search

nemiah / phpFinTS

PHP library to communicate with FinTS/HBCI servers
MIT License
130 stars 42 forks source link

Requirement for TAN each time? #307

Closed RubenWaterman closed 3 years ago

RubenWaterman commented 4 years ago

Hey! First of all, thanks for forking the original library and making it work with the new PSD2 regulations!

I managed to get it to work with my bank but when I'm using the MoneyMoney tool, I only need to login every once in a while if I just get my new transactions (and in the logs I see this message:

Response: Bitte beachten Sie die enthaltenen Warnungen/Hinweise.
Response: UPD nicht mehr aktuell, aktuelle Version enthalten.
Response: Zugelassene TAN-Verfahren für den Benutzer (962, 972, 982)
Response: *PIN gültig.
Response: *Dialoginitialisierung erfolgreich
Response: Starke Kundenauthentifizierung nicht notwendig.

Particularly the last line is interesting).

If I use the phpFinTS/Samples/statementOfAccount.php example, it asks me for a TAN every time. Is there a way to implement it similar to MoneyMoney where the TAN is only ever requested every 90 days (I believe is the standard)?

nemiah commented 4 years ago

Hi @RubenWaterman!

I'm quite sure it is possible :blush:

We have to find out what MoneyMoney does differently. Does MoneyMoney have an HBCI log?

I'm sorry, but it works for me as expected every 90 days so this one is on you to find out :grin:

RubenWaterman commented 4 years ago

Hey Nena!

This is the HBCI log from MoneyMoney when I click refresh:

