lumaxis / fidelity-netbenefits

A MoneyMoney extension for Fidelity NetBenefits stock plan accounts
MIT License
5 stars 2 forks source link

We could not find any Fidelity accounts... #10

Open renkrich opened 1 year ago

renkrich commented 1 year ago

Hi all, it looks like the Netbenefits login screen/method has changed somehow, making the script throw an error on line 106.

image
renkrich commented 1 year ago

Trying to recreate Fidelity account in MoneyMoney brings this protocol:

11:50:45 Starting account setup assistant. 11:51:08 Lade Kontenliste ... Web Banking Engine: Using user-supplied extension Fidelity NetBenefits.lua version 0.11. Protocol version: Web Scraping Server address: https://nb.fidelity.com/public/nb/worldwide/home?AuthRedUrl=https://netbenefitsww.fidelity.com/mybenefitsww/stockplans/navigation/PlanSummary Sending: GET https://nb.fidelity.com/public/nb/worldwide/home?AuthRedUrl=https://netbenefitsww.fidelity.com/mybenefitsww/stockplans/navigation/PlanSummary 11:51:09 Received: <!DOCTYPE html> Log In to Fidelity NetBenefits

Sending: POST https://login.fidelity.com/ftgw/Fas/Fidelity/PWI/Login/Response/dj.chf.ra/ 11:51:10 Received: { "status":{ "result": "continue", "toUrl": "https://login.fidelity.com/cas/login/IspCust?allowInteraction=false" } } Sending: GET https://netbenefitsww.fidelity.com/mybenefitsww/stockplans/navigation/PlanSummary Sending: GET https://nb.fidelity.com/public/nb/worldwide/home Received: <!DOCTYPE html> Log In to Fidelity NetBenefits
We could not find any Fidelity accounts. Make sure you have active positions in your account.

renkrich commented 1 year ago

The error message has changed in-between to

image
lumaxis commented 1 year ago

Unfortunately, it looks like Fidelity changed how login works on the website. The process appears to now involve a JavaScript SDK to check for potential fraudulent activity and several other network requests.

I've tried to adjust this extension to the new login flow but haven't managed to get it working, yet. It might be that this new flow is just to complex to replicate for a web scraping extension 😕

If anyone else would like to try and take a stab at getting this fixed, I'd be happy to collaborate or take pull requests 🙏🏼

renkrich commented 1 year ago

Have you had any success in updating the login process?

lumaxis commented 1 year ago

Unfortunately not. The login process on the website appears to now use a bunch of Javascript-based fraud detection and such and has become more complex. I'd be happy to accept contributions or help with further investigations 🙏🏼