fix: make backend local verification safe

src/tbank/tbank-connection.service.spec.ts

@@ -5,6 +5,7 @@ jest.mock('../prisma/prisma.service', () => ({
 }));
 
 import { TbankConnectionService } from './tbank-connection.service';
+import type { TbankClient } from './tbank.client';
 
 describe('TbankConnectionService', () => {
   const prisma = {
@@ -17,7 +18,9 @@ describe('TbankConnectionService', () => {
   const config = {
     getOrThrow: jest.fn(() => 'MDEyMzQ1Njc4OWFiY2RlZjAxMjM0NTY3ODlhYmNkZWY='),
   };
-  const tbank = { validateToken: jest.fn() };
+  const tbank: jest.Mocked<Pick<TbankClient, 'validateToken'>> = {
+    validateToken: jest.fn(),
+  };
   const portfolio = { invalidate: jest.fn() };
   const service = new TbankConnectionService(
     prisma as never,

src/tbank/tbank-connection.service.ts

@@ -1,4 +1,4 @@
-import { BadRequestException, Injectable } from '@nestjs/common';
+import { BadRequestException, Inject, Injectable } from '@nestjs/common';
 import { ConfigService } from '@nestjs/config';
 import { Environment } from '../config/env.validation';
 import { PrismaService } from '../prisma/prisma.service';
@@ -6,6 +6,8 @@ import { TbankClient } from './tbank.client';
 import { TbankCrypto } from './tbank.crypto';
 import { PortfolioService } from './portfolio.service';
 
+type TbankTokenValidator = Pick<TbankClient, 'validateToken'>;
+
 @Injectable()
 export class TbankConnectionService {
   private readonly crypto: TbankCrypto;
@@ -13,7 +15,7 @@ export class TbankConnectionService {
   constructor(
     private readonly prisma: PrismaService,
     config: ConfigService<Environment, true>,
-    private readonly tbank: TbankClient,
+    @Inject(TbankClient) private readonly tbank: TbankTokenValidator,
     private readonly portfolio: PortfolioService,
   ) {
     this.crypto = TbankCrypto.fromBase64(

src/tbank/upcoming-events.service.ts

@@ -37,7 +37,10 @@ const instrumentCacheTtlMs = 24 * 60 * 60_000;
 @Injectable()
 export class UpcomingEventsService {
   private readonly crypto: TbankCrypto;
-  private readonly dividendCache = new Map<string, CachedEntry<TbankDividend[]>>();
+  private readonly dividendCache = new Map<
+    string,
+    CachedEntry<TbankDividend[]>
+  >();
   private readonly instrumentCache = new Map<
     string,
     CachedEntry<TbankInstrument | null>