);
        }

        # got a valid RDC account list

        $parms['HCUAccounts'] = $hculist['data']; # from mammoth
        $parms['deplimit'] = (isset($dl) ? $dl : 0);

        # got a valid RDC account list
        # collect the Digiliti info

        $parms['live'] = HCU_array_key_value('live',$HB_ENV);
        $dglist = digiStartSession($parms, $HB_ENV);
        if ($dglist['status']['response'] == 'false') {
            throw new Exception($dglist['status']['message'], $dglist['status']['code']);
        }

        if (empty($dglist['data']['dgUserId'])) {
            throw new Exception('Digiliti Invalid User ', 300);
        }
# get user profile (deposit limits) here, and reformat messages as in PresentAccounts
# deposit limits, particularly the remaining available, may have changed since last call
        $dgprofile = digiGetUserProfile($parms, $dglist['data']['dgUserId']);

# dgprofile['data']['scanlimit']
# dgprofile['data']['UserRunningTotals']['AvailableItemsPerDay']

        if ($dgprofile['status']['response'] == 'false') {
            throw new Exception($dgprofile['status']['message'], $dgprofile['status']['code']);
        }
        if ($dgprofile['data']['scanlimit'] <= 0) {
            throw new Exception('Digiliti Profile Limits Exceeded', 999);
        }
        $dglist['data']['scanlimit'] = $dgprofile['data']['scanlimit'];

        $presaccts = RDCPresentAccounts($parms, $dglist, $rdcterms);
        if ($presaccts['status']['response'] == 'false') {
            # error send fail
            throw new Exception($presaccts['status']['message'], $presaccts['status']['code']);
        }
        $depmessages=array();
        if (HCU_array_key_value('ShowScanlimit', $parms)) {
            $depmessages[] = array("MessageTextCd" => "HCU1","LocalizedText" => "Deposit Limit is " . sprintf("%.2f","{$dglist['data']['scanlimit']}"));
        }

        # Now getting a new deposit record every time.  Not tied
        # to shared branching, so no cost implication for client?
        # Check first for valid session key, if not found, start session
        $newrec = 1;
            # no session to recycle, or only old sessions
            $parms['vendorinfo'] = array(
                'Vendortime' => mktime(),
                'userAgent' => $_SERVER['HTTP_USER_AGENT'],
                'userIP' => $_SERVER['REMOTE_ADDR'],
                'accounts' => $presaccts['data']['accounts'],
                'depmessages' => $depmessages,
                'scanlimit' => $dgprofile['data']['scanlimit'],
                'dgUserId' => $presaccts['data']['dgUserId'],
                'dgUserName' => $presaccts['data']['dgUserName']
            );

            if (HCU_array_key_value('HomeCUterms', $parms)) {
                $localTerms = (HCU_array_key_value('terms', $rdcterms['data']) ? $rdcterms['data']['terms'] : '');
            } else {
                $localTerms = '';
            }

        if ($newrec) {
            # start curdc record, return depositid as part of result
            $depostat = curdc_start($dbh, $parms);
            if ($depostat['status']['response'] == 'false') {
                # error send fail
                throw new Exception('HomeCU Start Deposit Failed', 200);
            }
            $parms['depositid'] = $depostat['data']['depositid'];
        }
        $return['data']['depositid'] = $parms['depositid'];
        $return['data']['accounts'] = $parms['vendorinfo']['accounts'];
        $return['data']['depmessages'] = $parms['vendorinfo']['depmessages'];
        $return['data']['terms'] = $localTerms;


        $depostat = curdc_setvinfo($dbh, array('Cu' => $parms['Cu'], 'depositid' => $parms['depositid'],
            'vendorinfo' => json_encode($parms['vendorinfo'])));
        if ($depostat['status']['response'] == 'false') {
            # error send fail
            throw new Exception($depostat['status']['message'], $depostat['status']['code']);
        }
    } catch (Exception $e) {
        $return['status']['response'] = 'false';
        $return['status']['code'] = $e->getCode();
        $return['status']['message'] = "(" . $e->getLine() . ") " . htmlspecialchars($e->getMessage(), ENT_QUOTES, 'UTF-8', FALSE);
    }
    return $return;
}

function RDCaccept($dbh, $HB_ENV, $MC, $parms) {
# requires: $parms['Cu']
#       $parms['depositid']
# Additional values retrieved and decoded from cutrusteddetail
# or from curdcstatus record using depositid as key
# returns:
    # assume we are going to succeed...
    $return['status']['response'] = 'true';
    $return['status']['code'] = '000';
    $return['status']['message'] = 'Success';

    try {
        if (!isset($parms['Cu']) || !isset($parms['depositid'])) {
            throw new Exception('Missing Parameters', 100);
        }
        # look up depositid
        # decode vendorinfo
        $depo = curdc_read($dbh, $parms);
        if ($depo['status']['response'] == 'false') {
            throw new Exception('HomeCU DepositID not found', 205);
        }

        # look up rdcTerms doc and then update to show acceptance
        // get any notice text
        $noticeInfo = Get_NoticeInfo($dbh, $HB_ENV, $MC, "P", "rdcTerms", false);
        if ($noticeInfo["status"]["code"] == "000" && sizeof($noticeInfo['notice']) && intval($noticeInfo['notice'][0]['notice_id']) > 0) {
            # action P post so set up the HCUPOST array
            $HB_ENV['HCUPOST']['notice_id'] = $noticeInfo['notice'][0]['notice_id'];
            $HB_ENV['HCUPOST']['notice_type'] = $noticeInfo['notice'][0]['notice_type'];
            $HB_ENV['HCUPOST']['notice_device'] = 'P';
            $HB_ENV["HCUPOST"]['notice_response'] = array("answer" => 1);    // something non-zero but numeric
            # not sure if the next two are needed -
            $HB_ENV["HCUPOST"]['notice_cancel'] = "0";
            $HB_ENV['HCUPOST']['notice_msg_show'] = 1;
            $noticeUpd = Update_NoticeInfo($dbh, $HB_ENV, $MC);

            $return['status']['message'] = 'Accept Terms OK';
            $vendorinfo = $depo['vendorinfo'];
            $vendorinfo['terms'] = '';
            $vendorinfo['Vendortime'] = mktime();
            $parms['vendorinfo'] = $vendorinfo;
        }

        # update curdcstatus record
        $parms['rdcstatus'] = 'O';

        $depostat = curdc_setvinfo($dbh, array('Cu' => $parms['Cu'], 'depositid' => $parms['depositid'],
            'rdcstatus' => $parms['rdcstatus'], 'vendorinfo' => json_encode($parms['vendorinfo'])));
        if ($depostat['status']['response'] == 'false') {
            # error send fail
            throw new Exception($depostat['status']['message'], $depostat['status']['code']);
        }
    } catch (Exception $e) {
        $return['status']['response'] = 'false';
        $return['status']['code'] = $e->getCode();
        $return['status']['message'] = "(" . $e->getLine() . ") " . htmlspecialchars($e->getMessage(), ENT_QUOTES, 'UTF-8', FALSE);
    }
    return $return;
}

function RDChistorylist($dbh, $parms) {
# requires: $parms['Cu']
#       $parms['depositid']
# Additional values retrieved and decoded from cutrusteddetail
# or from curdcstatus record using depositid as key
# returns:
    # assume we are going to succeed...
    $return['status']['response'] = 'true';
    $return['status']['code'] = '000';
    $return['status']['message'] = 'Success';

    try {
        if (!isset($parms['Cu']) || !isset($parms['depositid'])) {
            throw new Exception('Missing Parameters', 100);
        }
        # look up depositid
        # decode vendorinfo
        $depo = curdc_read($dbh, $parms);
        if ($depo['status']['response'] == 'false') {
            throw new Exception("HomeCU DepositID not found [{$parms['depositid']}]", 205);
        }
        # format the digiliti username value here
        $parms['searchuser'] = (strlen($parms['MBRACCT']) < 4 ? substr('00000' . $parms['MBRACCT'], -4, 4) : $parms['MBRACCT']);

        $rdcresult = digiSearchTransactions($parms);
        if ($rdcresult['status']['code'] != '000' && $rdcresult['status']['code'] != '404') {
            throw new Exception('digi Get History List call failed. ' . $rdcresult['status']['message'], $rdcresult['status']['code']);
        }

        if ($rdcresult['status']['code'] == '404') {
            $return['status']['message'] = 'No Transactions Found';
        } else {
//            LogToFile( __LINE__ ,"digiSearch results", (array) $rdcresult['data']['Transactions']);
            foreach ((array) $rdcresult['data']['Transactions'] as $histkey => $histitem) {
                // set return values using ensenta names, just because
                // they were first and OFXRequest expects those names

                // Bugs me to swap ReceiptReferenceNo & transactionid, but
                // ReceiptReferenceNo needs to match the value saved as
                // ['vendorinfo']['TransactionReceiptNumber'] in the curdcstatus rec
                // because OFXRequest uses it for key matching
                $rdcresult['data']['Transactions'][$histkey]['ReceiptReferenceNo'] = $histitem['TransactionId'];
                $rdcresult['data']['Transactions'][$histkey]['TransactionId'] = "{$histitem['TransactionId']}_HCU_{$histitem['PartnerTransactionId']}";
                $rdcresult['data']['Transactions'][$histkey]['transactiondttm'] = $histitem['SubmissionDate'];
                # EnteredAmount? ApprovedAmount? RecognizedAmount?  hmm....
                $rdcresult['data']['Transactions'][$histkey]['submittedamount'] = sprintf('%.2f', $histitem['EnteredAmount']);
                $rdcresult['data']['Transactions'][$histkey]['currentamount'] = sprintf('%.2f', $histitem['ApprovedAmount']);
                $rdcresult['data']['Transactions'][$histkey]['status'] = $histitem['Status'];
                $rdcresult['data']['Transactions'][$histkey]['statusdescr'] = "{$histitem['BizRuleEngineMessage']}";
                $rdcresult['data']['Transactions'][$histkey]['statusdisplay'] = ($histitem['Status'] == 'NeedsReview' ? 'Needs Review' : $histitem['Status'] ) . ": {$histitem['BizRuleEngineMessage']}";
                $rdcresult['data']['Transactions'][$histkey]['transactiontype'] = $histitem['AccountNickName'];
                $rdcresult['data']['Transactions'][$histkey]['accountnumber'] = $histitem['UserAccountNumber'];
            }
//            LogToFile( __LINE__ ,"after parsing results", (array) $rdcresult['data']['Transactions']);
            $return['status']['message'] = 'History List OK';
        }
        $vendorinfo = $depo['vendorinfo'];
        $vendorinfo['Vendortime'] = mktime();
        $parms['vendorinfo'] = $vendorinfo;

        # update curdcstatus record

        $depostat = curdc_setvinfo($dbh, array('Cu' => $parms['Cu'], 'depositid' => $parms['depositid'],
            'vendorinfo' => json_encode($parms['vendorinfo'])));
        if ($depostat['status']['response'] == 'false') {
            # error send fail
            throw new Exception($depostat['status']['message'], $depostat['status']['code']);
        }
        $return['data']['TransactionList'] = $rdcresult['data']['Transactions'];
        $return['data']['rdcvendor'] = $depo['data']['rdcvendor'];
    } catch (Exception $e) {
        $return['status']['response'] = 'false';
        $return['status']['code'] = $e->getCode();
        $return['status']['message'] = "(" . $e->getLine() . ") " . htmlspecialchars($e->getMessage(), ENT_QUOTES, 'UTF-8', FALSE);
    }
    return $return;
}

function RDChistorydetl($dbh, $parms) {
# 2/12/18 MH
# function does not appear to be called anywhere -
# but if we did call it, ItemId would need to be the
# ReceiptReferenceNo from the desired transaction
# requires: $parms['Cu']
#       $parms['ItemId']
# Additional values retrieved and decoded from cutrusteddetail
# or from curdcstatus record using depositid as key
# returns:
    # assume we are going to succeed...
    $return['status']['response'] = 'true';
    $return['status']['code'] = '000';
    $return['status']['message'] = 'Success';

    try {
        if (!isset($parms['Cu']) || !isset($parms['ItemId']) || !isset($parms['depositid'])) {
            throw new Exception('Missing Parameters', 100);
        }
        # look up depositid
        # decode vendorinfo
        $depo = curdc_read($dbh, $parms);
        if ($depo['status']['response'] == 'false') {
            throw new Exception('HomeCU DepositID not found', 205);
        }
        $rdcresult = digiGetHistoryItem($parms, $parms['ItemId']);
        if ($rdcresult['status']['response'] == 'false' || $rdcresult['data']['ResponseCode'] != '00') {
            $e = ($rdcresult['status']['response'] == 'false' ? 'digi Get History Item call failed' :
                    "GetHistoryItem - " . $rdcresult['data']['ResponseCode'] . ' ' . $rdcresult['data']['ErrorResponseText'] . ' ' . $rdcresult['data']['LocalizedMessageText']);
            throw new Exception($e, 305);
        }
        $return['status']['message'] = 'digi GetHistoryItem OK';
        $vendorinfo = $depo['vendorinfo'];
        $vendorinfo['Vendortime'] = mktime();
        $parms['vendorinfo'] = $vendorinfo;

        # update curdcstatus record
        $depostat = curdc_setvinfo($dbh, array('Cu' => $parms['Cu'], 'depositid' => $parms['depositid'],
            'vendorinfo' => json_encode($parms['vendorinfo'])));
        if ($depostat['status']['response'] == 'false') {
            # error send fail
            throw new Exception($depostat['status']['message'], $depostat['status']['code']);
        }
        $return['data'] = $rdcresult['data'];
    } catch (Exception $e) {
        $return['status']['response'] = 'false';
        $return['status']['code'] = $e->getCode();
        $return['status']['message'] = "(" . $e->getLine() . ") " . htmlspecialchars($e->getMessage(), ENT_QUOTES, 'UTF-8', FALSE);
    }
    return $return;
}

function RDCdeposit($dbh, $parms) {
# requires: $parms['Cu']
#       $parms['depositid']
#       $parms['amount']
#       $parms['acctid']
#       $parms['rdcacctid']
# Additional values retrieved and decoded from cutrusteddetail
# or from curdcstatus record using depositid as key
# returns:
    # assume we are going to succeed...
    $return['status']['response'] = 'true';
    $return['status']['message'] = 'Success';
    $return['status']['code'] = '000';
    try {
        if (!isset($parms['Cu']) || !isset($parms['depositid']) ||
            !isset($parms['amount']) || !isset($parms['acctid'])) {
//                !isset($parms['rdcacctid'])) {
            throw new Exception('Missing Parameters', 100);
        }
        /*
         * need to use $parms['acctid'] to retrieve info about receiving account
         * get from vendorinfo['accounts'] stored in deposit record, as that includes
         * vendor-returned info
         */

        # look up depositid
        $depo = curdc_read($dbh, $parms);
        if ($depo['status']['response'] == 'false') {
            throw new Exception('HomeCU DepositID not found', 205);
        }
        $fail = '';
        switch ($depo['data']['status']) {
            case 'T':
                $fail = 'Must accept terms of use before depositing funds';
                break;
            case 'R':
                $fail = 'Deposit has been rejected';
                break;
            case 'C':
                $fail = 'Deposit already completed';
                break;
            case 'B':
            case 'F':
                if (!isset($parms['POSTAWAY'])) {
                    $fail = 'Deposit requires override confirmation';
                }
                break;
        }
        if ("$fail" != '') {
            throw new Exception($fail, 229);
        }
        if (is_null($depo['data']['frontpath']) || is_null($depo['data']['backpath']) || !getimagesize($depo['data']['frontpath']) || !getimagesize($depo['data']['backpath'])) {
            throw new Exception('Check Images not found', 220);
        }
        $vendorinfo = $depo['data']['vendorinfo'];

        // Store amount, selected account in curdcstatus table
        $depostat = curdc_update($dbh, array('Cu' => $parms['Cu'], 'depositid' => $parms['depositid'],
            'amount' => $parms['amount'], 'acctid' => $parms['acctid']));
        if ($depostat['status']['response'] == 'false') {
            throw new Exception('HomeCU Update Deposit Amount Failed', 225);
        }

        $acctid = $parms['acctid'];
        $hculist = RDCGetAccts($dbh, $parms, $acctid);

//        LogToFile(__LINE__, 'HCULIST', $hculist);
//        LogToFile(__LINE__, 'VENDOR', $vendorinfo);
    # call as LogToFile( __LINE__ ,"Title",$array_to_print);

        if ($hculist['status']['response'] !== 'true') {
            throw new Exception('Invalid Deposit Account', 230);
        }
//    Ignore scan limit here - defer to client configuration at CheckReview
//        $scanlimit = $vendorinfo['scanlimit'];
//        if (!is_null($scanlimit) && $scanlimit < ($parms['amount'] * .01)) {
//            throw new Exception("Deposit Amount Exceeds Deposit Limit (" .
//            sprintf('%.2f', $scanlimit) . ")", 231);
//        }
        $parms['dgUserId'] = $vendorinfo['dgUserId'];
        $parms['dgUserName'] = $vendorinfo['dgUserName'];
        $parms['AccountNumber'] = $vendorinfo['accounts'][$acctid]['suffix'];
        $parms['RDCName'] = $vendorinfo['accounts'][$acctid]['RDCName'];
        # set default AccountType, then override if configured
        $parms['AccountType'] = $vendorinfo['accounts'][$acctid]['rdctype'];
        $parms['CheckFront'] = file_get_contents($depo['data']['frontpath']);
        $parms['CheckBack'] = file_get_contents($depo['data']['backpath']);
        $rdcresult = digiPostItem($parms);
        if ($rdcresult['status']['code'] != '000' && $rdcresult['status']['code'] != '400') {
            throw new Exception("PostItem failed {$rdcresult['status']['message']}", $rdcresult['status']['code']);
        }
//        {"BatchID":null,"ItemID":null,"WasSuccessful":false,"ErrorMessage":"Cannot read acct. data on bottom of check. Please retake. Ensure focus and all four corners visible."}
        # check return values for error
        if ($rdcresult['data']['Message'] !== 'Success') {
            $parms['rdcstatus'] = 'R';
            $vendorinfo['Vendortime'] = mktime();
            $vendorinfo['DepositStatus'] = "Failed";
            $vendorinfo['Message'] = $rdcresult['status']['message'];
            $vendorinfo['Review'] = $rdcresult['data']['Transaction']['Status'];
            $vendorinfo['DepositTime'] = date('YmdHis');
            $depostat = curdc_setvinfo($dbh, array('Cu' => $parms['Cu'], 'depositid' => $parms['depositid'],
                'rdcstatus' => $parms['rdcstatus'], 'vendorinfo' => json_encode($vendorinfo)));
            if ($depostat['status']['response'] == 'false') {
                throw new Exception('HomeCU Update Vendorinfo Failed', 240);
            }
            throw new Exception($rdcresult['status']['message'] . ' Deposit Cannot be processed as submitted', 241);
        } else {
            $parms['rdcstatus'] = 'C';
            $vendorinfo['Vendortime'] = $rdcresult['data']['Transaction']['SubmissionDate'];
            $vendorinfo['DepositStatus'] = $rdcresult['data']['Transaction']['Status'];
            $vendorinfo['Message'] = $rdcresult['status']['message'];
            $vendorinfo['Review'] = $rdcresult['data']['Transaction']['Status'];
            $vendorinfo['TransactionReceiptNumber'] = $rdcresult['data']['Transaction']['TransactionId'];
            $vendorinfo['TransactionDateTime'] = $rdcresult['data']['Transaction']['SubmissionDate'];
//                    $vendorinfo['raw']=$rdcresult['data']['raw'];
            $depostat = curdc_setvinfo($dbh, array('Cu' => $parms['Cu'], 'depositid' => $parms['depositid'], 'frontaccept' => 'Y',
                'backaccept' => 'Y', 'rdcstatus' => $parms['rdcstatus'], 'vendorinfo' => json_encode($vendorinfo)));
            if ($depostat['status']['response'] == 'false') {
                throw new Exception('HomeCU Update Vendorinfo Failed', 240);
            }
            $return['status']['response'] = 'true';
            $return['status']['message'] = 'Digiliti Deposit Complete';
            # this returns everything from Ensenta, but that will be a problem if we add other vendors
            # pick a list of stuff to return and be consistent for everyone?
            $return['data'] = $rdcresult['data'];
            $return['data']['depositid'] = $parms['depositid'];
            $return['data']['rdcstatus'] = $parms['rdcstatus'];
            # use the Ensenta names for values the apps look for --
            $return['data']['TransactionReceiptNumber'] = $rdcresult['data']['Transaction']['TransactionId'];
            $return['data']['TransactionDateTime'] = $rdcresult['data']['Transaction']['SubmissionDate'];
            $return['data']['MaskedAccountholderNumber'] = $vendorinfo['accounts'][$acctid]['suffix'];

            $hcumessage = "Your deposit request for account {$vendorinfo['accounts'][$acctid]['suffix']} has been received";
            if ($rdcresult['data']['Transaction']['Status'] == 'NeedsReview') {
                $hcumessage .= " pending review";
            }
            $hcumessage .= ". Your confirmation number is '{$rdcresult['data']['Transaction']['TransactionId']}_HCU_{$parms['depositid']}'. ";
            $hcumessage .= "Please save this number and refer to it if you need to contact the credit union regarding this transaction. ";

            $return['data']['HCUReceiptMessage'] = $hcumessage;
        }
    } catch (Exception $e) {
        $return['status']['response'] = 'false';
        $return['status']['code'] = $e->getCode();
        $return['status']['message'] = "(" . $e->getLine() . ") " . htmlspecialchars($e->getMessage(), ENT_QUOTES, 'UTF-8', FALSE);
    }

    return $return;
}

function RDCGetAccts($dbh, $parms, $Acctid = "") {
    try {
    $AcctList = array();
    if (!HCU_array_key_value('Cu', $parms) || !HCU_array_key_value('Uid', $parms) || !HCU_array_key_value('MBRACCT', $parms) ) {
        throw new Exception('Missing RDC Account Parameters', 910);
    }

    $Cu = HCU_array_key_value('Cu', $parms);
    $Uid = HCU_array_key_value('Uid', $parms);
    $balwhere = HCU_array_key_value('balwhere', $parms);
    $Fset2 = HCU_array_key_value('Fset2', $parms);
    $Fset3 = HCU_array_key_value('Fset3', $parms);
    $lnwhere = HCU_array_key_value('lnwhere', $parms);
    $MBRACCT = HCU_array_key_value('MBRACCT', $parms);

# digiliti can support loans - add 'LN' => 1 to the rtxn array
    $rtxn = ( sizeof($parms['rtxn']) == 0 ?
            array('AT' => 1) :
            json_decode(HCU_array_key_value('rtxn', $parms), TRUE) );
    $savingsql = (!HCU_array_key_value('savingsql', $parms) ?
            "trim(accounttype)" :
            HCU_array_key_value('savingsql', $parms) );
    $draftsql = (!HCU_array_key_value('draftsql', $parms) ?
            "trim(accounttype)" :
            HCU_array_key_value('draftsql', $parms) );
    $mbrsql = (!HCU_array_key_value('mbrsql', $parms) ?
            "trim(accountnumber)" :
            HCU_array_key_value('mbrsql', $parms) );

# fetch transactions types

    $sql = "select ht.trancode, trim(t.trandesc), trim(ht.cudesc), t.specialproc
               from cutrans t, cuhavetrans ht
              where ht.cu='$Cu'
              and ht.trancode = t.trancode\n";

    $sth = db_query($sql, $dbh);
    #
    #  Return a line for each allowed transaction type.
    #
  $txncodes = array();
    for ($row = 0; list($code, $desc, $cudesc, $spec) = db_fetch_array($sth, $row); $row++) {
        $txncodes{$code} = array($desc, $spec, $cudesc);
    }
    db_free_result($sth);

    $sql = "";
    $verb = "";

    $sv_rdcname = (!HCU_array_key_value('Sv_rdcname', $parms) ? 'Savings' : $parms['Sv_rdcname']);
    $ck_rdcname = (!HCU_array_key_value('Ck_rdcname', $parms) ? 'Checking' : $parms['Ck_rdcname']);
    $sv_rdctype = (!HCU_array_key_value('Sv_rdctype', $parms) ? '2' : $parms['Sv_rdctype']);
    $ck_rdctype = (!HCU_array_key_value('Ck_rdctype', $parms) ? '1' : $parms['Ck_rdctype']);
    # code was trying to:
    # if the rdctype is all digits, leave it plain else wrap in single quotes for Postgres
//    $sv_rdctype = (str_word_count($sv_rdctype, 0, '0123456789') > 1 ? $sv_rdctype : "'$sv_rdctype'");
//    $ck_rdctype = (str_word_count($ck_rdctype, 0, '0123456789') > 1 ? $ck_rdctype : "'$ck_rdctype'");
    # but didn't work as expected. Worked better to just quote the *_rdctype
    # whether it was digits or string.
# and that appears to work for Checking / Savings... but what about the client that had 'MoneyMarket'?
# hmmm... Ignoring for now as can't find the client that needed it

# find out how many valid accounts the member has:
$sql = "WITH accountlist as (
    SELECT ab.accountnumber,
            ua.display_name,
            description,
            ua.accounttype as accounttype,
            ua.certnumber as certnumber,
            ua.recordtype,
            ua.view_balances,
            ua.view_transactions,
            ab.deposittype,
            'DP' as cbtype, amount as currentbalance,
            ua.display_order,
            trim(ab.micraccount) as micraccount
            FROM {$Cu}useraccounts as ua
            INNER JOIN {$Cu}accountbalance as ab ON ab.accountnumber = ua.accountnumber
              AND ab.accounttype = ua.accounttype
              AND ua.certnumber = ua.certnumber
            WHERE ua.user_id = $Uid
              AND ua.accountnumber = '{$MBRACCT}'
              AND ua.recordtype = 'D'
              AND ab.may_deposit = true ) ";

    if (HCU_array_key_exists('AT',$txncodes) && HCU_array_key_exists('AT',$rtxn)) {
# $txncodes is configured list @HCU - $rtxn is allowed list for RDC
# Digiliti supports AT only, no LP

        $sql .= "SELECT recordtype as tbl,
                    $mbrsql as rdcmember, trim(description) as description,
                    trim(display_name) as display_name,
                    trim(accounttype) as accounttype, $savingsql as suffix,
                    certnumber as certnumber, '$sv_rdctype' as rdctype,
                    '$sv_rdcname' as rdcdesc,
                   display_order, trim(accountnumber) as accountnumber
                    FROM accountlist
                    WHERE recordtype = 'D' $balwhere
                    AND upper(deposittype) in ('S','N')
            UNION
                    SELECT recordtype, $mbrsql as rdcmember,
                    trim(description), trim(display_name),
                    trim(accounttype), $draftsql,
                    certnumber, '$ck_rdctype',
                    '$ck_rdcname',
                    display_order,
                    trim(accountnumber)
                    FROM accountlist
                    WHERE recordtype = 'D' $balwhere
                    AND upper(deposittype) = 'Y' ";
    }

    $sql .= " order by 6,2,3";
    $acct_rs = db_query($sql, $dbh);

    if (db_num_rows($acct_rs) == 0) {
//        RDC_response('920', array('No Eligible Accounts'), 'ERROR'); # RDCGetAccts no valid accounts
//        $AcctList['sql'] = $sql;
        throw new Exception("No Eligible RDC Accounts", 920);
    } else {

        for ($row = 0; $drow = db_fetch_array($acct_rs, $row); $row++) {
            $tbl = $drow['tbl'];
            $accounttype = $drow['accounttype'];
            $suffix = $drow['suffix'];
            $cert = $drow['certnumber'];
            $rdctype = $drow['rdctype'];
            $rdcdesc = $drow['rdcdesc'];
            $rdcmember = $drow['rdcmember'];
            if (strpos($accounttype, "@")) {
                list($jtype,$jacct) = explode("@",$accounttype);
                $trust = 'joint';
            } else {
                $jtype=$accounttype;
                $jacct=$MBRACCT;
                $trust = 'primary';
            }
            $tokn = sha1("{$Uid}{$accounttype}{$Cu}{$rdctype}obl1vi0u5");

            $desc = getAccountDescription($dbh, $Cu, $drow['accountnumber'], $drow['description'], $drow['accounttype'], $drow['display_name'], $Fset3, $drow['certnumber'], false, false);
            $desc = htmlspecialchars($desc, ENT_QUOTES,'UTF-8',FALSE);
            $displaydesc = $desc;

            $Accts["$tbl|$jacct|$jtype|$cert"]['accounttype'] = $accounttype;
            $Accts["$tbl|$jacct|$jtype|$cert"]['suffix'] = $suffix;
            $Accts["$tbl|$jacct|$jtype|$cert"]['certnumber'] = $cert;
            $Accts["$tbl|$jacct|$jtype|$cert"]['acctclass'] = $tbl;
            $Accts["$tbl|$jacct|$jtype|$cert"]['description'] = $desc;
            $Accts["$tbl|$jacct|$jtype|$cert"]['tokn'] = "$tokn";
            $Accts["$tbl|$jacct|$jtype|$cert"]['Uid'] = "$Uid";
            $Accts["$tbl|$jacct|$jtype|$cert"]['trust'] = "$trust";
            $Accts["$tbl|$jacct|$jtype|$cert"]['displaydesc'] = "$displaydesc";
            $Accts["$tbl|$jacct|$jtype|$cert"]['rdctype'] = $rdctype;
            $Accts["$tbl|$jacct|$jtype|$cert"]['rdcdesc'] = $rdcdesc;
            $Accts["$tbl|$jacct|$jtype|$cert"]['rdcmember'] = $rdcmember;
        }
    }
    $AcctList['status']['response'] = 'true';
    $AcctList['status']['code'] = '000';
    $AcctList['status']['message'] = 'Success';

    if (!empty($Acctid)) {
        # got an account identifier - return one only
        if (!HCU_array_key_exists($Acctid, $Accts)) {
            throw new Exception("Specified Account Not Found", 920);
        }
        $AcctList['data'][$Acctid]=$Accts[$Acctid];
    } else {
        $AcctList['data']=$Accts;
//        $AcctList['sql'] = $sql;
    }
    } catch (Exception $e) {
        $AcctList['status']['response'] = 'false';
        $AcctList['status']['code'] = $e->getCode();
        $AcctList['status']['message'] = "(" . $e->getLine() . ") " . htmlspecialchars($e->getMessage(), ENT_QUOTES, 'UTF-8', FALSE);
    }
    return ($AcctList);
}