1> Starting FinTS/HBCI session for account Kontokorrent.
1> Protocol version: FinTS 3.0 PIN/TAN
1> Server address: https://hbci11.fiducia.de/cgi-bin/hbciservlet
1> Sending: HNHBK:1:3+000000000493+300+0+1'HNVSK:998:3+PIN:2+998+1+1::itpX2VNXbm0BAACFc2SnhW?+owAQA+1:20200902:134707+2:2:13:@8@........:5:1+280:REDACTED_BANK_ID:REDACTED_USER_NAME:V:0:0+0'HNVSD:999:1+@303@HNSHK:2:4+PIN:2+972+2299821621+1+1+1::itpX2VNXbm0BAACFc2SnhW?+owAQA+2+1:20200902:134707+1:999:1+6:10:16+280:REDACTED_BANK_ID:REDACTED_USER_NAME:S:0:0'HKIDN:3:2+280:REDACTED_BANK_ID+REDACTED_USER_NAME+itpX2VNXbm0BAACFc2SnhW?+owAQA+1'HKVVB:4:3+18+65+1+F3CFD111*********591C89A1+2.3'HKTAN:5:6+4+HKIDN'HNSHA:6:2+2299821621++****************''HNHBS:7:1+1'
1> Received: HNHBK:1:3+000000000679+300+JC0090213470723+1+JC0090213470723:1'HNVSK:998:3+PIN:2+998+1+2::itpX2VNXbm0BAACFc2SnhW?+owAQA+1:20200902:134708+2:2:13:@8@........:5:1+280:REDACTED_BANK_ID:REDACTED_USER_NAME:V:0:0+0'HNVSD:999:1+@457@HNSHK:2:4+PIN:2+972+2299821621+1+1+2::itpX2VNXbm0BAACFc2SnhW?+owAQA+2+1:20200902:134708+1:999:1+6:10:16+280:REDACTED_BANK_ID:REDACTED_USER_NAME:S:0:0'HIRMG:3:2+3060::Bitte beachten Sie die enthaltenen Warnungen/Hinweise.'HIRMS:4:2:4+3920::Zugelassene TAN-Verfahren für den Benutzer:962:972:982+0901::*PIN gültig.+0020::*Dialoginitialisierung erfolgreich'HIRMS:5:2:5+3076::Starke Kundenauthentifizierung nicht notwendig.'HITAN:6:6:5+4++noref+nochallenge'HNSHA:7:2+2299821621''HNHBS:8:1+1'
1> Response: Bitte beachten Sie die enthaltenen Warnungen/Hinweise.
1> Response: Zugelassene TAN-Verfahren für den Benutzer (962, 972, 982)
1> Response: *PIN gültig.
1> Response: *Dialoginitialisierung erfolgreich
1> Response: Starke Kundenauthentifizierung nicht notwendig.
1> BPD version 18: HIBPA:6:3:4+18+280:REDACTED_BANK_ID+REDACTED_BANK+1+1+300+1000'HIKOM:7:4:4+280:REDACTED_BANK_ID+1+3:REDACTED_BANK_URL'HISHV:8:3:4+J+RDH:7+PIN:1+RDH:9+RDH:10'HIEKAS:9:5:4+1+1+1+J:J:N:3'HIKAZS:10:4:4+1+1+65:J'HIKAZS:11:5:4+1+1+65:J:N'HIKAZS:12:6:4+1+1+1+65:J:N'HIKAZS:13:7:4+1+1+1+65:J:N'HIPAES:14:1:4+1+1+1'HIPSPS:15:1:4+1+1+1'HIQTGS:16:1:4+1+1+1'HISALS:17:4:4+1+1'HISALS:18:7:4+1+1+1'HICSAS:19:1:4+1+1+1+1:400'HICSBS:20:1:4+1+1+1+N:N'HICSLS:21:1:4+1+1+1+J'HICSES:22:1:4+1+1+1+1:400'HICCSS:23:1:4+1+1+1'HISPAS:24:1:4+1+1+1+J:J:N:sepade?:xsd?:pain.001.001.02.xsd:sepade?:xsd?:pain.001.002.03.xsd:sepade?:xsd?:pain.001.003.03.xsd:sepade?:xsd?:pain.008.002.02.xsd:sepade?:xsd?:pain.008.003.02.xsd:sepade?:xsd?:pain.008.001.02.xsd:sepade?:xsd?:pain.001.001.03.xsd:sepade?:xsd?:pain.001.001.03_GBIC_2.xsd:sepade?:xsd?:pain.008.001.02_GBIC_2.xsd:sepade?:xsd?:pain.001.001.03_GBIC_3.xsd:sepade?:xsd?:pain.008.001.02_GBIC_3.xsd'HICCMS:25:1:4+1+1+1+999:N:N'HIDSES:26:1:4+1+1+1+2:360:2:360'HIBSES:27:1:4+1+1+1+2:360:2:360'HIDMES:28:1:4+1+1+1+2:360:2:360:999:N:N'HIBMES:29:1:4+1+1+1+2:360:2:360:999:N:N'HICDBS:30:1:4+1+1+1+N'HICDLS:31:1:4+1+1+1+0:0:N:J'HIPPDS:32:2:4+1+1+1+1:Telekom:prepaid:N:::15;30;50:2:Vodafone:prepaid:N:::15;25;50:3:E-plus:prepaid:N:::15;20;30:4:O2:prepaid:N:::15;20;30:5:Congstar:prepaid:N:::15;30;50:6:Blau:prepaid:N:::15;20;30'HICDNS:33:1:4+1+1+1+0:1:3650:J:J:J:J:N:J:J:J:J:0102030612:01020304050607080910111213141516171819202122232425262728293099'HIDSBS:34:1:4+1+1+1+N:N:9999'HICUBS:35:1:4+1+1+1+N'HICUMS:36:1:4+1+1+1+OTHR'HICDES:37:1:4+1+1+1+4:1:3650:0102030612:01020304050607080910111213141516171819202122232425262728293099:01:12345'HIDSWS:38:1:4+1+1+1+J'HIDMCS:39:1:4+1+1+1+999:N:N:2:45:2:45::sepade?:xsd?:pain.008.003.02.xsd'HIDSCS:40:1:4+1+1+1+2:45:2:45::sepade?:xsd?:pain.008.003.02.xsd'HIECAS:41:1:4+1+1+1+J:N:N:urn?:iso?:std?:iso?:20022?:tech?:xsd?:camt.053.001.02'GIVPUS:42:1:4+1+1+1+N'GIVPDS:43:1:4+1+1+1+1'HIAUBS:44:6:4+1+1+1+500'HIDBSS:45:1:4+1+1+1+N:N'HIBBSS:46:1:4+1+1+1+N:N'HIDMBS:47:1:4+1+1+1+N:N'HIBMBS:48:1:4+1+1+1+N:N'HICMBS:49:1:4+1+1+1+N:N'HICMES:50:1:4+1+1+1+1:400:999:J:N'HICMLS:51:1:4+1+1+1'HIWPDS:52:6:4+1+1+1+N:N:N'HIWDUS:53:5:4+1+1+1+365'HIBMES:54:2:4+1+1+1+0;1;110000:0;360:999:N:N'HIBSES:55:2:4+1+1+1+0;1;110000:0;360'HIDMES:56:2:4+1+1+1+0;0;1;130000:0;0;360:999:N:N'HIDSES:57:2:4+1+1+1+0;0;1;130000:0;0;360'HIKAUS:58:2:4+1+1+1'HIKIFS:59:7:4+1+1+1+N:N'HICAZS:60:1:4+1+1+1+65:N:N:urn?:iso?:std?:iso?:20022?:tech?:xsd?:camt.052.001.02'HIBAZS:61:1:4+1+1+1+N:N:N'HIZDFS:62:1:4+1+1+1+99'HIDDBS:63:1:4+1+1+1+N:sepade?:xsd?:pain.008.003.02.xsd:sepade?:xsd?:pain.008.001.02.xsd:sepade?:xsd?:pain.008.001.02_GBIC_2.xsd'HIDDES:64:1:4+1+1+1+CORE:3:360:0102030612:01020304050607080910111213141516171819202122232425262728293099:01:12345::sepade?:xsd?:pain.008.003.02.xsd:sepade?:xsd?:pain.008.001.02.xsd:sepade?:xsd?:pain.008.001.02_GBIC_2.xsd'HIDDLS:65:1:4+1+1+1+0:3650:N:J:sepade?:xsd?:pain.008.003.02.xsd:sepade?:xsd?:pain.008.001.02.xsd:sepade?:xsd?:pain.008.001.02_GBIC_2.xsd'HIDDNS:66:1:4+1+1+1+1:3:3650:J:J:J:J:N:J:J:J:N:0102030612:01020304050607080910111213141516171819202122232425262728293099:01:12345::sepade?:xsd?:pain.008.003.02.xsd:sepade?:xsd?:pain.008.001.02.xsd:sepade?:xsd?:pain.008.001.02_GBIC_2.xsd'HIDVKS:67:2:4+1+1+1+N:J'HIKAAS:68:1:4+1+1+1+N:J:J:J:4;PDF;1'HIPOFS:69:1:4+1+1+1+J:N:100;Kundenmitteilung'HIIPSS:70:1:4+1+1+1+35:sepade?:xsd?:pain.001.001.03_GBIC_2.xsd:sepade?:xsd?:pain.001.001.03_GBIC_3.xsd'HIIPZS:71:1:4+1+1+1+:sepade?:xsd?:pain.001.001.03_GBIC_2.xsd:sepade?:xsd?:pain.001.001.03_GBIC_3.xsd'HIAUBS:72:9:4+1+1+1+2006:500:15000,'HIBMLS:73:1:4+1+1+1'HIBSAS:74:1:4+1+1+1+2:360:2:360'HIBSLS:75:1:4+1+1+1+J'HIDMLS:76:1:4+1+1+1'HIDSAS:77:1:4+1+1+1+2:360:2:360'HIDSLS:78:1:4+1+1+1+J'HITANS:79:6:4+1+1+1+J:N:0:942:2:MTAN2:mobileTAN::mobile TAN:6:1:SMS:2048:J:1:N:0:2:N:J:00:0:N:1:944:2:SECUREGO:mobileTAN::SecureGo:6:1:TAN:2048:J:1:N:0:2:N:J:00:0:N:1:962:2:HHD1.4:HHD:1.4:Smart-TAN plus manuell:6:1:Challenge:2048:J:1:N:0:2:N:J:00:0:N:1:972:2:HHD1.4OPT:HHDOPT1:1.4:Smart-TAN plus optisch / USB:6:1:Challenge:2048:J:1:N:0:2:N:J:00:0:N:1:982:2:MS1.0.0:::Smart-TAN photo:6:1:Challenge:2048:J:1:N:0:2:N:J:00:0:N:1'HIPINS:80:1:4+1+1+0+5:20:6:VR-NetKey oder Alias::HKTAN:N:HKKAZ:J:HKSAL:N:HKEKA:N:HKPAE:J:HKPSP:N:HKQTG:N:HKCSA:J:HKCSB:N:HKCSL:J:HKCSE:J:HKCCS:J:HKSPA:N:HKCCM:J:HKDSE:J:HKBSE:J:HKDME:J:HKBME:J:HKCDB:N:HKCDL:J:HKPPD:J:HKCDN:J:HKDSB:N:HKCUB:N:HKCUM:J:HKCDE:J:HKDSW:J:HKDMC:J:HKDSC:J:HKECA:N:HKAUB:J:HKDBS:N:HKBBS:N:HKDMB:N:HKBMB:N:HKCMB:N:HKCME:J:HKCML:J:HKWPD:N:HKWDU:N:HKKAU:N:HKKIF:N:HKCAZ:J:HKBAZ:N:HKZDF:J:HKDDB:N:HKDDE:J:HKDDL:J:HKDDN:J:HKDVK:N:HKKAA:N:HKPOF:N:HKIPS:N:HKIPZ:J:HKBML:J:HKBSA:J:HKBSL:J:HKDML:J:HKDSA:J:HKDSL:J:GKVPU:N:GKVPD:N'HIAZSS:81:1:4+1+1+1+1:N:::::::::::HKCUM;1;0;1;811:HKBSE;1;0;1;811:HKCCS;1;0;1;811:HKQTG;1;0;1;811:HKDSL;1;0;1;811:HKDML;1;0;1;811:HKCCM;1;0;1;811:HKKIF;7;0;1;811:HKCSA;1;0;1;811:HKBAZ;1;0;1;811:HKZDF;1;0;1;811:HKDMC;1;0;1;811:HKIPS;1;0;1;811:HKKAZ;6;0;1;811:HKKAZ;5;0;1;811:HKSAL;4;0;1;811:HKCUB;1;0;1;811:HKWDU;5;0;1;811:HKKAU;2;0;1;811:HKBSL;1;0;1