refactor(tbank): centralize access rules

src/tbank/brokerage-accounts.service.spec.ts

@@ -1,24 +1,29 @@
-import { BadRequestException, ConflictException } from '@nestjs/common';
-import { ServiceUnavailableException } from '@nestjs/common';
+import {
+  BadRequestException,
+  ConflictException,
+  ServiceUnavailableException,
+} from '@nestjs/common';
 
 jest.mock('../prisma/prisma.service', () => ({
   PrismaService: class PrismaService {},
 }));
 
 import { BrokerageAccountsService } from './brokerage-accounts.service';
-import { TbankCrypto } from './tbank.crypto';
+import { TbankAccessService } from './tbank-access.service';
+import { TbankTokenService } from './tbank-token.service';
 
 describe('BrokerageAccountsService', () => {
   const encryptionKey = 'MDEyMzQ1Njc4OWFiY2RlZjAxMjM0NTY3ODlhYmNkZWY=';
   const prisma = { tbankConnection: { findUnique: jest.fn() } };
   const config = { getOrThrow: jest.fn(() => encryptionKey) };
   const tbank = { getOpenAccounts: jest.fn() };
-  const service = new BrokerageAccountsService(
+  const tokens = new TbankTokenService(config as never);
+  const access = new TbankAccessService(
     prisma as never,
-    config as never,
+    tokens,
     tbank as never,
   );
-  const crypto = TbankCrypto.fromBase64(encryptionKey);
+  const service = new BrokerageAccountsService(access);
 
   beforeEach(() => jest.clearAllMocks());
 
@@ -33,7 +38,7 @@ describe('BrokerageAccountsService', () => {
 
   it('normalizes supported accounts and ignores unsupported ones', async () => {
     prisma.tbankConnection.findUnique.mockResolvedValue({
-      encryptedToken: crypto.encrypt('token'),
+      encryptedToken: tokens.encrypt('token'),
     });
     tbank.getOpenAccounts.mockResolvedValue([
       {
@@ -72,7 +77,7 @@ describe('BrokerageAccountsService', () => {
 
   it('retains the connection when T-Bank rejects its token', async () => {
     prisma.tbankConnection.findUnique.mockResolvedValue({
-      encryptedToken: crypto.encrypt('token'),
+      encryptedToken: tokens.encrypt('token'),
     });
     tbank.getOpenAccounts.mockRejectedValue(new Error('INVALID_TBANK_TOKEN'));
 
@@ -83,7 +88,7 @@ describe('BrokerageAccountsService', () => {
 
   it('returns an empty list from T-Bank unchanged', async () => {
     prisma.tbankConnection.findUnique.mockResolvedValue({
-      encryptedToken: crypto.encrypt('token'),
+      encryptedToken: tokens.encrypt('token'),
     });
     tbank.getOpenAccounts.mockResolvedValue([]);
 
@@ -92,7 +97,7 @@ describe('BrokerageAccountsService', () => {
 
   it('propagates an unavailable T-Bank response', async () => {
     prisma.tbankConnection.findUnique.mockResolvedValue({
-      encryptedToken: crypto.encrypt('token'),
+      encryptedToken: tokens.encrypt('token'),
     });
     tbank.getOpenAccounts.mockRejectedValue(
       new ServiceUnavailableException({ code: 'TBANK_UNAVAILABLE' }),