feat: add tbank tokens

src/tbank/tbank-connection.service.ts

@@ -0,0 +1,64 @@
+import { BadRequestException, Injectable } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import { Environment } from '../config/env.validation';
+import { PrismaService } from '../prisma/prisma.service';
+import { TbankClient } from './tbank.client';
+import { TbankCrypto } from './tbank.crypto';
+
+@Injectable()
+export class TbankConnectionService {
+  private readonly crypto: TbankCrypto;
+
+  constructor(
+    private readonly prisma: PrismaService,
+    config: ConfigService<Environment, true>,
+    private readonly tbank: TbankClient,
+  ) {
+    this.crypto = TbankCrypto.fromBase64(
+      config.getOrThrow('TOKEN_ENCRYPTION_KEY'),
+    );
+  }
+
+  async status(userId: string) {
+    const connection = await this.prisma.tbankConnection.findUnique({
+      where: { userId },
+    });
+    return {
+      connected: Boolean(connection),
+      connectedAt: connection?.connectedAt.toISOString() ?? null,
+    };
+  }
+
+  async put(userId: string, value: string) {
+    const token = value.trim();
+    if (!token) throw new BadRequestException({ code: 'VALIDATION_ERROR' });
+    try {
+      await this.tbank.validateToken(token);
+    } catch (error) {
+      if (error instanceof Error && error.message === 'INVALID_TBANK_TOKEN') {
+        throw new BadRequestException({ code: 'INVALID_TBANK_TOKEN' });
+      }
+      throw error;
+    }
+    const connection = await this.prisma.tbankConnection.upsert({
+      where: { userId },
+      create: {
+        userId,
+        encryptedToken: this.crypto.encrypt(token),
+        connectedAt: new Date(),
+      },
+      update: {
+        encryptedToken: this.crypto.encrypt(token),
+        connectedAt: new Date(),
+      },
+    });
+    return {
+      connected: true,
+      connectedAt: connection.connectedAt.toISOString(),
+    };
+  }
+
+  async delete(userId: string): Promise<void> {
+    await this.prisma.tbankConnection.deleteMany({ where: { userId } });
+  }
+}