boerse
All checks were successful
Deploy / deploy-staging (push) Successful in 6s
Deploy / deploy-production (push) Has been skipped

This commit is contained in:
2026-04-22 01:31:18 +02:00
parent a1bab34bd3
commit 91dc84d027
16 changed files with 1697 additions and 86 deletions

View File

@@ -0,0 +1,311 @@
<?php
declare(strict_types=1);
namespace Modules\Boersenchecker\Support;
use PDO;
use RuntimeException;
final class InstrumentPage
{
private PDO $pdo;
private array $user;
private bool $isAdmin;
private string $ownerSub;
private array $availableOwners = [];
private string $instrumentTable;
private string $positionTable;
private string $quoteTable;
private string $defaultReportCurrency;
private string $searchKeywords = '';
private array $searchResults = [];
private int $selectedInstrumentOverrideId = 0;
private InstrumentRegistry $instrumentRegistry;
public function __construct()
{
$this->pdo = \module_fn('boersenchecker', 'pdo');
\module_fn('boersenchecker', 'ensure_schema');
$this->user = \auth_user() ?? [];
$this->isAdmin = \auth_is_admin();
$this->ownerSub = trim((string) ($this->user['sub'] ?? 'local'));
$this->availableOwners = $this->buildAvailableOwners();
if ($this->isAdmin) {
$requestedOwner = trim((string) ($_GET['owner_sub'] ?? $_POST['owner_sub'] ?? ''));
if ($requestedOwner !== '' && isset($this->availableOwners[$requestedOwner])) {
$this->ownerSub = $requestedOwner;
}
}
$settings = \modules()->settings('boersenchecker');
$this->defaultReportCurrency = strtoupper(trim((string) ($settings['report_currency'] ?? 'EUR'))) ?: 'EUR';
$table = static fn (string $name): string => \module_fn('boersenchecker', 'table', $name);
$this->instrumentTable = $table('instruments');
$this->positionTable = $table('positions');
$this->quoteTable = $table('quotes');
$this->instrumentRegistry = new InstrumentRegistry(
$this->pdo,
$this->instrumentTable,
$this->positionTable,
$this->quoteTable,
);
}
public function handle(): array
{
$notice = null;
$error = null;
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
try {
$notice = $this->handlePost();
} catch (\Throwable $e) {
$error = $e->getMessage();
}
}
$instruments = $this->fetchInstruments();
$selectedInstrumentId = $this->selectedInstrumentOverrideId > 0
? $this->selectedInstrumentOverrideId
: (int) ($_GET['instrument_id'] ?? ($_POST['instrument_id'] ?? 0));
if ($selectedInstrumentId <= 0 && $instruments !== []) {
$selectedInstrumentId = (int) $instruments[0]['id'];
}
$selectedInstrument = null;
foreach ($instruments as $instrument) {
if ((int) $instrument['id'] === $selectedInstrumentId) {
$selectedInstrument = $instrument;
break;
}
}
$quotes = $selectedInstrumentId > 0 ? $this->fetchQuotes($selectedInstrumentId) : [];
$candidateName = trim((string) ($_GET['instrument_name_candidate'] ?? ''));
$candidateSymbol = trim((string) ($_GET['symbol_candidate'] ?? ''));
$candidateMarket = trim((string) ($_GET['market_candidate'] ?? ''));
$candidateCurrency = strtoupper(trim((string) ($_GET['quote_currency_candidate'] ?? $this->defaultReportCurrency))) ?: $this->defaultReportCurrency;
if ($selectedInstrument === null && ($candidateName !== '' || $candidateSymbol !== '' || $candidateMarket !== '')) {
$selectedInstrument = [
'id' => 0,
'name' => $candidateName,
'symbol' => $candidateSymbol,
'market' => $candidateMarket,
'quote_currency' => $candidateCurrency,
'isin' => '',