/**
 *
 * @param array $parms
 * @param array $dglist
 *          digiStartSession result, includes user profile & account list
 *          account list includes hcu account identifier
 * @param type $rdcterms
 *          terms of use i(if any) served up from HomeCU
 * @return array
 *  ['data']['accounts'] list of valid accounts
 * each entry looks like this:
 *                    ['D|666665|50|0'] => Array
  (
  ['suffix'] => 50
  ['certnumber'] => 0
  ['acctclass'] => D
  ['description'] => REGULAR SHARES - 50
  ['tokn'] => a9a525ac33035b7c3845809443c5eed626297e0f
  ['member'] => 666665
  ['tomember'] => 666665
  ['trust'] => primary
  ['displaydesc'] => REGULAR SHARES - 50
  ['rdctype'] => 0
  ['rdcdesc'] =>
 *  RDCAcctId is identifier returned from Digiliti
  ['RDCAcctId'] => 1
  )
 * Note that for Digiliti we get a list of accounts from HomeCU and a list from
 * Digiliti, then syncronize (digiSyncAcctList) to get a current list
 *
 *  ['data']['terms'] terms of use (if any).  HomeCU serves terms for Digiliti
 *  ['data'] array also contains any values returned from rdc vendor on
 *              start session call.  For Digiliti, this is the dgUserId
 *  and the deposit limits from digiGetUserProfile
 *
 */
function RDCPresentAccounts($parms, $dglist, $rdcterms) {
    # build array list to send to app
    # include depositid
    # include terms to be accepted if they are provided
    # include labels acctttl, descttl
    # $dglist['data']['Accounts'] is Digiliti list
    # $parms['HCUAccounts'] is RDCGetAccts list

        $hc_keys = array();
        foreach ($parms['HCUAccounts'] as $hcaKey => $hcaAccount) {
            $key = $hcaAccount['suffix'];
            $hc_keys[$key] = $hcaKey;
        }


    $pass_along['data']['dgUserId'] = $dglist['data']['dgUserId'];
    $pass_along['data']['dgUserName'] = $dglist['data']['dgUserName'];
    $pass_along['data']['accounts'] = array();
    foreach($dglist['data']['Accounts'] as $key => $dgacct) {
        $hcuTag = HCU_array_key_value($dgacct['AccountNumber'],$hc_keys);
        # check for not empty($hcuTag) before using it in HCU_array_key_exists below
        if (!empty($hcuTag) && $dgacct['Status'] == 'Active' &&
            HCU_array_key_exists($hcuTag, $parms['HCUAccounts'])) {
//               $parms['HCUAccounts'][$hcuTag]['RDCAcctId'] = $dgacct['Id'];
//               $parms['HCUAccounts'][$hcuTag]['RDCName'] = $dgacct['AccountName'];
            # plop these right into the pass_along, so only include active digi accounts
            # that have a corresponding HCU account
               $pass_along['data']['accounts'][$hcuTag] = $parms['HCUAccounts'][$hcuTag];
               $pass_along['data']['accounts'][$hcuTag]['RDCAcctId'] = $dgacct['Id'];
               $pass_along['data']['accounts'][$hcuTag]['RDCName'] = $dgacct['AccountName'];
            }
    }
//    $pass_along['data']['accounts'] = $parms['HCUAccounts'];

    if (sizeof($rdcterms) > 0) {
        $pass_along['data']['terms'] = $rdcterms['data']['terms'];
    }
    $pass_along['status']['response'] = 'true';
    $pass_along['status']['code'] = '000';
    $pass_along['status']['message'] = 'Success';
    return $pass_along;
}

function digiGetUserDetail($parms, $dgUserId) {

    try {
        if (!isset($parms['dgMgmtURL']) ||
            !isset($parms['dgUser']) ||
            !isset($parms['dgPass']) ||
            !isset($dgUserId)) {
            throw new Exception("Missing Parameters", 100);
        }

        $reqHeaders = array("Authorization: Basic " . base64_encode("{$parms['dgUser']}:{$parms['dgPass']}"));
        $reqURL = "{$parms['dgMgmtURL']}/users/$dgUserId";
        $parms["environment"]["logPoint"] = "dgGetUserDetail";   // this action in a readable form
        $dgSaid = digiEmbcurl($parms, $reqURL, 'GET', $reqHeaders, '');

        # look for errors, otherwise decode and save the token
        if ($dgSaid['error'] != 0) {
            # look for errors, otherwise decode and save the token
            throw new Exception("{$dgSaid['message']}", $dgSaid['error']);
        }
        $return['status']['response'] = 'true';
        $return['status']['code'] = '000';
        $return['status']['message'] = 'Success';
        $return['data'] = $dgSaid['data']['User'];
    } catch (Exception $e) {
        $return['status']['response'] = 'false';
        $return['status']['message'] = $e->getMessage();
        $return['status']['code'] = $e->getCode();
        $return['data'] = array();
    }

    return $return;
}

function digiSearchUser($parms) {
// Search Users
//GET /users?UserName={Cn, min len 4}
//Gets member information about the user. Use UserId returned to read full member info
//but the UserName is always searched as 'starts with', so might be multiples
//loop through the list and find an exact match on Cn
//
# uses: $parms['dgUser'] digiliti UserID
#       $parms['dgPass'] digiliti password
#       $parms['MBRACCT'] selected homebanking user account number
#       $parms['dgMgmtURL'] external services user mgmt URL
#
    try {
        if (!isset($parms['dgMgmtURL']) ||
            !isset($parms['dgUser']) ||
            !isset($parms['dgPass']) ||
            !isset($parms['searchuser'])) {
            throw new Exception("Missing Parameters", 100);
        }
        $reqHeaders = array("Authorization: Basic " . base64_encode("{$parms['dgUser']}:{$parms['dgPass']}"));
        $reqURL = "{$parms['dgMgmtURL']}/users?UserName={$parms['searchuser']}";
        $parms["environment"]["logPoint"] = "dgSearchUser";   // this action in a readable form
        $dgSaid = digiEmbcurl($parms, $reqURL, 'GET', $reqHeaders, '');
//{"Users":[{"UserId":9,"IsActiveUser":false,"FirstName":"Test","LastName":"User","PhoneNumber":"2085551212","PhoneIdentifier":null,"PhoneType":null,"AddressLine1":null,"AddressLine2":null,"City":null,"State":null,"Zip":null,"UserName":"666665","Email":"miki@homecu.com","MobileDataAutoremoveTime":30,"Password":null,"DateofBirth":null,"TaxIdentifier":null,"KnownCustomerScore":null,"OrgName":null,"HomePhoneNumber":null,"Accounts":[{"Id":0,"IsDefault":false,"AccountName":null,"AccountNumber":"T123","RoutingNumber":null,"BankName":null,"IsActive":null,"Status":null,"AccountTypeId":0,"AccountTypeName":null}]}],"StatusCode":0,"Message":"Success"}
# NOTE digiEmbcurl does a json_decode on the returned data - by the time we get here it is an array
        if ($dgSaid['error'] != 0) {
            # look for errors, otherwise decode and save the token
            throw new Exception("{$dgSaid['message']}", $dgSaid['error']);
        }
        $found = 0;
        if (!is_array($dgSaid['data']['Users'])) {
            throw new Exception("Invalid Search User Response", 999);
        } else {
            foreach ($dgSaid['data']['Users'] as $ukey => $uarray) {
                if ($uarray['UserName'] === $parms['searchuser']) {
                    $return['data'] = $uarray;
                    $found = 1;
                    break;
                }
            }
        }
        if ($found == 0) {
            throw new Exception("Member not found", 404);
        }

        $return['status']['response'] = 'true';
        $return['status']['message'] = 'Success';
        $return['status']['code'] = '000';
    } catch (Exception $e) {
        $return['status']['response'] = 'false';
        $return['status']['message'] = $e->getMessage();
        $return['status']['code'] = $e->getCode();
        $return['data'] = array();
    }
    return $return;
}

function digiAddNewUser($parms, $dgAccounts) {
    # Add a user and account to dg system, or associates an additional account to an existing user
    try {
        if (!isset($parms['dgMgmtURL']) ||
            !isset($parms['dgUser']) ||
            !isset($parms['dgPass']) ||
            !isset($parms['MIR']) ||
            !is_array($dgAccounts) ||
            !isset($parms['searchuser'])) {
            throw new Exception("Missing Parameters", 100);
        }
        $reqHeaders = array("Authorization: Basic " . base64_encode("{$parms['dgUser']}:{$parms['dgPass']}"), "Content-Type: application/json");
        $reqURL = "{$parms['dgMgmtURL']}/users";
        # boolval($parms['defaultDGUserStat']) not available prior to php 5.5
        # so have to fake it out
        $setStat = (HCU_array_key_value('defaultDGUserStat',$parms) ? TRUE : FALSE );
        $reqData = array(
            "IsActiveUser" => $setStat,
            "FirstName" => $parms['MIR']['firstname'],
            "LastName" => $parms['MIR']['lastname'],
            "PhoneNumber" => $parms['MIR']['phone'],
            "UserName" => $parms['searchuser'],
            "Email" => urldecode($parms['MIR']['email']),
            "Password" => $parms['PhonePass']);
        $reqData['Accounts'] = $dgAccounts;

        $reqData = json_encode($reqData);

        $parms["environment"]["logPoint"] = "dgAddNewUser";   // this action in a readable form
        $dgSaid = digiEmbcurl($parms, $reqURL, 'POST', $reqHeaders, $reqData);
        if ($dgSaid['error'] != 0) {
            # look for errors, otherwise decode and save the token
            throw new Exception("{$dgSaid['message']}", $dgSaid['error']);
        }
        $found = 0;
        if (!is_array($dgSaid['data']['User'])) {
            throw new Exception("Invalid Add User Response", 999);
        } else {
            $return['data'] = $dgSaid['data']['User'];
            $found = 1;
        }
        if ($found == 0) {
            throw new Exception("Member not added", 404);
        }

        $return['status']['code'] = '000';
        $return['status']['response'] = 'true';
        $return['status']['message'] = 'Success';
    } catch (Exception $e) {
        $return['status']['response'] = 'false';
        $return['status']['message'] = $e->getMessage();
        $return['status']['code'] = $e->getCode();
        $return['data'] = array();
    }
    return $return;
}

/*
 * $parms is from trusted detail rec and other
 * settings collected from HomeCU
 * $dgData is returned from previous call to
 * Digiliti GetUserDetail method
 *
 */

function digiUpdateUser($parms, $dgData) {

    # Updates user information in the dg system
    try {
        if (!isset($parms['dgMgmtURL']) ||
            !isset($parms['dgUser']) ||
            !isset($parms['dgPass']) ||
            !isset($parms['MIR']) ||
            !is_array($dgData['data']) || !isset($dgData['data']['UserId'])) {
            throw new Exception("Missing Parameters", 100);
        }
        $needUpd = 0; # start out thinking we are current with Digiliti

        if ($dgData['data']['Email'] != urldecode($parms['MIR']['email'])) {
            $needUpd = 1;
            $dgData['data']['Email'] = urldecode($parms['MIR']['email']);
        }
        $reqHeaders = array("Authorization: Basic " . base64_encode("{$parms['dgUser']}:{$parms['dgPass']}"), "Content-Type: application/json");
        $reqURL = "{$parms['dgMgmtURL']}/users";
# can't ignore the IsActiveUser - leaving it out sets inactive.  Try to maintain current status?