;811:HKAUB;9;0;1;811:HKDDE;1;0;1;811:HKDSC;1;0;1;811:HKCDL;1;0;1;811:HKBMB;1;0;1;811:HKBML;1;0;1;811:HKCSB;1;0;1;811:HKCDN;1;0;1;811:HKDSW;1;0;1;811:HKCAZ;1;0;1;811:HKDSE;1;0;1;811:HKKAA;1;0;1;811:HKAUB;6;0;1;811:HKCDE;1;0;1;811:HKBBS;1;0;1;811:HKBME;2;0;1;811:HKDMB;1;0;1;811:GKVPU;1;0;1;811:HKPPD;2;0;1;811:HKCME;1;0;1;811:HKDSE;2;0;1;811:HKDDL;1;0;1;811:HKDBS;1;0;1;811:HKIPZ;1;0;1;811:HKDME;2;0;1;811:HKDSB;1;0;1;811:HKCML;1;0;1;811:HKDDN;1;0;1;811:HKEKA;5;0;1;811:HKBSE;2;0;1;811:HKBME;1;0;1;811:HKCSE;1;0;1;811:HKSPA;1;0;1;811:GKVPD;1;0;1;811:HKCDB;1;0;1;811:HKDDB;1;0;1;811:HKBSA;1;0;1;811:HKIDN;2;0;1;811:HKECA;1;0;1;811:HKDVK;2;0;1;811:HKDSA;1;0;1;811:HKKAZ;7;0;1;811:HKDME;1;0;1;811:HKPOF;1;0;1;811:HKKAZ;4;0;1;811:HKCSL;1;0;1;811:HKWPD;6;0;1;811:HKSAL;7;0;1;811:HKCMB;1;0;1;811'HIVISS:82:1:4+1+1+1+1;L;;Bankauftrag;;;;1;L;;allgemein;;;;2;L;;Legitimation;;;;2;L;;Benutzerkennung;;;;3;L;;Version;;;;4;L;;Überweisung;;;;5;L;;Umbuchung;;;;6;L;;Umbuchung;;;;6;L;;terminiert;;;;7;L;;Überweisung;;;;7;L;;Referenzkonto;;;;8;L;;Überweisung;;;;8;L;;SEPA/EU;;;;9;L;;Überweisung;;;;9;L;;Inland;;;;10;L;;Überweisung;;;;10;L;;Ausland;;;;11;L;;Sammel-;;;;11;L;;Überweisung;;;;12;L;;Sammelüberw.;;;;12;L;;SEPA;;;;13;L;;Sammelüberw.;;;;13;L;;Ausland;;;;14;L;;Lastschrift;;;;15;L;;Rückgabe;;;;15;L;;Lastschrift;;;;16;L;;Lastschrift;;;;16;L;;SEPA;;;;17;L;;Lastschrift;;;;17;L;;Ausland;;;;18;L;;Sammel-;;;;18;L;;Lastschrift;;;;19;L;;Sammellasts.;;;;19;L;;SEPA;;;;20;L;;Sammellasts.;;;;20;L;;Ausland;;;;21;L;;Termin-;;;;21;L;;Überweisung;;;;22;L;;Terminüberw.;;;;22;L;;SEPA;;;;23;L;;Terminüberw.;;;;23;L;;Ausland;;;;24;L;;Terminüberw.;;;;24;L;;Sammel Inl.;;;;25;L;;Terminüberw.;;;;25;L;;Sammel SEPA;;;;26;L;;Terminüberw.;;;;26;L;;Sammel Ausl.;;;;27;L;;Terminlasts.;;;;27;L;;Inland;;;;28;L;;Terminlasts.;;;;28;L;;SEPA;;;;29;L;;Terminlasts.;;;;29;L;;Ausland;;;;30;L;;Terminlasts.;;;;30;L;;Sammel Inl.;;;;31;L;;Terminlasts.;;;;31;L;;Sammel SEPA;;;;32;L;;Terminlasts.;;;;32;L;;Sammel Ausl.;;;;33;L;;Dauerüberw.;;;;33;L;;Inland;;;;34;L;;Dauer-;;;;34;L;;Überweisung;;;;35;L;;Dauerüberw.;;;;35;L;;Ausland;;;;36;L;;Dauerlasts.;;;;36;L;;Inland;;;;37;L;;Dauerlasts.;;;;37;L;;SEPA;;;;38;L;;Bestand;;;;38;L;;abfragen;;;;39;L;;Löschen;;;;39;L;;Auftrag;;;;40;L;;Aussetzen;;;;40;L;;Auftrag;;;;41;L;;Aussetzen;;;;41;L;;Auftrag;;;;42;L;;Ändern;;;;42;L;;Auftrag;;;;43;L;;Ändern;;;;43;L;;Auftrag;;;;44;L;;Freigabe;;;;44;L;;Überw. DTAUS;;;;45;L;;Freigabe;;;;45;L;;Lasts. DTAUS;;;;46;L;;Freigabe;;;;46;L;;Überw. DTAZV;;;;47;L;;Freigabe;;;;47;L;;Überw. SEPA;;;;48;L;;Freigabe;;;;48;L;;Lasts. SEPA;;;;49;L;;Freigabe;;;;49;L;;DSRZ-Dateien;;;;50;L;;Kontoauszug;;;;50;L;;u. Quittung;;;;51;L;;Kontoauszug;;;;51;L;;an/abmelden;;;;52;L;;Postfach;;;;52;L;;an/abmelden;;;;53;L;;Postkorb;;;;54;L;;Datentresor;;;;55;L;;Wertpapier;;;;55;L;;Kauf;;;;56;L;;Wertpapier;;;;56;L;;Verkauf;;;;57;L;;Wertpapier;;;;57;L;;Geschäft;;;;58;L;;Anlage;;;;58;L;;Abschluss;;;;59;L;;Kredit;;;;59;L;;Abschluss;;;;60;L;;Produkt;;;;60;L;;Kauf;;;;61;L;;Versicherung;;;;61;L;;Abschluss;;;;62;L;;Service;;;;62;L;;Funktionen;;;;63;L;;TAN-Medien;;;;63;L;;Management;;;;64;L;;Mobiltelefon;;;;64;L;;laden;;;;65;L;;GeldKarte;;;;65;L;;laden;;;;66;L;;Zahlung;;;;66;L;;Internet;;;;67;L;;Geldtransfer;;;;67;L;;Internet;;;;68;L;;Freistellung;;;;69;L;;Adresse;;;;69;L;;ändern;;;;70;L;;Wertpapier;;;;70;L;;Kauf;;;;71;L;;Wertpapier;;;;71;L;;Verkauf;;;;72;L;;Wertpapier;;;;72;L;;Geschäft;;;;73;L;;Eigene;;;;73;L;;IBAN;;;;74;L;;IBAN;;;;74;L;;Empfänger;;;;75;L;;IBAN;;;;75;L;;Zahler;;;;76;L;;IBAN;;;;76;L;;Absender;;;;77;L;;Kunden;;;;77;L;;Nummer;;;;78;L;;Vertrags-;;;;78;L;;Kennung;;;;79;L;;Eigene;;;;79;L;;IBAN;;;;80;L;;Name;;;;81;L;;Auftrags-;;;;81;L;;Identifikation;;;;82;L;;Händler;;;;82;L;;Name;;;;83;L;;Karten-;;;;83;L;;nummer;;;;84;L;;TAN;;;;84;L;;Medium;;;;85;L;;Summe