mirror of
https://github.com/we-promise/sure.git
synced 2026-04-07 14:31:25 +00:00
* Add Indexa Capital provider scaffold
Generate Indexa Capital provider scaffolding and align credential fields with the API authentication requirements.
* Fix PR 926 lint and schema CI failures
* Implement Indexa Capital provider with real API integration
- Rewrite all broken view templates (were meta-ERB from code generator)
- Create missing select_accounts.html.erb template
- Implement real API calls: list_accounts via /users/me, get_holdings
via /accounts/{number}/fiscal-results, get_account_balance via
/accounts/{number}/performance
- Add API token auth support (stored token > env token > credentials)
- Add api_token column with encryption support
- Redesign settings panel: API token prominent, credentials collapsible
- Fix account balances display using performance endpoint portfolios
- Fix accounts index empty-state guard missing indexa_capital_items
- Simplify activities fetch job (no activities API endpoint exists)
- Fix i18n interpolation (%%{ -> %{) throughout locale file
* Add tests for Indexa Capital provider integration
- IndexaCapitalItemTest: validations, credentials, scopes, sync status
- IndexaCapitalAccountTest: upsert, holdings, account provider linking
- Provider::IndexaCapitalTest: auth modes, API stubs, error handling
- IndexaCapitalItemsControllerTest: CRUD, setup, linking, authorization
- Fixtures for items (token + credentials) and accounts (mutual + pension)
52 tests, 98 assertions, 0 failures
* Address code review feedback from PR #933
- Fix zero balance bug: use `nil?` instead of `present?` so 0 is stored
- Fix has_indexa_capital_credentials? to check api_token (was ignored)
- Fix build_provider to delegate to Provided concern (was ignoring token)
- Fix IndexaCapital section outside encryption_error guard in settings
- Add account_number sanitization to prevent path traversal in API URLs
- Replace all skipped processor tests with real working tests
- Add zero-balance and path-traversal test coverage
61 tests, 107 assertions, 0 failures
* Address code review round 2: credentials validation, RuboCop, test quality
- Fix RuboCop SpaceInsideArrayLiteralBrackets in credentials check
- Chain where.not calls so all three username/document/password must be present
- Require all three credentials (||) instead of any one (&&) in validate_configuration!
- Move attr_reader to private to avoid exposing credentials publicly
- Parse dates with Date.parse in extract_balance for robustness
- Remove stale TODO and Crypto from supported_account_types
- Order build_provider query deterministically by created_at
- Replace no-op holdings assertion with meaningful assert_difference
* Address code review round 3: JSON parse safety and test precision
- Rescue JSON::ParserError on 2xx responses for clearer error messages
- Fix weak balance assertion: set balance to 0 before processing, assert
expected value (27093.01 = sum of holdings amounts)
* Include Indexa Capital in automatic family sync
Add indexa_capital_items to Family::Syncer#child_syncables so balances
and holdings refresh on daily auto-sync and login sync, not only on
manual sync button clicks.
---------
Signed-off-by: Juan José Mata <juanjo.mata@gmail.com>
Co-authored-by: Juan José Mata <jjmata@jjmata.com>
Co-authored-by: Juan José Mata <juanjo.mata@gmail.com>
100 lines
3.0 KiB
Ruby
100 lines
3.0 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
class IndexaCapitalAccount < ApplicationRecord
|
|
include CurrencyNormalizable
|
|
include IndexaCapitalAccount::DataHelpers
|
|
|
|
belongs_to :indexa_capital_item
|
|
|
|
# Association through account_providers
|
|
has_one :account_provider, as: :provider, dependent: :destroy
|
|
has_one :account, through: :account_provider, source: :account
|
|
has_one :linked_account, through: :account_provider, source: :account
|
|
|
|
validates :name, :currency, presence: true
|
|
|
|
# Scopes
|
|
scope :with_linked, -> { joins(:account_provider) }
|
|
scope :without_linked, -> { left_joins(:account_provider).where(account_providers: { id: nil }) }
|
|
scope :ordered, -> { order(created_at: :desc) }
|
|
|
|
# Callbacks
|
|
after_destroy :enqueue_connection_cleanup
|
|
|
|
# Helper to get account using account_providers system
|
|
def current_account
|
|
account
|
|
end
|
|
|
|
# Idempotently create or update AccountProvider link
|
|
# CRITICAL: After creation, reload association to avoid stale nil
|
|
def ensure_account_provider!(linked_account)
|
|
return nil unless linked_account
|
|
|
|
provider = account_provider || build_account_provider
|
|
provider.account = linked_account
|
|
provider.save!
|
|
|
|
# Reload to clear cached nil value
|
|
reload_account_provider
|
|
account_provider
|
|
end
|
|
|
|
def upsert_from_indexa_capital!(account_data)
|
|
data = sdk_object_to_hash(account_data).with_indifferent_access
|
|
|
|
# Indexa Capital API field mapping:
|
|
# account_number → unique account identifier
|
|
# name → display name (constructed by provider)
|
|
# type → mutual / pension / epsv
|
|
# status → active / inactive
|
|
# currency → always EUR for Indexa Capital
|
|
attrs = {
|
|
indexa_capital_account_id: data[:account_number]&.to_s,
|
|
account_number: data[:account_number]&.to_s,
|
|
name: data[:name] || "Indexa Capital Account",
|
|
currency: data[:currency] || "EUR",
|
|
account_status: data[:status],
|
|
account_type: data[:type],
|
|
provider: "Indexa Capital",
|
|
raw_payload: account_data
|
|
}
|
|
attrs[:current_balance] = data[:current_balance].to_d unless data[:current_balance].nil?
|
|
|
|
update!(attrs)
|
|
end
|
|
|
|
# Store holdings snapshot - return early if empty to avoid setting timestamps incorrectly
|
|
def upsert_holdings_snapshot!(holdings_data)
|
|
return if holdings_data.blank?
|
|
|
|
update!(
|
|
raw_holdings_payload: holdings_data,
|
|
last_holdings_sync: Time.current
|
|
)
|
|
end
|
|
|
|
# Store activities snapshot - return early if empty to avoid setting timestamps incorrectly
|
|
def upsert_activities_snapshot!(activities_data)
|
|
return if activities_data.blank?
|
|
|
|
update!(
|
|
raw_activities_payload: activities_data,
|
|
last_activities_sync: Time.current
|
|
)
|
|
end
|
|
|
|
private
|
|
|
|
def enqueue_connection_cleanup
|
|
return unless indexa_capital_item
|
|
return unless indexa_capital_authorization_id.present?
|
|
|
|
IndexaCapitalConnectionCleanupJob.perform_later(
|
|
indexa_capital_item_id: indexa_capital_item.id,
|
|
authorization_id: indexa_capital_authorization_id,
|
|
account_id: id
|
|
)
|
|
end
|
|
end
|