'wkn' => '',
];
}
return [
'notice' => $notice,
'error' => $error,
'isAdmin' => $this->isAdmin,
'ownerSub' => $this->ownerSub,
'availableOwners' => array_values($this->availableOwners),
'instruments' => $instruments,
'selectedInstrument' => $selectedInstrument,
'selectedInstrumentId' => $selectedInstrumentId,
'quotes' => $quotes,
'searchKeywords' => $this->searchKeywords,
'searchResults' => $this->searchResults,
'defaultReportCurrency' => $this->defaultReportCurrency,
];
}
private function handlePost(): string
{
$action = trim((string) ($_POST['action'] ?? ''));
return match ($action) {
'save_instrument' => $this->saveInstrument(),
'save_quote' => $this->saveQuote(),
'delete_quote' => $this->deleteQuote(),
'refresh_alpha_vantage_instrument' => $this->refreshInstrumentQuote(),
'search_symbol' => $this->searchSymbol(),
default => '',
};
}
private function fetchInstruments(): array
{
$stmt = $this->pdo->prepare(
'SELECT DISTINCT i.*
FROM ' . $this->instrumentTable . ' i
INNER JOIN ' . $this->positionTable . ' p ON p.instrument_id = i.id
WHERE p.owner_sub = :owner_sub
ORDER BY i.name ASC'
);
$stmt->execute(['owner_sub' => $this->ownerSub]);
return $stmt->fetchAll(PDO::FETCH_ASSOC) ?: [];
}
private function fetchQuotes(int $instrumentId): array
{
$stmt = $this->pdo->prepare(
'SELECT *
FROM ' . $this->quoteTable . '
WHERE instrument_id = :instrument_id
ORDER BY quoted_at DESC, created_at DESC, id DESC
LIMIT 30'
);
$stmt->execute(['instrument_id' => $instrumentId]);
return $stmt->fetchAll(PDO::FETCH_ASSOC) ?: [];
}
private function saveInstrument(): string
{
$instrumentId = (int) ($_POST['instrument_id'] ?? 0);
if ($instrumentId <= 0) {
throw new RuntimeException('Bitte eine Aktie auswaehlen.');
}
$this->assertInstrumentAccessible($instrumentId);
$resolvedId = $this->instrumentRegistry->save([
'id' => $instrumentId,
'name' => $_POST['instrument_name'] ?? '',
'symbol' => $_POST['symbol'] ?? '',
'isin' => $_POST['isin'] ?? '',
'wkn' => $_POST['wkn'] ?? '',
'market' => $_POST['market'] ?? '',
'quote_currency' => $_POST['quote_currency'] ?? $this->defaultReportCurrency,
]);
$this->selectedInstrumentOverrideId = $resolvedId;
return $resolvedId === $instrumentId
? 'Aktie aktualisiert.'
: 'Aktie aktualisiert und mit bestehendem Systemeintrag zusammengefuehrt.';
}
private function saveQuote(): string
{
$instrumentId = (int) ($_POST['instrument_id'] ?? 0);
$price = (float) ($_POST['quote_price'] ?? 0);
if ($instrumentId <= 0 || $price <= 0) {
throw new RuntimeException('Bitte Aktie und Kurs angeben.');
}
$this->assertInstrumentAccessible($instrumentId);
$stmt = $this->pdo->prepare(
'INSERT INTO ' . $this->quoteTable . ' (instrument_id, price, currency, quoted_at, source)
VALUES (:instrument_id, :price, :currency, :quoted_at, :source)'
);
$stmt->execute([
'instrument_id' => $instrumentId,
'price' => $price,
'currency' => strtoupper(trim((string) ($_POST['quote_currency'] ?? $this->defaultReportCurrency))) ?: $this->defaultReportCurrency,
'quoted_at' => date('Y-m-d H:i:s', strtotime((string) ($_POST['quoted_at'] ?? 'now')) ?: time()),
'source' => trim((string) ($_POST['quote_source'] ?? 'manual')) ?: 'manual',
]);
return 'Kurs gespeichert.';
}
private function deleteQuote(): string
{
$quoteId = (int) ($_POST['quote_id'] ?? 0);
if ($quoteId <= 0) {
throw new RuntimeException('Bitte einen Kurseintrag auswaehlen.');
}
