feat: zentrale selfhost-dienste bereitstellen

backend/src/modules/cron/bankstatementsync.service.ts

@@ -1,5 +1,6 @@
 // /services/bankStatementService.ts
 import axios from "axios"
+import { centralServicesClient } from "../push-server.client"
 import dayjs from "dayjs"
 import utc from "dayjs/plugin/utc.js"
 import {secrets} from "../../utils/secrets"
@@ -57,11 +58,13 @@ const normalizeDate = (val: any) => {
 export function bankStatementService(server: FastifyInstance) {
 
     let accessToken: string | null = null
+    const useCentralBanking = Boolean(secrets.FEDEO_CENTRAL_SERVICES_ENABLED && centralServicesClient.configured())
 
     // -----------------------------------------------
     // ✔ TOKEN LADEN
     // -----------------------------------------------
     const getToken = async () => {
+        if (useCentralBanking) return
         console.log("Fetching GoCardless token…")
 
         const response = await axios.post(
@@ -80,6 +83,7 @@ export function bankStatementService(server: FastifyInstance) {
     // -----------------------------------------------
     const getBalanceData = async (accountId: string): Promise<any | false> => {
         try {
+            if (useCentralBanking) return await centralServicesClient.getBankingBalances(accountId)
             const {data} = await axios.get(
                 `${secrets.GOCARDLESS_BASE_URL}/accounts/${accountId}/balances`,
                 {
@@ -114,6 +118,10 @@ export function bankStatementService(server: FastifyInstance) {
     // -----------------------------------------------
     const getTransactionData = async (accountId: string) => {
         try {
+            if (useCentralBanking) {
+                const data = await centralServicesClient.getBankingTransactions(accountId)
+                return data.transactions.booked
+            }
             const {data} = await axios.get<TransactionsResponse>(
                 `${secrets.GOCARDLESS_BASE_URL}/accounts/${accountId}/transactions`,
                 {

backend/src/modules/push-server.client.ts

@@ -1,4 +1,4 @@
-import { createHash, createHmac } from "node:crypto"
+import { createHash, createHmac, randomUUID } from "node:crypto"
 
 import { secrets } from "../utils/secrets"
 
@@ -54,13 +54,14 @@ function signature(method: string, path: string, timestamp: string, body: string
     return createHmac("sha256", secrets.PUSH_SERVER_SECRET).update(canonical).digest("hex")
 }
 
-async function requestPushServer<T>(method: "POST" | "DELETE", path: string, payload?: unknown): Promise<T> {
+async function requestPushServer<T>(method: "GET" | "POST" | "DELETE", path: string, payload?: unknown): Promise<T> {
     if (!configured()) {
         throw new Error("Zentraler Push-Server ist nicht konfiguriert")
     }
 
     const body = payload === undefined ? "" : JSON.stringify(payload)
     const timestamp = new Date().toISOString()
+    const signedPath = path.split("?")[0]
     const response = await fetch(`${normalizeBaseUrl()}${path}`, {
         method,
         headers: {
@@ -68,7 +69,8 @@ async function requestPushServer<T>(method: "POST" | "DELETE", path: string, pay
             "Content-Type": "application/json",
             "X-Fedeo-Instance-Id": secrets.PUSH_SERVER_INSTANCE_ID,
             "X-Fedeo-Timestamp": timestamp,
-            "X-Fedeo-Signature": signature(method, path, timestamp, body),
+            "X-Fedeo-Signature": signature(method, signedPath, timestamp, body),
+            "X-Fedeo-Request-Id": randomUUID(),
         },
         body: body || undefined,
     })
@@ -99,3 +101,35 @@ export const pushServerClient = {
         })
     },
 }
+
+export const centralServicesClient = {
+    configured,
+
+    aiChatCompletions(payload: Record<string, unknown>) {
+        return requestPushServer<any>("POST", "/v1/services/ai/chat-completions", payload)
+    },
+
+    bankingInstitutions(country = "DE") {
+        return requestPushServer<any[]>("GET", `/v1/services/banking/institutions?country=${encodeURIComponent(country)}`)
+    },
+
+    createBankingRequisition(input: { institutionId: string; redirect: string; userLanguage?: string }) {
+        return requestPushServer<any>("POST", "/v1/services/banking/requisitions", input)
+    },
+
+    getBankingRequisition(id: string) {
+        return requestPushServer<any>("GET", `/v1/services/banking/requisitions/${encodeURIComponent(id)}`)
+    },
+
+    getBankingAccount(id: string) {
+        return requestPushServer<any>("GET", `/v1/services/banking/accounts/${encodeURIComponent(id)}`)
+    },
+
+    getBankingBalances(id: string) {
+        return requestPushServer<any>("GET", `/v1/services/banking/accounts/${encodeURIComponent(id)}/balances`)
+    },
+
+    getBankingTransactions(id: string) {
+        return requestPushServer<any>("GET", `/v1/services/banking/accounts/${encodeURIComponent(id)}/transactions`)
+    },
+}