mirror of
https://github.com/we-promise/sure.git
synced 2026-05-25 13:34:58 +00:00
* feat(sync): add Brex provider schema Adds Brex item and account tables with per-family credentials, scoped upstream account uniqueness, encrypted token storage, and sanitized provider payload columns. * feat(sync): add Brex provider core Adds Brex item/account models, provider client and adapter support, family connection helpers, and provider enum registration for read-only Brex cash and card data. * feat(sync): add Brex import pipeline Adds Brex account discovery, linked-account sync, cash/card balance processors, transaction import, sanitized metadata handling, and idempotent provider entry processing. * feat(sync): add Brex connection flows Adds Mercury-style Brex connection management, explicit item-scoped account selection and linking, settings provider UI, account index visibility, localized copy, and per-item cache handling. * test(sync): cover Brex provider workflows Adds targeted coverage for Brex provider requests, adapter config, item/account guards, importer behavior, entry processing, and Mercury-style controller flows. * fix(sync): align Brex API edge cases Tightens Brex account fetching against the official card-account response shape, sends transaction start filters as RFC3339 date-times, and keeps provider error bodies out of user-facing messages while expanding provider client guard coverage. * fix(sync): harden Brex provider integration Restrict Brex API base URLs to official hosts, tighten account-selection UI behavior, and add tests for invalid credentials, cache scoping, and provider setup edge cases. * test(sync): avoid Brex secret-shaped fixtures * refactor(sync): extract Brex account flows * fix(sync): address Brex provider review feedback * fix(sync): address Brex review follow-ups Move remaining Brex review cleanup into focused model behavior, tighten link/setup edge cases, localize summaries, and add regression coverage from CodeRabbit feedback. Also records the security-review pass as no-findings after diff-scoped inspection and Brakeman validation. * refactor(sync): split Brex account flow controllers Route Brex account selection and setup actions through small namespaced controllers while keeping existing URLs and helpers stable. Business flow remains in BrexItem::AccountFlow; the main Brex item controller now only handles connection CRUD, provider-panel rendering, destroy, and sync. * fix(sync): address Brex CodeRabbit review * fix(sync): address Brex follow-up review * fix(sync): address Brex review follow-ups * fix(sync): address Brex sync review findings * fix(sync): polish Brex review copy and errors * fix(sync): register Brex provider health * fix(sync): polish Brex bank sync presentation * fix(sync): address Brex review follow-ups * fix(sync): tighten Brex setup params * test(api): stabilize usage rate-limit window * fix(sync): polish Brex setup flow nits * fix(sync): harden Brex setup params * fix(sync): finalize Brex review cleanup --------- Signed-off-by: Juan José Mata <juanjo.mata@gmail.com> Co-authored-by: Juan José Mata <juanjo.mata@gmail.com>
120 lines
3.6 KiB
Ruby
120 lines
3.6 KiB
Ruby
class Provider::BrexAdapter < Provider::Base
|
|
include Provider::Syncable
|
|
include Provider::InstitutionMetadata
|
|
|
|
# Register this adapter with the factory
|
|
Provider::Factory.register("BrexAccount", self)
|
|
|
|
def self.supported_account_types
|
|
%w[Depository CreditCard]
|
|
end
|
|
|
|
# Returns connection configurations for this provider
|
|
def self.connection_configs(family:)
|
|
return [] unless family.can_connect_brex?
|
|
|
|
brex_items = family.brex_items.active.with_credentials.ordered
|
|
|
|
return [ connection_config_for(nil) ] if brex_items.empty?
|
|
|
|
brex_items.map { |brex_item| connection_config_for(brex_item) }
|
|
end
|
|
|
|
def provider_name
|
|
"brex"
|
|
end
|
|
|
|
# Build a Brex provider instance with family-specific credentials
|
|
# @param family [Family] The family to get credentials for (required)
|
|
# @return [Provider::Brex, nil] Returns nil if credentials are not configured
|
|
def self.build_provider(family: nil, brex_item_id: nil)
|
|
return nil unless family.present?
|
|
|
|
brex_item = BrexItem.resolve_for(family: family, brex_item_id: brex_item_id)
|
|
return nil unless brex_item&.credentials_configured?
|
|
|
|
base_url = brex_item.effective_base_url
|
|
return nil unless base_url.present?
|
|
|
|
Provider::Brex.new(
|
|
brex_item.token.to_s.strip,
|
|
base_url: base_url
|
|
)
|
|
end
|
|
|
|
def self.connection_config_for(brex_item)
|
|
path_params = ->(extra = {}) do
|
|
brex_item.present? ? extra.merge(brex_item_id: brex_item.id) : extra
|
|
end
|
|
|
|
{
|
|
key: brex_item.present? ? "brex_#{brex_item.id}" : "brex",
|
|
name: brex_item.present? ? I18n.t("brex_items.provider_connection.name", name: brex_item.name) : I18n.t("brex_items.provider_connection.default_name"),
|
|
description: brex_item.present? ? I18n.t("brex_items.provider_connection.description", name: brex_item.name) : I18n.t("brex_items.provider_connection.default_description"),
|
|
can_connect: true,
|
|
new_account_path: ->(accountable_type, return_to) {
|
|
Rails.application.routes.url_helpers.select_accounts_brex_items_path(
|
|
path_params.call(accountable_type: accountable_type, return_to: return_to)
|
|
)
|
|
},
|
|
existing_account_path: ->(account_id) {
|
|
Rails.application.routes.url_helpers.select_existing_account_brex_items_path(
|
|
path_params.call(account_id: account_id)
|
|
)
|
|
}
|
|
}
|
|
end
|
|
private_class_method :connection_config_for
|
|
|
|
def sync_path
|
|
Rails.application.routes.url_helpers.sync_brex_item_path(item)
|
|
end
|
|
|
|
def item
|
|
provider_account.brex_item
|
|
end
|
|
|
|
def can_delete_holdings?
|
|
false
|
|
end
|
|
|
|
def institution_domain
|
|
metadata = provider_account.institution_metadata
|
|
return nil unless metadata.present?
|
|
|
|
domain = metadata["domain"]
|
|
url = metadata["url"]
|
|
|
|
# Derive domain from URL if missing
|
|
if domain.blank? && url.present?
|
|
begin
|
|
parsed_host = URI.parse(url).host
|
|
Rails.logger.warn("Brex account #{provider_account.id} institution URL has no host: #{url}") if parsed_host.nil?
|
|
domain = parsed_host&.gsub(/^www\./, "")
|
|
rescue URI::InvalidURIError
|
|
Rails.logger.warn("Invalid institution URL for Brex account #{provider_account.id}: #{url}")
|
|
end
|
|
end
|
|
|
|
domain
|
|
end
|
|
|
|
def institution_name
|
|
metadata = provider_account.institution_metadata
|
|
|
|
metadata&.dig("name") || item&.institution_name
|
|
end
|
|
|
|
def institution_url
|
|
metadata = provider_account.institution_metadata
|
|
|
|
metadata&.dig("url") || item&.institution_url
|
|
end
|
|
|
|
def institution_color
|
|
metadata = provider_account.institution_metadata
|
|
|
|
metadata&.dig("color") || item&.institution_color
|
|
end
|
|
end
|