From 3fec9f2f4ec4c4e94c28dcba04bc60149a7dbacf Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Loi=CC=88c=20Delmaire?= <loic.delmaire@gmail.com>
Date: Tue, 7 Jan 2025 12:10:58 +0100
Subject: [PATCH 01/40] AuthorizationRequest::APIImpotParticulier does not need
 presence validation on scopes

Scopes presence validation is not required when specific_requirements
document is present. Moreover with custom validators, it covers all
cases.
---
 app/models/authorization_request/api_impot_particulier.rb     | 4 +---
 .../authorization_request/api_impot_particulier_sandbox.rb    | 4 +---
 2 files changed, 2 insertions(+), 6 deletions(-)

diff --git a/app/models/authorization_request/api_impot_particulier.rb b/app/models/authorization_request/api_impot_particulier.rb
index 2557d1035..e2c38b2fa 100644
--- a/app/models/authorization_request/api_impot_particulier.rb
+++ b/app/models/authorization_request/api_impot_particulier.rb
@@ -23,9 +23,7 @@ class AuthorizationRequest::APIImpotParticulier < AuthorizationRequest
   add_attribute :contact_technique_extra_email, format: { with: URI::MailTo::EMAIL_REGEXP }
   add_attribute :extra_organization_contact_name
 
-  add_scopes(validation: {
-    presence: true, if: -> { need_complete_validation?(:scopes) && !specific_requirements? }
-  })
+  add_scopes
 
   contact :contact_technique, validation_condition: ->(record) { record.need_complete_validation?(:contacts) }
 end
diff --git a/app/models/authorization_request/api_impot_particulier_sandbox.rb b/app/models/authorization_request/api_impot_particulier_sandbox.rb
index 0a218bafc..10a0a0fbc 100644
--- a/app/models/authorization_request/api_impot_particulier_sandbox.rb
+++ b/app/models/authorization_request/api_impot_particulier_sandbox.rb
@@ -13,9 +13,7 @@ class AuthorizationRequest::APIImpotParticulierSandbox < AuthorizationRequest
   add_attribute :contact_technique_extra_email, format: { with: URI::MailTo::EMAIL_REGEXP }
   add_attribute :extra_organization_contact_name
 
-  add_scopes(validation: {
-    presence: true, if: -> { need_complete_validation?(:scopes) }
-  })
+  add_scopes
 
   contact :contact_technique, validation_condition: ->(record) { record.need_complete_validation?(:contacts) }
 

From 716fba7725b882047c21386e7931e1624507d7be Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 22 Jan 2025 17:58:30 +0100
Subject: [PATCH 02/40] Authorization.validated relies on revoked boolean

Previous version excluded reopened authorization requests, which is not
valid.
---
 app/models/authorization.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/models/authorization.rb b/app/models/authorization.rb
index 1bc59f7eb..24f5228c5 100644
--- a/app/models/authorization.rb
+++ b/app/models/authorization.rb
@@ -36,7 +36,7 @@ class Authorization < ApplicationRecord
     through: :approve_authorization_request_event,
     source: :user
 
-  scope :validated, -> { joins(:request).where(authorization_requests: { state: 'validated' }) }
+  scope :validated, -> { where(revoked: false) }
 
   delegate :name, :kind, to: :request
 

From 807475e7c49a9d571cf5c249258d367f8a36ffe9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Tue, 4 Feb 2025 15:24:35 +0100
Subject: [PATCH 03/40] Harden revoked trait

---
 spec/factories/authorization_requests.rb | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/spec/factories/authorization_requests.rb b/spec/factories/authorization_requests.rb
index b1e5beb37..7eb6524b7 100644
--- a/spec/factories/authorization_requests.rb
+++ b/spec/factories/authorization_requests.rb
@@ -139,6 +139,10 @@
       after(:build) do |authorization_request|
         authorization_request.revocations << build(:revocation_of_authorization, authorization_request:)
       end
+
+      after(:create) do |authorization_request|
+        authorization_request.authorizations.update_all(revoked: true) # rubocop:disable Rails/SkipsModelValidations
+      end
     end
 
     trait :validated do

From 671b3251bf0f53b2da6194b7c19d966bb2b9f067 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 29 Jan 2025 08:35:39 +0100
Subject: [PATCH 04/40] Migration: old unused exclude reopenings

---
 app/migration/import/authorization_requests.rb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index 6fbeec0c5..35f37f56e 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -198,6 +198,7 @@ def whitelisted_enrollment?(enrollment_row)
 
   def old_unused?(enrollment_row)
     %w[refused revoked changes_requested draft archived].include?(enrollment_row['status']) &&
+      enrollment_row['last_validated_at'].blank? &&
       DateTime.parse(enrollment_row['created_at']) < DateTime.new(2022, 1, 1)
   end
 