nur;;;;85;L;;Vorkommastellen;;;;86;L;;Freistellung;;;;86;L;;ändern;;;;87;L;;Überweisung;;;;87;L;;Instant Payment;;;;88;L;;Adresse?:;;;;88;L;16;#;;;;89;L;;Angebots-Nr?:;;;;89;R;16;#;;;;90;L;;Anzahl?:;;;;90;R;16;#;;;;91;L;;Auftrags-ID?:;;;;91;L;16;#;;;;92;L;;Aut.Merkmal?:;;;;92;L;16;#;;;;93;L;;Bankdaten?:;;;;93;L;16;#;;;;94;L;;Betrag?:;;;;94;R;16;#;;;;95;L;;BIC Empf.?:;;;;95;L;16;#;;;;96;L;;BLZ Abs.?:;;;;96;R;16;#;;;;97;L;;BLZ Empfänger;;;;97;R;16;#;;;;98;L;;BLZ Karte?:;;;;98;R;16;#;;;;99;L;;BLZ Zahler?:;;;;99;R;16;#;;;;100;L;;Eigene BLZ?:;;;;100;R;16;#;;;;101;L;;Eigenes Kto?:;;;;101;R;16;#;;;;102;L;;Geburtsdatum;;;;102;L;16;#;;;;103;L;;Händlername?:;;;;103;L;16;#;;;;104;L;;ISIN?:;;;;104;L;16;#;;;;105;L;;Kartennummer;;;;105;R;16;#;;;;106;L;;Konto Abs.?:;;;;106;R;16;#;;;;107;L;;Konto Empfänger;;;;107;R;16;#;;;;108;L;;Konto Zahler;;;;108;R;16;#;;;;109;L;;Kreditkarte?:;;;;109;R;16;#;;;;110;L;;Limit?:;;;;110;R;16;#;;;;111;L;;Menge?:;;;;111;R;16;#;;;;112;L;;Mobilfunknummer;;;;112;R;16;#;;;;113;L;;Name Empf.?:;;;;113;L;16;#;;;;114;L;;Postleitzahl;;;;114;R;16;#;;;;115;L;;Rate?:;;;;115;R;16;#;;;;116;L;;Referenzkto?:;;;;116;R;16;#;;;;117;L;;Referenzzahl;;;;117;R;16;#;;;;118;L;;Stücke/Nom.?:;;;;118;R;16;#;;;;119;L;;TAN-Medium;;;;119;L;16;#;;;;120;L;;Termin?:;;;;120;L;16;#;;;;121;L;;Vertrag.Kenn;;;;121;L;16;#;;;;122;L;;WP-Kenn-Nr?:;;;;122;R;16;#;;;;123;L;;Kunden-Nr.;;;;123;R;16;#;;;;124;L;;Summe;;;;124;R;16;#;;;;125;L;32;#;;;;126;R;32;#;;;;127;L;16;#;;;;128;R;16;#;;;:HKBME;1;811;18;;;73;;;125;4;IBAN.1;94;4;CtrlSum.1;90;4;NbOfTxs.1:HKBML;1;811;39;;;79;;;125;1;3,1;94;1;7,1;81;;;125;1;2:HKBSA;1;811;42;;;75;;;125;4;IBAN.2;94;4;CtrlSum.1:HKBSE;1;811;14;;;75;;;125;4;IBAN.2;94;4;CtrlSum.1:HKBSL;1;811;39;;;79;;;125;4;IBAN.1;94;4;CtrlSum.1;81;;;125;4;MsgId.1:HKCCM;1;811;11;;;79;;;125;4;IBAN.1;94;4;CtrlSum.1;90;4;NbOfTxs.1:HKCCS;1;811;4;;;74;;;125;4;IBAN.2;94;4;CtrlSum.1:HKCDE;1;811;34;;;74;;;125;4;IBAN.2;94;4;CtrlSum.1:HKCDL;1;811;39;;;73;;;125;4;IBAN.1;94;4;CtrlSum.1:HKCDN;1;811;42;;;74;;;125;4;IBAN.2;94;4;CtrlSum.1:HKCME;1;811;25;;;79;;;125;1;2,1;94;4;CtrlSum.1;90;4;NbOfTxs.1:HKCML;1;811;39;;;79;;;125;1;3,1;94;1;7,1:HKCSA;1;811;42;;;74;;;125;4;IBAN.2;94;4;CtrlSum.1:HKCSE;1;811;21;;;74;;;125;4;IBAN.2;94;4;CtrlSum.1:HKCSL;1;811;39;;;79;;;125;4;IBAN.1;94;4;CtrlSum.1:HKCUM;1;811;5;;;74;;;125;4;IBAN.2;94;4;CtrlSum.1:HKDDE;1;811;37;;;75;;;125;4;IBAN.2;94;4;CtrlSum.1:HKDDL;1;811;39;;;75;;;125;4;IBAN.2;94;4;CtrlSum.1;81;;;125;4;MsgId.1:HKDDN;1;811;42;;;75;;;125;4;IBAN.2;94;4;CtrlSum.1:HKDMC;1;811;18;;;73;;;125;4;IBAN.1;94;4;CtrlSum.1;90;4;NbOfTxs.1:HKDME;1;811;18;;;73;;;125;4;IBAN.1;94;4;CtrlSum.1;90;4;NbOfTxs.1:HKDML;1;811;39;;;79;;;125;1;3,1;94;1;7,1;81;;;125;1;2:HKDSA;1;811;42;;;75;;;125;4;IBAN.2;94;4;CtrlSum.1:HKDSC;1;811;14;;;75;;;125;4;IBAN.2;94;4;CtrlSum.1:HKDSE;1;811;14;;;75;;;125;4;IBAN.2;94;4;CtrlSum.1:HKDSL;1;811;39;;;79;;;125;4;IBAN.1;94;4;CtrlSum.1;81;;;125;4;MsgId.1:HKDSW;1;811;15;;;73;;;125;1;2,1;94;1;4,1:HKPPD;2;811;64;;;79;;;125;1;2,1;94;1;5,1:HKAUB;6;811;10;;;85;;;128;3;Z.3:HKDSE;2;811;14;;;75;;;125;4;IBAN.2;94;4;CtrlSum.1:HKBSE;2;811;14;;;75;;;125;4;IBAN.2;94;4;CtrlSum.1:HKDME;2;811;18;;;73;;;125;4;IBAN.1;94;4;CtrlSum.1;90;4;NbOfTxs.1:HKBME;2;811;18;;;73;;;125;4;IBAN.1;94;4;CtrlSum.1;90;4;NbOfTxs.1:HKAUB;9;811;10;;;85;;;128;3;Z.3:HKZDF;1;811;49;;;79;;;125;1;2,1;81;;;125;1;3;90;1;4,5:HKIPZ;1;811;87;;;74;;;125;4;IBAN.2;94;4;CtrlSum.1:'