        # this is updating user info based on MIR packet -- which for BATCH is dummy data
        # this is update - not add - so use the values in dgData (from digiGetUserDetail) instead
        $reqData = array(
            "UserId" => $dgData['data']['UserId'],
            "IsActiveUser" => TRUE,
            "FirstName" => $dgData['data']['FirstName'],
            "LastName" => $dgData['data']['LastName'],
            "PhoneNumber" => $dgData['data']['PhoneNumber'],
            "UserName" => $parms['searchuser'],
            "Email" => $dgData['data']['Email'],
            "Password" => $parms['PhonePass']);
        $reqData['Accounts'] = $dgData['data']['Accounts'];
        $reqData = json_encode($reqData);

        $parms["environment"]["logPoint"] = "dgUpdMobileUser";   // this action in a readable form
        $dgSaid = digiEmbcurl($parms, $reqURL, 'PUT', $reqHeaders, $reqData);
        if ($dgSaid['error'] != 0) {
            # look for errors, otherwise decode and save the token
            throw new Exception("{$dgSaid['message']}", $dgSaid['error']);
        }
        $return['status']['response'] = 'true';
        $return['status']['message'] = 'Success';
        $return['status']['code'] = '000';
//        $GLOBALS['HB_ENV']["SYSENV"]["logger"]->info( "dgResponse " . print_r($dgSaid,true));
        $return['data'] = $dgSaid['data']['User'];
    } catch (Exception $e) {
        $return['status']['response'] = 'false';
        $return['status']['message'] = $e->getMessage();
        $return['status']['code'] = $e->getCode();
        $return['data'] = array();
    }
    return $return;
}

function digiSearchTransactions($parms) {
// Search Transactions
//GET /transactions?username={Cn, min len 4}
//Gets transaction history for the user. Use TransactionId returned to read full txn info
//
//but for search user, the UserName is always searched as 'starts with', so might be multiples
// assume this one works the same way, loop through the list and return only those with
// an exact match on Cn
//
# uses: $parms['dgUser'] digiliti UserID
#       $parms['dgPass'] digiliti password
#       $parms['MBRACCT']     selected homebanking user account number
#       $parms['dgMgmtURL'] external services user mgmt URL
#
    try {
        if (!isset($parms['dgMgmtURL']) ||
            !isset($parms['dgUser']) ||
            !isset($parms['dgPass']) ||
            !isset($parms['searchuser'])) {
            throw new Exception("Missing Parameters", 100);
        }
        $reqHeaders = array("Authorization: Basic " . base64_encode("{$parms['dgUser']}:{$parms['dgPass']}"));
        $reqURL = "{$parms['dgMgmtURL']}/transactions?username={$parms['searchuser']}";
        $parms["environment"]["logPoint"] = "dgSearchTxns";   // this action in a readable form
        $dgSaid = digiEmbcurl($parms, $reqURL, 'GET', $reqHeaders, '');
# NOTE digiEmbcurl does a json_decode on the returned data - by the time we get here it is an array
        if ($dgSaid['error'] != 0) {
            # look for errors, otherwise decode and save the token
            throw new Exception("{$dgSaid['message']}", $dgSaid['error']);
        }
        $found = 0;
        if (!is_array($dgSaid['data']['Transactions'])) {
            throw new Exception("Invalid Search Transactions Response", 999);
        } else {
            foreach ($dgSaid['data']['Transactions'] as $ukey => $uarray) {
                if ($uarray['UserName'] === $parms['searchuser']) {
                    $return['data']['Transactions'][] = $uarray;
                    $found++;
                }
            }
        }
        if ($found == 0) {
            throw new Exception("No Transactions found", 404);
        }

        $return['status']['response'] = 'true';
        $return['status']['message'] = 'Success';
        $return['status']['code'] = '000';
    } catch (Exception $e) {
        $return['status']['response'] = 'false';
        $return['status']['message'] = $e->getMessage();
        $return['status']['code'] = $e->getCode();
        $return['data'] = array();
    }
    return $return;
}

function digiGetHistoryItem($parms, $dgTxnId) {
//GET /v1/CreditUnions/{creditUnionId}/Licenses/{licenseKey}/MobileUsers/{userId}/Items
//Gets the deposit history for a user in a credit union

    try {
        if (!isset($parms['dgMgmtURL']) ||
            !isset($parms['dgUser']) ||
            !isset($parms['dgPass']) ||
            !isset($dgTxnId)) {
            throw new Exception("Missing Parameters", 100);
        }

        $reqHeaders = array("Authorization: Basic " . base64_encode("{$parms['dgUser']}:{$parms['dgPass']}"));
        $reqURL = "{$parms['dgMgmtURL']}/transactions/{$dgTxnId}";

        # look for errors, otherwise decode and save the token

        $parms["environment"]["logPoint"] = "dgGetHistoryDetail";   // this action in a readable form
        $dgSaid = digiEmbcurl($parms, $reqURL, 'GET', $reqHeaders, '');
        if ($dgSaid['error'] != 0) {
            # look for errors, otherwise decode and save the token
            throw new Exception("{$dgSaid['message']}", $dgSaid['error']);
        }
        $return['status']['response'] = 'true';
        $return['status']['message'] = 'Success';
        $return['data'] = $dgSaid['data'];
    } catch (Exception $e) {
        $return['status']['response'] = 'false';
        $return['status']['message'] = $e->getMessage();
        $return['status']['code'] = $e->getCode();
        $return['data'] = array();
    }
    return $return;
}

function digiPostItem($parms) {
# Deposts a mobile item in a new batch and immediately submits that batch.
# If the item was unable to be processed, the item and batch are rejected
#
#       $parms['dgMgmtURL']
#       $parms['certfile']
#       $parms['SessionStateId']
#       $parms['amount']
    # $parms['RDCName'] is the selected Digiliti account name
    # $parms['RDCAcctId'] is the selected Digiliti account id

    try {
/*
 * this line logs the parms array minus the check images
 *       LogToFile(__LINE__, 'PARMS', array_diff_key($parms,array('CheckFront' => 'drop', 'CheckBack' => 'drop')));
 */

//        LogToFile(__LINE__, 'PARMS', array_diff_key($parms,array('CheckFront' => 'drop', 'CheckBack' => 'drop')));
        if (!isset($parms['dgMgmtURL']) ||
            !isset($parms['dgUser']) ||
            !isset($parms['dgPass']) ||
            !isset($parms['depositid']) ||
            !isset($parms['dgUserName']) ||
            !isset($parms['RDCName']) ||
            !isset($parms['CheckFront']) || !isset($parms['CheckBack']) ||
            !isset($parms['amount'])) {
            throw new Exception("Missing Parameters", 100);
        }

        $deposittime = date('c');

        $reqBound = 'CFSDepositService';
        $eol = "\r\n";
        $boundaryStringLine = "{$eol}--{$reqBound}{$eol}";
        $lastBoundaryStringLine = "{$eol}--{$reqBound}--{$eol}";
        $reqHeaders = array("Authorization: Basic " . base64_encode("{$parms['dgUser']}:{$parms['dgPass']}"), "Content-Type: multipart/form-data; boundary={$reqBound}");
        $reqURL = "{$parms['dgMgmtURL']}/transactions";
        $reqJSON = array("PhoneUserName" => "{$parms['dgUserName']}",
            "AccountNickName" => $parms['RDCName'],
            "PartnerTransactionId" => $parms['depositid'],
            "AmountInCents" => intval($parms['amount'])
                );
        $reqJSON = json_encode($reqJSON);

        $reqData = "{$boundaryStringLine}Content-Disposition: form-data; name=\"Json\"{$eol}Content type: application/json{$eol}{$eol}";
        $reqData .= "{$reqJSON}{$eol}";
        $reqData .= "{$boundaryStringLine}Content-Disposition: form-data; name=\"frontImage\"; filename=\"front.jpg\"{$eol}Content type: image/jpeg{$eol}{$eol}";
        $reqData .= "{$parms['CheckFront']}{$eol}";
        $reqData .= "{$boundaryStringLine}Content-Disposition: form-data; name=\"rearImage\"; filename=\"rear.jpg\"{$eol}Content type: image/jpeg{$eol}{$eol}";
        $reqData .= "{$parms['CheckBack']}{$eol}";
        $reqData .= "{$lastBoundaryStringLine}";

        $parms["environment"]["logPoint"] = "dgPostItem";   // this action in a readable form

//        LogToFile(__LINE__, 'HDRS', $reqHeaders);
//        LogToFile(__LINE__, 'DATA', $reqData);
    # call as LogToFile( __LINE__ ,"Title",$array_to_print);

        $dgSaid = digiEmbcurl($parms, $reqURL, 'POST', $reqHeaders, $reqData);
        if ($dgSaid['error'] != 0 && $dgSaid['error'] != 400) {
            throw new Exception("{$dgSaid['message']}", $dgSaid['error']);
        } else {
            $return['status']['response'] = 'true';
            $return['status']['message'] = $dgSaid['message'];
            $return['data'] = $dgSaid['data'];
        }
        if ($dgSaid['error'] == 400) {
            # data rejected, but return message
            $return['status']['code'] = $dgSaid['error'];
        } else {
            $return['status']['code'] = '000';
        }
    } catch (Exception $e) {
        $return['status']['response'] = 'false';
        $return['status']['message'] = $e->getMessage();
        $return['status']['code'] = $e->getCode();
        $return['data'] = array();
    }
    return $return;
}

function digiEmbcurl($parms, $reqURL, $reqMethod, $reqHeaders, $reqData = '') {
    # reqURL is the service url, loginUrl for auth
    # reqMethod is yeah, the method
    # reqHeaders is an array of headers to be sent
    #       will include Authorization: oauth token for all calls after the get token

    $curlopts = array(
        CURLOPT_RETURNTRANSFER => 1,
        CURLOPT_SSL_VERIFYPEER => 0,
        CURLOPT_SSL_VERIFYHOST => 0,
        CURLOPT_HEADER => FALSE,
        CURLOPT_URL => "$reqURL");

    $ch = curl_init();