From dc821366fa86c6c8739c40306411ab729294fb63 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Loi=CC=88c=20Delmaire?= <loic.delmaire@gmail.com>
Date: Tue, 7 Jan 2025 15:21:05 +0100
Subject: [PATCH 05/40] Migration: Enhance Import::AuthorizationRequests
 classes methods

Refactor some methods, prepare for DGFIP
---
 .../api_entreprise_attributes.rb              |  8 ----
 .../api_particulier_attributes.rb             |  4 --
 .../import/authorization_requests/base.rb     | 46 +++++++++++++++----
 3 files changed, 38 insertions(+), 20 deletions(-)

diff --git a/app/migration/import/authorization_requests/api_entreprise_attributes.rb b/app/migration/import/authorization_requests/api_entreprise_attributes.rb
index 3ad6f6d28..7c9013b13 100644
--- a/app/migration/import/authorization_requests/api_entreprise_attributes.rb
+++ b/app/migration/import/authorization_requests/api_entreprise_attributes.rb
@@ -29,14 +29,6 @@ def affect_potential_legal_document
     end
   end
 
-  def affect_form_uid
-    form_uid = demarche_to_form_uid
-
-    return if form_uid.blank?
-
-    authorization_request.form_uid = form_uid
-  end
-
   def demarche_to_form_uid
     case enrollment_row['demarche']
     when 'marches_publics'
diff --git a/app/migration/import/authorization_requests/api_particulier_attributes.rb b/app/migration/import/authorization_requests/api_particulier_attributes.rb
index 40c296492..ff5f42de0 100644
--- a/app/migration/import/authorization_requests/api_particulier_attributes.rb
+++ b/app/migration/import/authorization_requests/api_particulier_attributes.rb
@@ -56,10 +56,6 @@ def affect_duree_conservation_donnees_caractere_personnel_justification
     authorization_request.duree_conservation_donnees_caractere_personnel_justification = 'Non renseigné'
   end
 
-  def affect_form_uid
-    authorization_request.form_uid = demarche_to_form_uid
-  end
-
   def demarche_to_form_uid
     case enrollment_row['demarche']
     when 'arpege-concerto'
diff --git a/app/migration/import/authorization_requests/base.rb b/app/migration/import/authorization_requests/base.rb
index 439077a5d..ae5f3edc9 100644
--- a/app/migration/import/authorization_requests/base.rb
+++ b/app/migration/import/authorization_requests/base.rb
@@ -59,6 +59,29 @@ def affect_attributes
     end
   end
 
+  def affect_potential_legal_document
+    return if authorization_request.cadre_juridique_url.present?
+
+    affect_potential_document('Document::LegalBasis', 'cadre_juridique_document')
+  end
+
+  def affect_potential_document(kind, field)
+    row = csv('documents').find { |row| row['attachable_id'] == enrollment_row['id'] && row['type'] == kind }
+
+    return false unless row
+
+    attach_file(field, row)
+    true
+  end
+
+  def affect_form_uid
+    form_uid = demarche_to_form_uid
+
+    return if form_uid.blank?
+
+    authorization_request.form_uid = form_uid
+  end
+
   def find_team_member_by_type(type)
     team_member = team_members.find { |team_member| team_member['type'] == type }
 
@@ -189,17 +212,24 @@ def warn_row!(kind)
   end
 
   def attach_file(kind, row_data)
-    filename, io = extract_attachable(row_data)
+    filename, io = extract_attachable(kind, row_data)
 
     authorization_request.public_send("#{kind}").attach(io:, filename:)
   end
 
-  def extract_attachable(row_data)
+  def extract_attachable(kind, row_data)
     if ENV['LOCAL'] == 'true'
-      [
-        'dummy.pdf',
-        dummy_pdf_as_io,
-      ]
+      if kind == 'specific_requirements_document'
+        [
+          'dummy.xlsx',
+          dummy_file_as_io('xlsx'),
+        ]
+      else
+        [
+          'dummy.pdf',
+          dummy_file_as_io('pdf'),
+        ]
+      end
     else
       [
         row_data['attachment'],
@@ -208,8 +238,8 @@ def extract_attachable(row_data)
     end
   end
 
-  def dummy_pdf_as_io
-    Rails.root.join('spec', 'fixtures', 'dummy.pdf').open
+  def dummy_file_as_io(extension)
+    Rails.root.join('spec', 'fixtures', "dummy.#{extension}").open
   end
 
   def extract_io(row_data)

From 0006e7bc89de8e8996299c0adb53d3ed900655de Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Loi=CC=88c=20Delmaire?= <loic.delmaire@gmail.com>
Date: Tue, 7 Jan 2025 15:39:35 +0100
Subject: [PATCH 06/40] Migration: enhance debugging by putting enrollment
 status

---
 app/migration/import/authorization_requests.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index 35f37f56e..3fecc0d78 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -34,7 +34,7 @@ def extract(enrollment_row)
       authorization_request.save!
       @models << authorization_request
     rescue ActiveRecord::RecordInvalid => e
-      log("DataPass: https://datapass.api.gouv.fr/#{enrollment_row['target_api'].gsub('_', '-')}/#{enrollment_row['id']}")
+      log("DataPass: https://datapass.api.gouv.fr/#{enrollment_row['target_api'].gsub('_', '-')}/#{enrollment_row['id']} (status: #{enrollment_row['status']})")
       log("Errors: #{authorization_request.errors.full_messages.join("\n")}")
 
       byebug

From a2b380a1eacfca8a28406d631f79b22872c87885 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Loi=CC=88c=20Delmaire?= <loic.delmaire@gmail.com>
Date: Tue, 7 Jan 2025 15:40:03 +0100
Subject: [PATCH 07/40] Migration: Introduce
 Import::AuthorizationRequests::APIImpotParticulierSandboxAttributes

---
 ...pi_impot_particulier_sandbox_attributes.rb | 110 ++++++++++++++++++
 1 file changed, 110 insertions(+)
 create mode 100644 app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb

diff --git a/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb b/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb
new file mode 100644
index 000000000..032cd2d6d
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb
@@ -0,0 +1,110 @@
+class Import::AuthorizationRequests::APIImpotParticulierSandboxAttributes < Import::AuthorizationRequests::Base
+  def affect_data
+    affect_scopes
+    affect_attributes
+    affect_contacts
+    affect_potential_legal_document
+    affect_potential_specific_requirements
+    affect_modalities
+    # affect_form_uid
+    handle_incompatible_scopes_error
+  end
+
+  def handle_incompatible_scopes_error
+    return if authorization_request.valid?
+    return unless authorization_request.errors[:scopes].any?
+
+    skip_row!("invalid_scopes_in_status_#{authorization_request.state}")
+  end
+
+  def affect_potential_specific_requirements
+    return unless affect_potential_document('Document::ExpressionBesoinSpecifique', 'specific_requirements_document')
+
+    authorization_request.specific_requirements = '1'
+  end
+
+  def affect_modalities
+    additional_content = JSON.parse(enrollment_row['additional_content']) || {}
+    authorization_request.modalities ||= []
+
+    {
+      'acces_spi' => 'with_spi',
+      'acces_etat_civil' => 'with_etat_civil'
+    }.each do |from, to|
+      next unless additional_content[from]
+
+      authorization_request.modalities = authorization_request.modalities.concat([to])
+    end
+
+    authorization_request.modalities = authorization_request.modalities.uniq
+
+    return if authorization_request.modalities.present?
+    return if %w[refused validated].exclude?(authorization_request.state)
+
+    skip_row!("no_modalities_in_status_#{authorization_request.state}")
+  end
+
+  def affect_contacts
+    {
+      'responsable_technique' => 'contact_technique',
+      'responsable_traitement' => 'responsable_traitement',
+      'delegue_protection_donnees' => 'delegue_protection_donnees',
+    }.each do |from_contact, to_contact|
+      affect_contact(from_contact, to_contact)
+    end
+  end
+
+  def demarche_to_form_uid
+    case enrollment_row['demarche']
+    when 'marches_publics'
+      'api-entreprise-marches-publics'
+    when 'aides_publiques'
+      'api-entreprise-aides-publiques'
+    when 'subventions_associations'
+      'api-entreprise-subventions-associations'
+    when 'portail_gru'
+      'api-entreprise-portail-gru-preremplissage'
+    when 'portail_gru_instruction'
+      'api-entreprise-portail-gru-instruction'
+    when 'detection_fraude'
+      'api-entreprise-detection-fraude'
+    when 'e_attestations'
+      'api-entreprise-e-attestations'
+    when 'provigis'
+      'api-entreprise-provigis'
+    when 'achat_solution'
+      'api-entreprise-achat-solution'
+    when 'atexo'
+      'api-entreprise-atexo'
+    when 'mgdis'
+      'api-entreprise-mgdis'
+    when 'setec'
+      'api-entreprise-setec-atexo'
+    when 'editeur'
+      'api-entreprise-editeur'
+    end
+  end
+
+  def recent_validated_enrollment_exists?
+    bool = database.execute('select id from enrollments where copied_from_enrollment_id = ? and status = "validated" limit 1;', enrollment_row['id']).any?
+    database.close
+    bool
+  end
+
+  def attributes_mapping
+    {
+      "intitule" => "intitule",
+      "description" => "description",
+      "fondement_juridique_title" => "cadre_juridique_nature",
+      "fondement_juridique_url" => "cadre_juridique_url",
+      "date_mise_en_production" => "date_prevue_mise_en_production",
+      "data_recipients" => "destinataire_donnees_caractere_personnel",
+      "data_retention_period" => "duree_conservation_donnees_caractere_personnel",
+      "data_retention_comment" => "duree_conservation_donnees_caractere_personnel_justification",
+    }
+  end
+
+  def attributes_with_possible_null_values
+    ['destinataire_donnees_caractere_personnel']
+  end
+end