1> UPD version 65: HIUPA:6:4:4+REDACTED_USER_NAME+65+0'HIUPD:7:6:4+1786164::280:REDACTED_BANK_ID+REDACTED+REDACTED_USER_NAME+1+EUR+REDACTED++Kontokorrent++HKSAK:1+HKISA:1+HKSSP:1+HKCAZ:1+HKEKA:1+HKKAU:1+HKCDB:1+HKPSP:1+HKCML:1+HKCSL:1+HKCDL:1+HKPAE:1+HKDVK:1+HKPPD:1+HKCSA:1+HKCDN:1+HKBMB:1+HKBBS:1+HKDMB:1+HKCMB:1+HKDBS:1+HKCSB:1+HKCUB:1+HKKAA:1+HKPOF:1+HKQTG:1+HKSPA:1+HKDSB:1+HKIPZ:1+HKIPS:1+HKCCM:1+HKCUM:1+HKCCS:1+HKCDE:1+HKCME:1+HKCSE:1+HKDSW:1+HKSAL:1+HKKIF:1+HKKAZ:1+HKAUB:1+GKVPU:1+GKVPD:1+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++{"umsltzt"?:"2020-09-02-12.42.39.000756"}'HIUPD:8:6:4+2656426::280:REDACTED_BANK_ID+REDACTED+REDACTED_USER_NAME+1+EUR+REDACTED++Kontokorrent++HKSAK:1+HKISA:1+HKSSP:1+HKCAZ:1+HKEKA:1+HKKAU:1+HKCDB:1+HKPSP:1+HKCML:1+HKCSL:1+HKCDL:1+HKPAE:1+HKDVK:1+HKPPD:1+HKCSA:1+HKCDN:1+HKBMB:1+HKBBS:1+HKDMB:1+HKCMB:1+HKDBS:1+HKCSB:1+HKCUB:1+HKKAA:1+HKPOF:1+HKQTG:1+HKSPA:1+HKDSB:1+HKIPZ:1+HKIPS:1+HKCCM:1+HKCUM:1+HKCCS:1+HKCDE:1+HKCME:1+HKCSE:1+HKDSW:1+HKSAL:1+HKKIF:1+HKKAZ:1+HKAUB:1+GKVPU:1+GKVPD:1+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++{"umsltzt"?:"2020-09-02-12.48.53.000501"}'HIUPD:9:6:4+2656450::280:REDACTED_BANK_ID+REDACTED+REDACTED_USER_NAME+1+EUR+REDACTED++Kontokorrent++HKSAK:1+HKISA:1+HKSSP:1+HKCAZ:1+HKEKA:1+HKKAU:1+HKCDB:1+HKPSP:1+HKCML:1+HKCSL:1+HKCDL:1+HKPAE:1+HKDVK:1+HKPPD:1+HKCSA:1+HKCDN:1+HKBMB:1+HKBBS:1+HKDMB:1+HKCMB:1+HKDBS:1+HKCSB:1+HKCUB:1+HKKAA:1+HKPOF:1+HKQTG:1+HKSPA:1+HKDSB:1+HKIPZ:1+HKIPS:1+HKCCM:1+HKCUM:1+HKCCS:1+HKCDE:1+HKCME:1+HKCSE:1+HKDSW:1+HKSAL:1+HKKIF:1+HKKAZ:1+HKAUB:1+GKVPU:1+GKVPD:1+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++{"umsltzt"?:"2020-09-02-12.48.53.000501"}'
1> UPD account: Kontokorrent (REDACTED)
1> UPD account: Kontokorrent (REDACTED)
1> UPD account: Kontokorrent (REDACTED)
1> No need to get balance and transactions because nothing has changed according to the UPD inventory ID 2020-09-02-12.42.39.000756 for segment HKCAZ.
1> Sending: HNHBK:1:3+000000000402+300+JC0090213470723+2'HNVSK:998:3+PIN:2+998+1+1::itpX2VNXbm0BAACFc2SnhW?+owAQA+1:20200902:134708+2:2:13:@8@........:5:1+280:REDACTED_BANK_ID:REDACTED_USER_NAME:V:0:0+0'HNVSD:999:1+@198@HNSHK:2:4+PIN:2+972+2844982225+1+1+1::itpX2VNXbm0BAACFc2SnhW?+owAQA+2+1:20200902:134708+1:999:1+6:10:16+280:REDACTED_BANK_ID:REDACTED_USER_NAME:S:0:0'HKEND:3:1+JC0090213470723'HNSHA:4:2+2844982225++****************''HNHBS:5:1+2'
1> Received: HNHBK:1:3+000000000442+300+JC0090213470723+2+JC0090213470723:2'HNVSK:998:3+PIN:2+998+1+2::itpX2VNXbm0BAACFc2SnhW?+owAQA+1:20200902:134708+2:2:13:@8@........:5:1+280:REDACTED_BANK_ID:REDACTED_USER_NAME:V:0:0+0'HNVSD:999:1+@220@HNSHK:2:4+PIN:2+972+2844982225+1+1+2::itpX2VNXbm0BAACFc2SnhW?+owAQA+2+1:20200902:134708+1:999:1+6:10:16+280:REDACTED_BANK_ID:REDACTED_USER_NAME:S:0:0'HIRMG:3:2+0010::Nachricht entgegengenommen.+0100::Dialog beendet.'HNSHA:4:2+2844982225''HNHBS:5:1+2'
1> Response: Nachricht entgegengenommen.
1> Response: Dialog beendet.
1> Received 0 transactions.
Philipp91 commented 4 years ago

With phpFinTS, do you persist() your FinTs instance and restore it properly? Some banks apply the 90-day rule per user (easy), others apply it per client/device, which requires keeping the Kundensystem-ID.

RubenWaterman commented 4 years ago

Hmm.. I'm only using the phpFinTS/Samples/statementOfAccount.php file as that's exactly what I needed (and I'm not really a good developer, I just managed to get the output as a JSON file instead of printed to the screen and that's about as far as my PHP skills go).

I do see $persistedInstance = $this->fints->persist(); and $this->fints->loadPersistedInstance($persistedInstance); but I wouldn't really know how to use it in the statementOfAccount.php file. Can you point me in the right direction?

Philipp91 commented 4 years ago

You need a permanent storage somewhere. PHP's memory goes away when the script is done executing. If you want to use files for that (similar to how the state is persisted by the example code between asking for a TAN and submitting the TAN), you can do this:

That is, do everthing the same way as the file_... calls inside login.php, which are executed in the middle of the whole transaction fetching process when a TAN is needed, but (1) do it at the "outsides" of the overall script execution by saving at the very end and loading at the beginning, and (2) don't save any $persistedAction, as there is no action being executed at that point.

RubenWaterman commented 4 years ago

Hey @Philipp91

Thank you very much! I did those modifications but two things I noticed, by using the file_put_contents(__DIR__ . 'permanent_state.txt', serialize($fints->persist())); I'm getting a file called Samplespermanent_state.txt instead of what I presume should be permanent_state.txt in the folder Samples? (I did modify the other line so that it would also use that strange kind of file name to exclude that this would cause my error, like so $persistedInstance = file_get_contents(__DIR__ . 'permanent_state.txt') ?: null;)

But unfortunately when I run the phpFinTS/Samples/statementOfAccount.php the second time, I'm getting this error:

Fatal error: Uncaught InvalidArgumentException: Invalid persistedInstance: 's:22488:"a:9:{i:0;i:2;i:1;O:16:"Fhp\Protocol\BPD":5:{s:5:"hibpa";C:25:"Fhp\Segment\HIBPA\HIBPAv3":68:{HIBPA:4:3:3+18+280:75390000+Volksbank Nordoberpfalz eG+1+1+300+1000'}s:10:"parameters";a:65:{s:6:"GIVPDS";a:1:{i:1;C:28:"Fhp\Segment\AnonymousSegment":22:{GIVPDS:41:1:3+1+1+1+1'}}s:6:"GIVPUS";a:1:{i:1;C:28:"Fhp\Segment\AnonymousSegment":22:{GIVPUS:40:1:3+1+1+1+N'}}s:6:"HIAUBS";a:2:{i:9;C:28:"Fhp\Segment\AnonymousSegment":36:{HIAUBS:70:9:3+1+1+1+2006:500:15000,'}i:6;C:28:"Fhp\Segment\AnonymousSegment":24:{HIAUBS:42:6:3+1+1+1+500'}}s:6:"HIAZSS";a:1:{i:1;C:28:"Fhp\Segment\AnonymousSegment":1138:{HIAZSS:79:1:3+1+1+1+1:N:::::::::::HKCUM;1;0;1;811:HKBSE;1;0;1;811:HKCCS;1;0;1;811:HKQTG;1;0;1;811:HKDSL;1;0;1;811:HKDML;1;0;1;811:HKCCM;1;0;1;811:HKKIF;7;0;1;811:HKCSA;1;0;1;811:HKBAZ;1;0;1;811:HKZDF;1;0;1;811:HKDMC;1;0;1;811:HKIPS;1;0;1;811:HKKAZ;6;0;1;811:HKKAZ;5;0;1;811:HKSAL;4;0;1;811:HKCUB;1;0;1;811:HKWDU;5;0;1;811:HKKAU;2;0;1;811:HKBSL;1;0;1;811:HKAUB;9

I was thinking that maybe since we serialize the data before storing it in a txt file, should I start in the init file by deserializing it?

Philipp91 commented 4 years ago

I'm getting a file called Samplespermanent_state.txt

If a slash is missing, then just add it: __DIR__ . '/permanent_state.txt'

I'm getting this error

My instructions above were wrong. I have updated them. You need to drop the serialize() around $fints->persist().

I was thinking that maybe since we serialize the data before storing it in a txt file, should I start in the init file by deserializing it?

That would work too. But it's not necessary to serialize in the first place. That was only needed in the example code, because it puts both the persisted action and the persisted FinTs instance into a single file.

RubenWaterman commented 4 years ago

Okay, I have a feeling I'm one step closer because now it seems to properly read in the state, but I'm getting this error:

PHP Fatal error:  Uncaught Fhp\Protocol\ServerException: FinTS errors:
9050 (global): Die Nachricht enthält Fehler.
9800 (global): Dialog abgebrochen
9120 (global): Die Nachricht hat nicht die erwartete Nachrichtennummer. in /Users/rubenwaterman/Projects/bittr/phpFinTS/lib/Fhp/Protocol/ServerException.php:169

I think it has something to do with the encoding of the file because if I open it, I see that wherever there should be an umlaut, I get a weird character. I did try to solve this by adding an utf8_encode() in the statementOfAccount.php file and an utf8_decode() in the init file but then I was getting the Die Nachricht enthält Fehler. error message once again. Any clue what might be the trick here?

Philipp91 commented 4 years ago

Die Nachricht hat nicht die erwartete Nachrichtennummer.

Within each dialog, the messages sent back and forth between server and client are sequentially numbered. With this error, the server accuses the client of violating that sequence. Assuming that both sides know how to count properly, the most likely cause is that server and client are in disagreement about which dialog they're in. For instance, the client might think that the previous dialog is still valid and send a high message number, whereas the server forgot about that dialog and expects a message with number 1 to open a new dialog. Or vice versa.

Hopefully this can be mitigated by closing the dialog explicitly at the very end of the script (though still before $fints->persist()) by calling $fints->close(). Note that you must not close the dialog when you're persisting things for TAN input (i.e. in the "middle" of the script). When testing this, remember to clear your txt files to start with a clean slate.

I think it has something to do with the encoding of the file because if I open it, I see that wherever there should be an umlaut, I get a weird character.

That's fine. Files don't have encodings, only their contents do. As far as the filesystem is concerned, PHP just dumped a bunch of bytes somewhere and later reads them back. As long as PHP still knows how (with which encoding) to interpret those bytes, all is well. Since serialize() / deserialize() and persist() / FinTs::new() and so on are all pairwise inverses, there shouldn't be any issues. utf8_encode() / utf8_decode() are also inverses, so adding that on top doesn't hurt, though it's not necessary. The only piece that's likely misaligned here is your text editor, which you need to tell the right encoding to interpret the file. (Apparently it's unable to guess the encoding despite the presence of Umlauts -- perhaps you also want to switch to a smarter text editor.) Given that utf8_encode() made it read the data correctly, it likely currently assumes UTF-8 encoding, whereas the true encoding is ISO-8859-1.

RubenWaterman commented 4 years ago

I see. Is there any way to debug this further in terms of knowing exactly what they are in disagreement about? I tried adding the $fints->close() just before file_put_contents(__DIR__ . '/permanent_state.txt', $fints->persist()); but once that's done I won't get any error messages anymore (great!) but I do have to enter a TAN every time I run the statementOfAccount.php which was not the goal ^^

I've removed the encoding / decoding parts (and for fun changed VS Code to ISO-8859-1 and indeed, everything was displayed nicely). Thanks for explaining this!

Philipp91 commented 4 years ago

You could dump the $fints->kundensystemId (it's a private field, but you can just edit the code to make it public) at various stages of the process to ensure that it remains the same, especially across the persistence to disk. It is the primary piece of information that should remain constant.

If you see it changing, we know where to debug further. If it remains the same, please use $fints->setLogger() to install a logger (e.g. the \Tests\Fhp\CLILogger). While you should generally be careful with posting logged messages publicly on GitHub, the library does have a sanitizer that removes the most sensitive bits of information. And anyway what we care most about here are the segments (e.g.HKSYN) that are sent (or not), especially after creating the newFinTs` instance from the persisted state. If you could post which messages which which segments were sent the "second time" (when it asks for a TAN even though it shouldn't), that could allow some further guesses. You could also try to align the sequence of messages with the one from MoneyMoney that you posted above to see where they start differing.

arnebr commented 4 years ago

Im interested in a solution as well. The Kundensystem Id ist the same every step of the way. I think that maybe the UDP has something to do with it, but im not sure.

When I not do the $fints->login() on the second run, the message number error won't get presented, since it will count up correctly. But a TAN is still needed.

arnebr commented 4 years ago

Hey guys, I found something that helped me. The bank does only require a TAN if you query more than 30 days before today, since MoneyMoney is building the database by querying every two hours or so, they don't need all historical data and will be querying that during setup only I think :)

RubenWaterman commented 4 years ago

Oh wow, didn't expect it to be so easy. But yes, that did work! Thank you so much! We can close the issue now I think?