audrius/bank-statement-import
1
0
Fork 1
mirror of https://github.com/OCA/bank-statement-import.git synced 2025-01-20 12:37:43 +02:00
Code Issues Packages Projects Releases Wiki Activity

[FIX] account_statement_import_online_ponto: verify TLS

Browse Source 
Not sure why, cert validation was disabled. That is insecure.

@Tecnativa TT31034
This commit is contained in:
Jairo Llopis
2021-09-29 09:55:32 +01:00
parent eb9ba14902
commit 9c1d6d0121
1 changed files with 4 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
account_statement_import_online_ponto/models/online_bank_statement_provider_ponto.py
View File

@@ -68,7 +68,6 @@ class OnlineBankStatementProviderPonto(models.Model):
url = PONTO_ENDPOINT + "/oauth2/token" url = PONTO_ENDPOINT + "/oauth2/token"
response = requests.post( response = requests.post(
url, url,
verify=False,
params={"grant_type": "client_credentials"}, params={"grant_type": "client_credentials"},
headers=self._ponto_header_token(), headers=self._ponto_header_token(),
) )
@@ -93,7 +92,7 @@ class OnlineBankStatementProviderPonto(models.Model):
def _ponto_get_account_ids(self): def _ponto_get_account_ids(self):
url = PONTO_ENDPOINT + "/accounts" url = PONTO_ENDPOINT + "/accounts"
response = requests.get( response = requests.get(
url, verify=False, params={"limit": 100}, headers=self._ponto_header() url, params={"limit": 100}, headers=self._ponto_header()
) )
if response.status_code == 200: if response.status_code == 200:
data = json.loads(response.text) data = json.loads(response.text)
@@ -118,9 +117,7 @@ class OnlineBankStatementProviderPonto(models.Model):
}, },
} }
} }
response = requests.post( response = requests.post(url, headers=self._ponto_header(), json=data)
url, verify=False, headers=self._ponto_header(), json=data
)
if response.status_code in (200, 201, 400): if response.status_code in (200, 201, 400):
data = json.loads(response.text) data = json.loads(response.text)
sync_id = data.get("attributes", {}).get("resourceId", False) sync_id = data.get("attributes", {}).get("resourceId", False)
@@ -137,7 +134,7 @@ class OnlineBankStatementProviderPonto(models.Model):
number = 0 number = 0
while number == 100: while number == 100:
number += 1 number += 1
response = requests.get(url, verify=False, headers=self._ponto_header()) response = requests.get(url, headers=self._ponto_header())
if response.status_code == 200: if response.status_code == 200:
data = json.loads(response.text) data = json.loads(response.text)
status = data.get("status", {}) status = data.get("status", {})
@@ -157,7 +154,7 @@ class OnlineBankStatementProviderPonto(models.Model):
latest_identifier = False latest_identifier = False
while page_url: while page_url:
response = requests.get( response = requests.get(
page_url, verify=False, params=params, headers=self._ponto_header() page_url, params=params, headers=self._ponto_header()
) )
if response.status_code == 200: if response.status_code == 200:
if params.get("before"): if params.get("before"):