//curl_setopt($ch, CURLOPT_VERBOSE, true);
//$verbose = fopen('/tmp/dgtrace', 'a+');
//fwrite($verbose,"\n{$reqData}\n");
//curl_setopt($ch, CURLOPT_STDERR, $verbose);

    curl_setopt_array($ch, $curlopts);
//    if (count($reqOpts)) {
//        curl_setopt_array($ch, $reqOpts);
//    }
    if ($reqMethod != 'GET') {
        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $reqMethod);
    }
    if (strlen($reqData) > 0) {
        curl_setopt($ch, CURLOPT_POSTFIELDS, $reqData);
    }
    curl_setopt($ch, CURLOPT_HTTPHEADER, $reqHeaders);

    $respERR = '';
    $return = '';
    $response = curl_exec($ch);
    $respHTTP = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    $respCURL = curl_errno($ch);

    if ($respCURL) {
        # Bad! Don't hide the error, return the curl error if it occurred.
        $respERR = "HCUERROR: Connection Failed cURL $respCURL";
        $return = array("error" => "hcuC{$respCURL}", "message" => "$respERR");
    } elseif ($respHTTP > 400 && $respHTTP < 600) {
        # HTTP Response 4xx client error or 5xx server error
        $respArr = json_decode($response, true);
        $respERR = "HCUERROR: Connection Failed HTTP $respHTTP " . $respArr['Message'];
        $return = array("error" => $respHTTP, "message" => "$respERR");
    } elseif (!isset($response) || trim($response) == '' ) {
        if ($respHTTP == 204 || $respHTTP == 200) {
            # HTTP 204 No Content w/o response = 'Everything OK but no data'
            # HTTP 200 OK w/o response = 'Everything OK but no data'
            $return = array("error" => 0, "message" => "No Data");
        } else {
            $return = array("error" => $respHTTP, "message" => "Empty Response");
        }
    } else {
        # response is sometimes JSON array w/Message & StatusCode,
        # sometimes simple list, which might be empty list.
        # For simple list, add success codes instead of throwing error
        $respArr = json_decode($response, TRUE);
        if (is_null($respArr)) {
            $return = array("error" => 990, "message" => "Invalid jSon Response (dgE)");
        } elseif (HCU_array_key_exists('Message', $respArr) &&
            HCU_array_key_value('Message', $respArr) !== 'Success') {
            if ($respHTTP == 400) {
            # HTTP 400 on post requests means data rejected
            # but don't throw error, need the message to bubble up
            # need to set non-zero error code, though, so next level up knows we had a problem
                $return = array("error" => 400, "message" => trim(HCU_array_key_value('StatusCode', $respArr)) . " " . trim(HCU_array_key_value('Message', $respArr)));
            } else {
            $return = array("error" => trim(HCU_array_key_value('StatusCode', $respArr))
                , "message" => HCU_array_key_value('Message', $respArr) . " (dgE)");
            }
        } else {
            $return = array();
            if (HCU_array_key_exists('StatusCode', $respArr)) {
                $return['error'] = trim($respArr['StatusCode']);
            } else {
                $return['error'] = 0;
            }
            if (HCU_array_key_exists('Message', $respArr)) {
                $return['message'] = trim($respArr['Message']);
            } else {
                $return['message'] = 'Success';
            }
            $return['data'] = $respArr;
        }

//############
//        if (is_null($respArr)) {
//            $return = array("error" => 990, "message" => "Invalid jSon Response (dgE)");
//        } elseif (HCU_array_key_value('Message', $respArr) !== 'Success') {
//            $return = array("error" => trim(HCU_array_key_value('StatusCode', $respArr)), "message" =>  HCU_array_key_value('Message', $respArr) . " (dgE)");
//        } else {
//            $return = array("error" => trim(HCU_array_key_value('StatusCode', $respArr)), "message" =>  HCU_array_key_value('Message', $respArr) );
//            $return['data'] = $respArr;
//        }
//################
    }

    if ($parms["logging"] == "enabled") {
        $logParms = $parms["environment"];      // get the environment info passed in
        $logParms["token"] = '';                // the id used across all communications in session
        $logParms["txnId"] = time();               // the id for this transaction
        $logParms["request"] = "curl ";               // the request
        if ($reqMethod != 'GET') {
            $logParms["request"] .= "-X $reqMethod ";
        }
        if (is_array($reqHeaders)) {
            foreach ($reqHeaders as $hdr) {
                $logParms["request"] .= "-H '$hdr' ";
            }
        }
        if (strlen($reqData) > 0) {
            # no need to log the ginormous image data - weed it out
            $logData = $reqData;
            $marker = "Content type: image/jpeg";
            $fAnchor = strpos($logData, $marker);
            if ($fAnchor !== false) {
                $fAnchor += strlen($marker) + 2;
                $endfA = strpos($logData, '--CFSDepositService',$fAnchor) -1;
                $logData = substr_replace($logData, " Image Data ", $fAnchor, $endfA - $fAnchor);
                $rAnchor = strrpos($logData, $marker);
                if ($rAnchor !== false) {
                    $rAnchor += strlen($marker) + 2;
                    $endrA = strpos($logData, '--CFSDepositService',$rAnchor) -1;
                    $logData = substr_replace($logData, " Image Data ", $rAnchor, $endrA - $rAnchor);
                }
            }

//        LogToFile(__LINE__, 'LOGDATA', " fAnchor $fAnchor end $endfA rAnchor $rAnchor end $endrA \n" .  $logData );

            $logParms["request"] .= "-d '$logData' ";               // the request
        }
        $logParms["request"] .= "'$reqURL' ";               // the request
        $logParms["reply"] = $response;            // the response
        if ($respERR > '') {
            $logParms["reply"] .= "\n$respERR";
        }
        $logParms["reply"] .= "\nrespHTTP: $respHTTP \nrespCURL: $respCURL";
        $logParms["reply"] .= "\nrespArr " . print_r($return, true);


        LogSSOActivity($logParms);
    }

    @curl_close($ch);
    return $return;
}

function LogToFile($line, $title, $show) {
    # call as LogToFile( __LINE__ ,"Title",$array_to_print);
    $log = date('Y-m-d H:i:s');
    $tfile = fopen("/tmp/dgLog", "a");
    fwrite($tfile, "+++ $log $line +++++++++++++++\n");
    fwrite($tfile, " $title " . print_r($show, true));
    fwrite($tfile, "\n++++++++++++++++++\n");
    fclose($tfile);
}

function digiGetMir($parms, $HB_ENV) {
    try {
        if (!HCU_array_key_value('MBRACCT', $parms)) {
            throw new Exception("Member Account not specified");
        }
        if (HCU_array_key_value('live', $parms)) {
            $MIR = GetMemberInfo($HB_ENV, array("member" => $parms['MBRACCT']));
        } else {
            # batch interface needs to fake MIR info */
            $MIR["data"] = array(
                'accountnumber' => $parms['MBRACCT'],
                'lastname' => (HCU_array_key_value('defLastName',$parms) ? $parms['defLastName'] : 'Member'),
                'firstname' => (HCU_array_key_value('defFirstName',$parms) ? $parms['defFirstName'] : 'Valued'),
                'email' => urldecode($parms['Ml']),
                'homephone' => '',
                'workphone' => (HCU_array_key_value('defWorkPhone',$parms) ? $parms['defWorkPhone'] : '2085551212'), # pick a better dummy number?
                'cellphone' => '',
                'fax' => '',
                'ssn' => '',
                'address1' => '',
                'address2' => '',
                'city' => '',
                'state' => '',
                'zip' => '',
                'cc' => '',
                'dob' => ''
            );
        }

        /* strip slashes and dashes and non-digits from phone numbers
         * and zip code and tax id; rearrange DOB into mmddyyyy
         */

        $MIR["data"]['phone'] = preg_replace('/\D/', '', HCU_array_key_value('homephone', $MIR["data"]));
        if (trim($MIR["data"]['phone']) == '' || strlen(trim($MIR["data"]['phone'])) !== 10 ) {
            $MIR["data"]['phone'] = preg_replace('/\D/', '', HCU_array_key_value('cellphone', $MIR["data"]));
        }
        if (trim($MIR["data"]['phone']) == '' || strlen(trim($MIR["data"]['phone'])) !== 10 ) {
            $MIR["data"]['phone'] = preg_replace('/\D/', '', HCU_array_key_value('workphone', $MIR["data"]));
        }
        if (trim($MIR["data"]['phone']) == '' || strlen(trim($MIR["data"]['phone'])) !== 10 ) {
            unset($MIR["data"]['phone']);
        }
        date_default_timezone_set('America/Denver');
        if ( HCU_array_key_value('dob', $MIR['data']) && ($st=strtotime($MIR['data']['dob'])) && $st > strtotime('-100 year') && $st < time()) {
            $MIR['data']['dob'] = date($datefmt, $st);
        } else {
            unset($MIR['data']['dob']);
        }

        $rmlist = array(' ', '-');
        $MIR['data']['ssn'] = str_replace($rmlist, '', HCU_array_key_value('ssn', $MIR['data']));
        if (trim($MIR['data']['ssn']) == '') {
            unset($MIR['data']['ssn']);
        }

        $MIR['data']['zip'] = str_replace($rmlist, '', HCU_array_key_value('zip', $MIR['data']));
        if (strlen($MIR['data']['zip']) < 5) {
            unset($MIR['data']['zip']);
        }

        $rmlist = array("#", "&", "/", "%", ",", ":", "=", "?", "'", ";");

        # override MIR email with HCU hb email if it is set, then make sure we have a valid value
        $EMAIL = (HCU_array_key_value('Ml', $parms) ? urldecode(HCU_array_key_value('Ml', $parms)) : HCU_array_key_value('email', $MIR["data"]));
        $EMAIL =  str_replace($rmlist, "", $EMAIL);
        if (trim($EMAIL) != '' && validateEmail($EMAIL) ) {
            $MIR["data"]["email"] = $EMAIL;
        } else {
            unset($MIR["data"]["email"]);
        }
        $MIR["data"]["firstname"] = str_replace($rmlist, "", HCU_array_key_value('firstname', $MIR["data"]));
        $MIR["data"]["middlename"] = str_replace($rmlist, "", HCU_array_key_value('middlename', $MIR["data"]));
        if (trim($MIR["data"]["firstname"]) == '') {
            //    allow empty FirstName (replace with a dot) in case it is a business
            $MIR['data']['firstname'] = '.';
        }
        $MIR["data"]["lastname"] = str_replace($rmlist, "", HCU_array_key_value('lastname', $MIR["data"]));
        if (trim($MIR["data"]["lastname"]) == '') {
            unset($MIR["data"]["lastname"]);
        }
        $MIR["data"]["address1"] = str_replace($rmlist, "", HCU_array_key_value('address1', $MIR["data"]));
        if (trim($MIR["data"]["address1"]) == '') {
            unset($MIR["data"]["address1"]);
        }
        $MIR["data"]["address2"] = str_replace($rmlist, "", HCU_array_key_value('address2', $MIR["data"]));
        $MIR["data"]["city"] = str_replace($rmlist, "", HCU_array_key_value('city', $MIR["data"]));
        if (trim($MIR["data"]["city"]) == '') {
            unset($MIR["data"]["city"]);
        }
        $MIR["data"]["state"] = str_replace($rmlist, "", HCU_array_key_value('state', $MIR["data"]));
        if (trim($MIR["data"]["state"]) == '') {
            unset($MIR["data"]["state"]);
        }
        $MIR["data"]["accountnumber"] = str_replace($rmlist, "", HCU_array_key_value('accountnumber', $MIR["data"]));
        if (trim($MIR["data"]["accountnumber"]) == '') {
            unset($MIR["data"]["accountnumber"]);
        }

        $reqMIR = array(
            'accountnumber' => 1,
            'firstname' => 1,
            'lastname' => 1,
            'email' => 1,
            'phone' => 1
        );
        $missing = array_diff_key($reqMIR, $MIR['data']);
        if (sizeof($missing)) {
            throw new Exception("Incomplete Member Info (" . join(", ", array_keys($missing)) . ")", 999);
        }
        $MIR['status']['response'] = 'true';
        $MIR['status']['message'] = 'Success';
        $MIR['status']['code'] = '000';
    } catch (Exception $e) {
        $MIR['status']['response'] = 'false';
        $MIR['status']['message'] = $e->getMessage();
        $MIR['status']['code'] = $e->getCode();
//        $MIR['data'] = array(); # pass back what we got for debugging
    }
    return $MIR;
}

function digiSyncAcctList($parms, $dgData) {
    # Syncronize the list of accounts from homecu ($parms['HCUAccounts'])
    # with the list returned from Digiliti ($dgData['data']['Accounts'])
    #
    # List of accounts presented to member is intersect of
    # parms['HCUAccounts'] and dgData['data']['Accounts'].
    #
    try {
        if (!is_array($dgData['data']) ||
            !isset($parms['HCUAccounts']) || !is_array($parms['HCUAccounts'])) {
            throw new Exception("Missing Parameters", 100);
        }
        $needUpd = 0; # start out thinking we are current with Digiliti
        $return['status']['response'] = 'true';
        $return['status']['message'] = 'Success';
        $return['status']['code'] = '000';

        # dg_keys is list of AccountNumber values from DIGI list
        # hc_keys is list of calculated suffix values from HCU list
        # (suffix is calculated unique key based on HCU trusted detail config,
        #  and is used to populate AccountNumber on insert)
        $dg_keys = array();
        foreach ($dgData['data']['Accounts'] as $dgaKey => $dgaAccount) {
            $key = $dgaAccount['AccountNumber'];
//            $id = $dgaAccount['Id'];
            $dg_keys[$key] = $dgaKey;
        }
        $hc_keys = array();
        # ignore any rows with empty suffix.
        # If that results in empty list, throw error
        foreach ($parms['HCUAccounts'] as $hcaKey => $hcaAccount) {
            if (!empty(HCU_array_key_value('suffix', $hcaAccount))) {
                $key = $hcaAccount['suffix'];
                $hc_keys[$key] = $hcaKey;
            }
        }
        if (!count($hc_keys) ) {
            throw new Exception("No Valid HCU accounts", 100);
        }

        # inserts gets HCU items with key not in DIGI
        # deletes gets DIGI itmes with key not at HCU
        # updates gets intersect of items with key in both list
        $inserts = array_diff(array_keys($hc_keys), array_keys($dg_keys));
        $deletes = array_diff(array_keys($dg_keys), array_keys($hc_keys));
        $updates = array_intersect(array_keys($hc_keys), array_keys($dg_keys));

        # echo in the return array for logging,
        # turn this off before production
        $return['hc_keys'] = $hc_keys;
        $return['dg_keys'] = $dg_keys;
        $return['inserts'] = $inserts;
        $return['deletes'] = $deletes;
        $return['updates'] = $updates;

        foreach ($inserts as $key => $sfx) {
            $account = $parms['HCUAccounts']["{$hc_keys[$sfx]}"];
                # add new item to $dgData['data']['Accounts']
                $item = array(
                    "Status" => $parms['defaultDGAcctStat'],
                    "AccountName" => $account['description'],
                    "AccountNumber" => $account['suffix']
                );
                # AccountNumber s/b HCU suffix as calculated based on trusted detail config
                # AccountTypeName / AccountTypeId s/b rdcdesc / Ck_rdctype - Sv_rdctype per HCU config
                # AccountName s/b Home Banking shortdesc
                #  configure rdctype as 0 to pass as AccountTypeId, do not pass AccountTypeName
                # for some reason, can't add with AccountTypeName so use AccountTypeId instead
                    $item["AccountTypeId"] = $account['rdctype']; # only include TypeName if TypeId <> 0
                $dgData['data']['Accounts'][] = $item;
                $needUpd++;
            }
        foreach ($deletes as $key => $sfx) {
            # do we care about the deletes?  We are only going to offer the
            # member the accounts that are allowed, maybe we can ignore these?
            if (HCU_array_key_value($sfx, $dg_keys)) {
                $dgaKey = HCU_array_key_value($sfx, $dg_keys);
                # Digiliti does not allow delete, just deactivate it
                if ($dgData['data']['Accounts'][$dgaKey]['Status'] != 'Inactive') {
                    $dgData['data']['Accounts'][$dgaKey]['Status'] = 'Inactive';
                    # check if I should mess with these -
                    # setting typeid to 0 generated error 'User check account type is not on the known types list'
#                    $dgData['data']['Accounts'][$dgaKey]['AccountTypeId'] = 0;
#                    unset($dgData['data']['Accounts'][$dgaKey]['AccountTypeName']);
                    $needUpd++;
                } else {
                    unset($dgData['data']['Accounts'][$dgaKey]);
                }
            }
        }


        # allow for default status and default profile
        foreach ($updates as $key => $sfx) {
                    $dgaKey = $dg_keys[$sfx];
                    $account = $parms['HCUAccounts']["{$hc_keys[$sfx]}"];
                    # don't mess with the status - if we set it initially 'NeedsReview',
                    # will have to use CheckReview portal to activate
                    #$dgData['data']['Accounts'][$dgaKey]['Status'] = 'Active';
                    # AccountName is the required unique value.  Need something that won't change
            # not an active account? Skip over it
            if ($dgData['data']['Accounts'][$dgaKey]['Status'] != 'Active') {
                continue;
            }

            if ($dgData['data']['Accounts'][$dgaKey]['AccountName'] != $account['description'] ||
                $dgData['data']['Accounts'][$dgaKey]['AccountTypeId'] != $account['rdctype'] ) {

                    $dgData['data']['Accounts'][$dgaKey]['AccountName'] = $account['description'];
                    $dgData['data']['Accounts'][$dgaKey]['AccountTypeId'] = $account['rdctype'];
                    # unset($dgData['data']['Accounts'][$dgaKey]['AccountTypeId']; # unset so not using zero with accounttypename?
                $needUpd++;
            }
        }
        $return['dgUpdated'] = $dgData['data']['Accounts'];
        $return['needUpdate'] = $needUpd;
    } catch (Exception $e) {
        $return['status']['response'] = 'false';
        $return['status']['message'] = $e->getMessage();
        $return['status']['code'] = $e->getCode();
    }

    if ($parms["logging"] == "enabled") {
        $logParms = $parms["environment"];      // get the environment info passed in
        $logParms["logPoint"] = "digiSyncAccounts";
        $logParms["token"] = '';                // the id used across all communications in session
        $logParms["txnId"] = time();               // the id for this transaction
        $logParms["request"] = "hcuAccounts ";               // the request
        $logParms["request"] .= print_r($parms['HCUAccounts'], true);               // the request
        $logParms["reply"] = "return " . print_r($return, true);


        LogSSOActivity($logParms);
    }

    return $return;
}

function digiGetAccountTypeNames($parms) {

    try {
        if (!isset($parms['dgMgmtURL']) ||
            !isset($parms['dgUser']) ||
            !isset($parms['dgPass'])) {
            throw new Exception("Missing Parameters", 100);
        }

        $reqHeaders = array("Authorization: Basic " . base64_encode("{$parms['dgUser']}:{$parms['dgPass']}"));
        $reqURL = "{$parms['dgMgmtURL']}/accountTypes/";
        $parms["environment"]["logPoint"] = "dgGetAccountTypes";   // this action in a readable form
        $dgSaid = digiEmbcurl($parms, $reqURL, 'GET', $reqHeaders, '');

        # look for errors, otherwise decode and save the token
        if ($dgSaid['error'] != 0) {
            # look for errors, otherwise decode and save the token
            throw new Exception("{$dgSaid['message']}", $dgSaid['error']);
        }
        $return['status']['response'] = 'true';
        $return['status']['code'] = '000';
        if ($dgSaid['message'] == 'No Data' ) {
            $return['status']['message'] = $dgSaid['message'];
            $return['data'] = array();
        } else {
            $return['status']['message'] = 'Success';
            $return['data'] = $dgSaid;
        }
    } catch (Exception $e) {
        $return['status']['response'] = 'false';
        $return['status']['message'] = $e->getMessage();
        $return['status']['code'] = $e->getCode();
        $return['data'] = array();
    }

    return $return;
}

function digiGetABANumbers($parms) {

    try {
        if (!isset($parms['dgMgmtURL']) ||
            !isset($parms['dgUser']) ||
            !isset($parms['dgPass'])) {
            throw new Exception("Missing Parameters", 100);
        }

        $reqHeaders = array("Authorization: Basic " . base64_encode("{$parms['dgUser']}:{$parms['dgPass']}"));
        $reqURL = "{$parms['dgMgmtURL']}/abas/";
        $parms["environment"]["logPoint"] = "dgGetABANumbers";   // this action in a readable form
        $dgSaid = digiEmbcurl($parms, $reqURL, 'GET', $reqHeaders, '');

        # look for errors, otherwise decode and save the token
        if ($dgSaid['error'] != 0) {
            # look for errors, otherwise decode and save the token
            throw new Exception("{$dgSaid['message']}", $dgSaid['error']);
        }
        $return['status']['response'] = 'true';
        $return['status']['code'] = '000';
        if ($dgSaid['message'] == 'No Data' ) {
            $return['status']['message'] = $dgSaid['message'];
            $return['data'] = array();
        } else {
            $return['status']['message'] = 'Success';
            $return['data'] = $dgSaid;
        }
    } catch (Exception $e) {
        $return['status']['response'] = 'false';
        $return['status']['message'] = $e->getMessage();
        $return['status']['code'] = $e->getCode();
        $return['data'] = array();
    }

    return $return;
}

function digiGetUserProfile($parms, $dgUserId) {

    try {
        if (!isset($parms['dgMgmtURL']) ||
            !isset($parms['dgUser']) ||
            !isset($parms['dgPass']) ||
            !isset($dgUserId)) {
            throw new Exception("Missing Parameters", 100);
        }

        $reqHeaders = array("Authorization: Basic " . base64_encode("{$parms['dgUser']}:{$parms['dgPass']}"));
        $reqURL = "{$parms['dgMgmtURL']}/users/{$dgUserId}/profile";
        $parms["environment"]["logPoint"] = "dgGetUserProfile";   // this action in a readable form
        $dgSaid = digiEmbcurl($parms, $reqURL, 'GET', $reqHeaders, '');

        # look for errors, otherwise decode and save the token
        if ($dgSaid['error'] != 0) {
            # look for errors, otherwise decode and save the token
            throw new Exception("{$dgSaid['message']}", $dgSaid['error']);
        }

        if ((HCU_array_key_exists('AvailableItemsPerDay', $dgSaid['data']['UserProfileInfo']['UserRunningTotals']) &&
            intval(HCU_array_key_value('AvailableItemsPerDay', $dgSaid['data']['UserProfileInfo']['UserRunningTotals'])) <= 0 ) ||
            (HCU_array_key_exists('AvailableDepositPerDay', $dgSaid['data']['UserProfileInfo']['UserRunningTotals']) &&
            intval(HCU_array_key_value('AvailableDepositPerDay', $dgSaid['data']['UserProfileInfo']['UserRunningTotals'])) <= 0 ) ||
            (HCU_array_key_exists('AvailableRolling30DayLimit', $dgSaid['data']['UserProfileInfo']['UserRunningTotals']) &&
            intval(HCU_array_key_value('AvailableRolling30DayLimit', $dgSaid['data']['UserProfileInfo']['UserRunningTotals'])) <= 0 )
        ) {
            throw new Exception('Digiliti Profile Limits Exceeded', 999);
        }
        /*
         * this is returning a single scanlimit amount, similar to what Bluepoint passes.
         * Consider allowing all the limits to flow through instead?
         * $dgSaid['data']['UserProfileInfo']['UserRunningTotals']['AvailableItemsPerDay']
         * $dgSaid['data']['UserProfileInfo']['UserRunningTotals']['AvailableDepositPerDay']
         * $dgSaid['data']['UserProfileInfo']['UserRunningTotals']['AvailableRolling30DayLimit']
         */
        $scanlimit = min(
            intval(HCU_array_key_value('MaxAmountPerDeposit', $dgSaid['data']['UserProfileInfo']['UserProfile'])), intval(HCU_array_key_value('AvailableDepositPerDay', $dgSaid['data']['UserProfileInfo']['UserRunningTotals'])), intval(HCU_array_key_value('AvailableRolling30DayLimit', $dgSaid['data']['UserProfileInfo']['UserRunningTotals']))
        );

        $return['status']['response'] = 'true';
        $return['status']['code'] = '000';
        $return['status']['message'] = 'Success';
        $return['data'] = $dgSaid['data']['UserProfileInfo'];
        $return['data']['scanlimit'] = $scanlimit;
    } catch (Exception $e) {
        $return['status']['response'] = 'false';
        $return['status']['message'] = $e->getMessage();
        $return['status']['code'] = $e->getCode();
        $return['data'] = array();
    }

    return $return;
}
/**
 * Given the configured trusted detail settings and the list of hcuAccounts
 * Get a mir packet
 * query for the member at Digiliti
 * add user and initial account list if needed
 * else query for user details and sync the account list with digiliti
 * query to get user details - add / update don't always return full acct list
 * parse the account list to collect active eligible accounts
 *
 * return the list of active, eligible accounts
 *
 * @param array $parms trusted detail settings, hcuAccount list
 * @return array
 * @throws Exception
 */
function digiStartSession(&$parms, $HB_ENV) {
    try {
        # get the list of pre-defined Digiliti accounttypenames
        # don't need to do this - just use trusted detail definitions
        # for Sv_rdcname and Ck_rdcname
//        $dgAcctNames = digiGetAccountTypeNames($parms);
//        if ($dgAcctNames['status']['code'] !== '000') {
//            throw new Exception(__LINE__ . ' ' . $dgAcctNames['status']['message'], $dgAcctNames['status']['code']);
//        }
        $mirInfo = digiGetMir($parms, $HB_ENV); # be sure $parms['live'] is set so MIR works
        if ($mirInfo['status']['code'] !== '000') {
            throw new Exception(__LINE__ . ' ' . $mirInfo['status']['message'], $mirInfo['status']['code']);
        } else {
            $parms['MIR'] = $mirInfo['data'];
        }
        # format the digiliti username value here
        $parms['searchuser'] = (strlen($parms['MBRACCT']) < 4 ? substr('00000' . $parms['MBRACCT'], -4, 4) : $parms['MBRACCT']);

        $dgData = digiSearchUser($parms);
        if ($dgData['status']['code'] != '000' && $dgData['status']['code'] != '404') {
            throw new Exception($dgData['status']['message'], $dgData['status']['code']);
        }

        if ($dgData['status']['code'] == '404') {
            # user rec not found, add it now
            # but first format the list of accounts to add to Digiliti
            $dgAccts=array();
            foreach ($parms['HCUAccounts'] as $hcaKey => $hcaAccount) {
                    # add new item to $dgData['data']['Accounts']
                    $item = array(
                        "Status" => $parms['defaultDGAcctStat'],
                        "AccountName" => $hcaAccount['description'],
                        "AccountNumber" => $hcaAccount['suffix']
                    );
                    # AccountNumber s/b HCU suffix as calculated based on trusted detail config
                    # AccountTypeName / AccountTypeId s/b rdcdesc / Ck_rdctype - Sv_rdctype per HCU config
                    # But can't add with AccountTypeName w/o AccountTypeId
                    # so use AccountTypeId = rdctype
                    # AccountName s/b Home Banking shortdesc
                    #  configure rdctype as 0 to pass as AccountTypeId, do not pass AccountTypeName
                    $item["AccountTypeId"] = $hcaAccount['rdctype'];
                    $dgAccts['data']['Accounts'][] = $item;
            }

            $dgData = digiAddNewUser($parms, $dgAccts['data']['Accounts']);
            if ($dgData['status']['code'] !== '000') {
                throw new Exception(__LINE__ . ' ' . $dgData['status']['message'], $dgData['status']['code']);
            }
            # get UserID to continue
            $dgUserId = $dgData['data']['UserId'];
        } else {
            if ( ! HCU_array_key_value('IsActiveUser',$dgData['data']) ) {
                throw new Exception('Use of this service requires activation/approval.  Your request has been submitted to the CU.
            You will be notified when access has been approved and is ready to use.',909);
            }
            $dgUserId = $dgData['data']['UserId'];
            $dgData = digiGetUserDetail($parms, $dgUserId);
            if ($dgData['status']['code'] !== '000') {
                throw new Exception(__LINE__ . ' ' . $dgData['status']['message'], $dgData['status']['code']);
            }

            $sync = digiSyncAcctList($parms, $dgData);
            if ($sync['status']['code'] !== '000') {
                throw new Exception(__LINE__ . ' ' . $sync['status']['message'], $sync['status']['code']);
            }
            $dgData['data']['Accounts'] = $sync['dgUpdated'];
            if ($sync['needUpdate']) {
                # digiUpdateUser got errors, but they didn't bubble up to stop the process
                # Fixed! digiEmbCurl was sending error code 0 w/http 400 post error.
                $dgData = digiUpdateUser($parms, $dgData);

                if ($dgData['status']['code'] !== '000') {
                    throw new Exception(__LINE__ . ' ' . $dgData['status']['message'], $dgData['status']['code']);
                }
            }
        }
        # Digiliti does not always return full account list after update.
        # SO make the call for UserDetail just to make sure we have everything
        # reflected the same as at Digiliti
        $dgData = digiGetUserDetail($parms, $dgUserId);
        if ($dgData['status']['code'] !== '000') {
            throw new Exception(__LINE__ . ' ' . $dgData['status']['message'], $dgData['status']['code']);
        }
        # now, with current list, only include the active accounts
        $count = array('Active' => 0, 'Inactive' => 0, 'NeedsReview' =>0);
        $return['data'] = $dgData['data'];
        $return['data']['dgUserId'] = $dgUserId;
        $return['data']['dgUserName'] = $dgData['data']['UserName'];
        $return['data']['Accounts'] = array();
        foreach ($dgData['data']['Accounts'] as $key => $dgAccount) {
            $count[$dgAccount['Status']]++;
            if ($dgAccount['Status'] == 'Active') {
                $return['data']['Accounts'][$key] = $dgAccount;
            }
        }

        if ( !HCU_array_key_value('Active',$count) ) {
            if ( HCU_array_key_value('NeedsReview',$count) ) {
                throw new Exception('Deposit Accounts require approval.  Please contact the Credit Union for more information',910);
            } else {
                throw new Exception('No Deposit Accounts approved for Remote Deposit.  Please contact the Credit Union for more information',920);
            }
        }
        $return['status']['response'] = 'true';
        $return['status']['code'] = '000';
        $return['status']['message'] = 'Success';

    } catch (Exception $e) {
        $return['status']['response'] = 'false';
        $return['status']['message'] = $e->getMessage();
        $return['status']['code'] = $e->getCode();
        $return['data'] = array();
    }
        if ($parms["logging"] == "enabled") {
            $logParms = $parms["environment"];      // get the environment info passed in
            $logParms["logPoint"] = "digiStartSession";
            $logParms["token"] = '';                // the id used across all communications in session
            $logParms["txnId"] = time();               // the id for this transaction
            $logParms["request"] = "";               // the request
//            $logParms["request"] = "parms ";               // the request
//            $logParms["request"] .= print_r($parms, true);               // the request
            if(isset($dgAccts)) {
               $logParms["request"] .= print_r($dgAccts, true);               // the request
            } else {
               $logParms["request"] .= "dgAccts not set";               // the request
            }
            $logParms["reply"] = print_r($return, true);

            LogSSOActivity($logParms);
        }
    return $return;
}

?>