Skip to content

be: read csob slovakia's sepa credit from public samples, the first slovak bank - #47

Merged
landsman merged 1 commit into
mainfrom
csob-sk
Nov 10, 2026
Merged

landsman merged 1 commit into
mainfrom
csob-sk

Conversation

@landsman

Copy link
Copy Markdown
Owner

The first Slovak bank, on #46's IBANs. ČSOB SK's "ČSOB Info 24 - Avízo", from tomaj/bank-mails-parser's fixtures and remp2020's raw e-mail (both MIT, 2019); samples only, so no key is pinned.

It may never verify as it stands: remp2020's e-mail carries no DKIM signature of the bank, only Gmail's ARC, and csob.sk is not DNSSEC-signed. Even with a key pinned, withDns() would refuse it. A real e-mail has to show whether ČSOB SK signs, and under which domain; the page and the class say so.

  • IBANs for both accounts (BankAccount.parseIban), windows-1250 in base64 like the real e-mail; the fixture is synthetic, with a valid fake counter-party IBAN (the sample's is anonymised and fails its check digits).
  • Only incoming: an amount with a minus is refused, none having been seen.
  • The symbols come from the payer's reference (/VS…/SS…/KS…), text the payer wrote; NOTPROVIDED is none. The template prints that line every time, so it is required exactly once and must follow the counter-party's name directly.
  • Past the message for the recipient no labelled line may follow, and a second booking sentence is refused: tests reproduce tomaj's utok-fantom-sprava and utok-ucet-v-sprave.

Each of four guards was broken in turn and a test failed for each. make build: green.

@landsman
landsman merged commit 2bf7b4d into main Nov 10, 2026
5 checks passed
@landsman
landsman deleted the csob-sk branch November 10, 2026 22:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant