Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-29 Thread Jean Laroche
A quick follow up on this thread. As an alternative to plaid, it's possible to write your own scraping code (by this I mean, code that goes and scrapes data from the web sites where you can manually download your ofx files). To automate a browser, you can use Selenium (which has bindings for py

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-22 Thread Dawid Wrobel via gnucash-devel
On Mon, Jun 22, 2020 at 5:29 PM Jean Laroche So plaid is definitely a solution albeit with security concerns. > I wish all this stuff was open source, and all this bank info data would > be at our fingertips without having to go through third parties like > that. But that's the current state of af

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-22 Thread Jean Laroche
For those interested in plaid. Today I got a response to my inquiry about being allowed to retrieve investment information using the free dev environment. Typically Liabilities and Investments product is only available under our custom contract model which starts at a $500 per month committed sp

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-20 Thread Liz Dodd
On Sun, 21 Jun 2020 05:33:11 + Christopher Lam wrote: > Are you saying that SISS isn't compliant with OAIC's APP? Very > interesting, and not surprising... > I've noticed lots of discrepancies in Australian law and practice. > e.g. many forms in use have PDF forms with PDF's signatures, but t

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-20 Thread Christopher Lam
Are you saying that SISS isn't compliant with OAIC's APP? Very interesting, and not surprising... I've noticed lots of discrepancies in Australian law and practice. e.g. many forms in use have PDF forms with PDF's signatures, but the recipient expect nothing other than print+sign+scan+unencrypted e

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-20 Thread Liz Dodd
On Sat, 20 Jun 2020 13:43:13 -0700 jean laroche wrote: > > I found an explanation of Quicken's Express Web Connect at > > https://community.quicken.com/discussion/7851859/faq-how-quicken-connects-with-your-financial-institution-tips-tricks-and-best-practices. > > > > The short answer is it works

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-20 Thread jean laroche
I found an explanation of Quicken's Express Web Connect at https://community.quicken.com/discussion/7851859/faq-how-quicken-connects-with-your-financial-institution-tips-tricks-and-best-practices. The short answer is it works the same as plaid and friends: The transaction data is retrieved n

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-20 Thread John Ralls
> On Jun 20, 2020, at 10:09 AM, jean laroche wrote: > > More about the Plaid thing: > > 1) I found quite a few projects in github having to do with plaid. People > writing their own financial solutions. > One that's somewhat relevant here is this one: > https://github.com/ebridges/plaid2qif

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-20 Thread jean laroche
More about the Plaid thing: 1) I found quite a few projects in github having to do with plaid. People writing their own financial solutions. One that's somewhat relevant here is this one: https://github.com/ebridges/plaid2qif Even though the author picked qif instead of ofx (a mistake I think)

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-19 Thread Jean Laroche
On 6/19/20 9:38 AM, John Ralls wrote: The actual OAUTH implementation begins with https://cdn.plaid.com/link/v2/stable/link-initialize.js. I don't really have time ATM to reformat and study it, but it supports my initial suspicion that they're setting up a man-in-the-middle to obtain an OAU

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-19 Thread John Ralls
The actual OAUTH implementation begins with https://cdn.plaid.com/link/v2/stable/link-initialize.js. I don't really have time ATM to reformat and study it, but it supports my initial suspicion that they're setting up a man-in-the-middle to obtain an OAUTH token to monitor the user's bank accoun

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-18 Thread Jean Laroche
The server code clearly mentions OAUTH. Let me know what you can determined from the server code if you find something interesting... J. On 6/18/20 9:51 AM, Derek Atkins wrote: This is interesting. It sounds like OAUTH, where the mini-webserver redirects to the bank's website for authentication

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-18 Thread Jean Laroche
Jean, This is interesting. It sounds like OAUTH, where the mini-webserver redirects to the bank's website for authentication and gets a token back, but OAUTH tokens are supposed to be single-use and expire. The fact that neither seems to be the case is a bit worrying. Does plaid provide the so

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-18 Thread Derek Atkins
> This is interesting. It sounds like OAUTH, where the mini-webserver > redirects to the bank's website for authentication and gets a token back, > but OAUTH tokens are supposed to be single-use and expire. The fact that > neither seems to be the case is a bit worrying. Does plaid provide the > sou

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-18 Thread John Ralls
> On Jun 18, 2020, at 8:54 AM, jean laroche wrote: > > On 6/18/2020 8:49 AM, Fross, Michael wrote: >> Thanks Jean for this...might be a great resource for all of us. It would be >> nice to not have to leverage a webserver on the client side and just call >> the API. Is that possible? Migh

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-18 Thread jean laroche
On 6/18/2020 8:49 AM, Fross, Michael wrote: Thanks Jean for this...might be a great resource for all of us.  It would be nice to not have to leverage a webserver on the client side and just call the API.  Is that possible?  Might be a lot simpler.  Then the only real task is converting to OFX o

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-18 Thread Fross, Michael
Thanks Jean for this...might be a great resource for all of us. It would be nice to not have to leverage a webserver on the client side and just call the API. Is that possible? Might be a lot simpler. Then the only real task is converting to OFX or CSV. Michael On Thu, Jun 18, 2020 at 10:46 A

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-18 Thread jean laroche
Well, I tested plaid last night. https://plaid.com/pricing It worked without a hitch with my bank (Patelco). It works like this: - You create an account with plaid and get API keys. - Do this once: Using python (in my case, but there are other options) you run a local web server on your machine (

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-17 Thread Stephen M. Butler
On 6/17/20 1:48 PM, Edward Doolittle wrote: > On 6/17/20 7:17 AM, Derek Atkins wrote: > > Liz writes: > > > >> When I got the code using wireshark, it was " 1 2 3 4" > > General: "1 2 3 4"?  That sounds like the code someone would use on > their > >  luggage! > > > > King: Remind me to cha

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-17 Thread jean laroche
On 6/17/2020 5:45 PM, Frank H. Ellenberger wrote: Is this one off this new Payment Service providers, which caused all the trouble with Online Banking in the recent year? "Give me your keys and I will sent your recent financial data whereever you want see them (and a few oter places)." I'm not

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-17 Thread Frank H. Ellenberger
Is this one off this new Payment Service providers, which caused all the trouble with Online Banking in the recent year? "Give me your keys and I will sent your recent financial data whereever you want see them (and a few oter places)." I think it depends on the clients behaviour. I know at least

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-17 Thread jean laroche
I'll make sure to report once I try it. I just got my keys, so I should be able to give that a shot pretty soon. J. On 6/17/2020 5:17 PM, John Ralls wrote: Yes, I expect Quicken will eventually succeed in freezing us out. I can't tell from 10 minutes exploring the Plaid website whether they s

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-17 Thread John Ralls
Yes, I expect Quicken will eventually succeed in freezing us out. I can't tell from 10 minutes exploring the Plaid website whether they support bank customers retrieving their account transactions. It's also pretty clear that they expect to be paid for their services. Their free account is for

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-17 Thread Edward Doolittle
On 6/17/20 7:17 AM, Derek Atkins wrote: > Liz writes: > >> When I got the code using wireshark, it was " 1 2 3 4" > General: "1 2 3 4"? That sounds like the code someone would use on their > luggage! > > King: Remind me to change the code on my luggage. > >> Liz > -derek Once had a frie

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-17 Thread David Carlson
😷 On Wed, Jun 17, 2020 at 10:59 AM Stephen M. Butler wrote: > On 6/17/20 7:17 AM, Derek Atkins wrote: > > Liz writes: > > > >> When I got the code using wireshark, it was " 1 2 3 4" > > General: "1 2 3 4"? That sounds like the code someone would use on their > > luggage! > > > > King:

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-17 Thread Stephen M. Butler
On 6/17/20 7:17 AM, Derek Atkins wrote: > Liz writes: > >> When I got the code using wireshark, it was " 1 2 3 4" > General: "1 2 3 4"? That sounds like the code someone would use on their > luggage! > > King: Remind me to change the code on my luggage. > >> Liz > -derek Once had a frie

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-17 Thread Derek Atkins
Liz writes: > When I got the code using wireshark, it was " 1 2 3 4" General: "1 2 3 4"? That sounds like the code someone would use on their luggage! King: Remind me to change the code on my luggage. > Liz -derek -- Derek Atkins 617-623-3745 de...@iht

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-17 Thread Liz
On Tue, 16 Jun 2020 20:08:17 -0700 John Ralls wrote: > I think the only really feasible workaround is to reverse-engineer > the Web Connect authentication. That would mean installing Quicken > and setting up and using OFX Web Connect while monitoring the traffic > with wireshark. > https://redfla

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-16 Thread jean laroche
Thanks John, I agree with you than trying to reverse engineer the Web Connect authentication is probably not going to happen. So does this mean that in the not-to-distant future we'll be left with two choices? Manual download or quicken? What about plaid? Does anybody have any experience with

Re: [GNC-dev] Patelco stopped supporting OFX... other options

2020-06-16 Thread John Ralls
> On Jun 16, 2020, at 2:23 PM, Jean Laroche wrote: > > People, > In the past week, my credit union (Patelco) retired their OFX server which > means it's no longer possible to download transactions using OFX. You can > still do it manually by logging into your account etc, but it's no longer

[GNC-dev] Patelco stopped supporting OFX... other options

2020-06-16 Thread Jean Laroche
People, In the past week, my credit union (Patelco) retired their OFX server which means it's no longer possible to download transactions using OFX. You can still do it manually by logging into your account etc, but it's no longer possible to use tools like ofxclient, ofxget and probably aqban