fix: make backend local verification safe

src/tbank/tbank-connection.service.ts

@@ -1,4 +1,4 @@
-import { BadRequestException, Injectable } from '@nestjs/common';
+import { BadRequestException, Inject, Injectable } from '@nestjs/common';
 import { ConfigService } from '@nestjs/config';
 import { Environment } from '../config/env.validation';
 import { PrismaService } from '../prisma/prisma.service';
@@ -6,6 +6,8 @@ import { TbankClient } from './tbank.client';
 import { TbankCrypto } from './tbank.crypto';
 import { PortfolioService } from './portfolio.service';
 
+type TbankTokenValidator = Pick<TbankClient, 'validateToken'>;
+
 @Injectable()
 export class TbankConnectionService {
   private readonly crypto: TbankCrypto;
@@ -13,7 +15,7 @@ export class TbankConnectionService {
   constructor(
     private readonly prisma: PrismaService,
     config: ConfigService<Environment, true>,
-    private readonly tbank: TbankClient,
+    @Inject(TbankClient) private readonly tbank: TbankTokenValidator,
     private readonly portfolio: PortfolioService,
   ) {
     this.crypto = TbankCrypto.fromBase64(