First production sweep of /import-documents (921 Bokio receipts) surfaced
two defects that together dropped 7 of 666 resolvable receipts:
- The idempotency key was company-wide (company_id, sha256), but the same
file content legitimately backs several verifikat (one arrende contract
attached to each year's arrende voucher, one insurance letter on two
vouchers). The second and later verifikat silently lost their underlag.
The key is now (company_id, sha256, journal_entry_id).
- Bokio's uploads list occasionally declares the wrong contentType (a JPEG
stored as image/png); magic-byte validation then correctly rejects the
mismatch, failing a perfectly good receipt. The importer now sniffs the
real format from the bytes (detectFileMagic, now exported from the
document service) and only falls back to the declared type when no
signature is recognised. The synthesised filename extension follows the
effective type.
Signed-off-by: Jonas Hagberg <jonas@lindan.se>
Jonas Hagberg
378611a2dc