$stmt = $this->pdo->prepare(
'SELECT q.instrument_id
FROM ' . $this->quoteTable . ' q
WHERE q.id = :id
LIMIT 1'
);
$stmt->execute(['id' => $quoteId]);
$instrumentId = (int) $stmt->fetchColumn();
$this->assertInstrumentAccessible($instrumentId);
$stmt = $this->pdo->prepare('DELETE FROM ' . $this->quoteTable . ' WHERE id = :id');
$stmt->execute(['id' => $quoteId]);
return 'Kurs geloescht.';
}
private function refreshInstrumentQuote(): string
{
$instrumentId = (int) ($_POST['instrument_id'] ?? 0);
$instrument = $this->assertInstrumentAccessible($instrumentId);
$symbol = trim((string) ($instrument['symbol'] ?? ''));
if ($symbol === '') {
throw new RuntimeException('Fuer diese Aktie ist kein Symbol hinterlegt.');
}
$apiResult = \module_fn('boersenchecker', 'alpha_vantage_fetch_quote', $symbol);
if (empty($apiResult['ok'])) {
throw new RuntimeException((string) ($apiResult['message'] ?? 'API-Abruf fehlgeschlagen.'));
}
$stmtInsert = $this->pdo->prepare(
'INSERT INTO ' . $this->quoteTable . ' (instrument_id, price, currency, quoted_at, source)
VALUES (:instrument_id, :price, :currency, :quoted_at, :source)'
);
$stmtInsert->execute([
'instrument_id' => $instrumentId,
'price' => (float) $apiResult['price'],
'currency' => strtoupper(trim((string) ($instrument['quote_currency'] ?? $this->defaultReportCurrency))) ?: $this->defaultReportCurrency,
'quoted_at' => (string) $apiResult['fetched_at'],
'source' => (string) $apiResult['source'],
]);
return 'API-Kurs gespeichert.';
}
private function searchSymbol(): string
{
$this->searchKeywords = trim((string) ($_POST['search_keywords'] ?? ''));
$result = \module_fn('boersenchecker', 'alpha_vantage_search_symbols', $this->searchKeywords);
$this->searchResults = is_array($result['results'] ?? null) ? $result['results'] : [];
if (empty($result['ok'])) {
throw new RuntimeException((string) ($result['message'] ?? 'Symbolsuche fehlgeschlagen.'));
}
return (string) ($result['message'] ?? 'Suche abgeschlossen.');
}
private function buildAvailableOwners(): array
{
$owners = [];
$currentSub = trim((string) ($this->user['sub'] ?? 'local'));
$owners[$currentSub] = [
'sub' => $currentSub,
'label' => trim((string) ($this->user['name'] ?? $this->user['email'] ?? $currentSub)) ?: $currentSub,
];
if (!$this->isAdmin) {
return $owners;
}
foreach (\modules()->knownAuthUsers() as $knownUser) {
$sub = trim((string) ($knownUser['sub'] ?? ''));
if ($sub === '') {
continue;
}
$label = trim((string) ($knownUser['name'] ?? $knownUser['email'] ?? $knownUser['username'] ?? $sub));
$owners[$sub] = ['sub' => $sub, 'label' => $label !== '' ? $label : $sub];
}
uasort($owners, static fn (array $left, array $right): int => strcmp((string) $left['label'], (string) $right['label']));
return $owners;
}
private function assertInstrumentAccessible(int $instrumentId): array
{
if ($instrumentId <= 0) {
throw new RuntimeException('Aktie nicht gefunden.');
}
$stmt = $this->pdo->prepare(
'SELECT DISTINCT i.*
FROM ' . $this->instrumentTable . ' i
INNER JOIN ' . $this->positionTable . ' p ON p.instrument_id = i.id
WHERE i.id = :id AND p.owner_sub = :owner_sub
LIMIT 1'
);
$stmt->execute([
'id' => $instrumentId,
'owner_sub' => $this->ownerSub,
]);
$instrument = $stmt->fetch(PDO::FETCH_ASSOC);
if (!is_array($instrument)) {
throw new RuntimeException('Aktie ist in diesem Benutzer-Scope nicht verfuegbar.');
}
return $instrument;
}
}