From 97ac46056c407e717d444fbddb16da05965131ed Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Loi=CC=88c=20Delmaire?= <loic.delmaire@gmail.com>
Date: Tue, 7 Jan 2025 15:40:45 +0100
Subject: [PATCH 08/40] Migration: wip main scripts

---
 app/migration/import/authorization_requests.rb |  1 +
 app/migration/local_reset.sh                   |  2 +-
 app/migration/local_run.sh                     |  4 ++--
 app/migration/main_import.rb                   | 16 +++++-----------
 4 files changed, 9 insertions(+), 14 deletions(-)

diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index 3fecc0d78..4366ed871 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -226,6 +226,7 @@ def from_target_api_to_type(enrollment)
       'hubee_portail_dila' => 'hubee_dila',
       'api_entreprise' => 'api_entreprise',
       'api_particulier' => 'api_particulier',
+      'api_impot_particulier_sandbox' => 'api_impot_particulier_sandbox',
     }[enrollment['target_api']].try(:classify)
   end
 
diff --git a/app/migration/local_reset.sh b/app/migration/local_reset.sh
index e9184ad3b..8c60d9b29 100755
--- a/app/migration/local_reset.sh
+++ b/app/migration/local_reset.sh
@@ -6,4 +6,4 @@ rm -f app/migration/dumps/*.json
 rm -f app/migration/dumps/data.db
 ./app/migration/export_v1.sh
 ./app/migration/export_v2.sh
-./app/migration/export_hubee.sh
+# ./app/migration/export_hubee.sh
diff --git a/app/migration/local_run.sh b/app/migration/local_run.sh
index a4d91ad89..5e081c0bb 100755
--- a/app/migration/local_run.sh
+++ b/app/migration/local_run.sh
@@ -7,8 +7,8 @@ LOCAL=true bundle exec rails runner "ImportDataInLocalDb.new.perform(delete_db_f
 
 if [ $# -eq 1 ]; then
   echo "Run for $1 only"
-  DUMP=false LOCAL=true bundle exec rails runner "MainImport.new(authorization_request_ids: [$1]).perform"
+  DUMP=true LOCAL=true bundle exec rails runner "MainImport.new(authorization_request_ids: [$1]).perform"
 else
   echo "Run for all"
-  DUMP=false LOCAL=true bundle exec rails runner "MainImport.new.perform"
+  DUMP=true LOCAL=true bundle exec rails runner "MainImport.new.perform"
 fi
diff --git a/app/migration/main_import.rb b/app/migration/main_import.rb
index 7519fc549..d4d5da386 100644
--- a/app/migration/main_import.rb
+++ b/app/migration/main_import.rb
@@ -12,9 +12,9 @@ def initialize(authorization_request_ids: [])
   end
 
   def perform
-    organizations = import(:organizations, { load_from_sql: ENV['DUMP'] == 'true' })
-    import(:users, { load_from_sql: ENV['DUMP'] == 'true' })
-    authorization_requests = import(:authorization_requests, { load_from_sql: ENV['DUMP'] == 'true' })
+    import(:organizations, { load_from_sql: true })
+    import(:users, { load_from_sql: true })
+    authorization_requests = import(:authorization_requests, { load_from_sql: false })
 
     if types_to_import.any?
       valid_authorization_request_ids = AuthorizationRequest.where(id: authorization_requests.pluck(:id), type: types_to_import).pluck(:id)
@@ -34,8 +34,6 @@ def perform
 
   def types_to_import
     %w[
-      AuthorizationRequest::HubEEDila
-      AuthorizationRequest::HubEECertDC
     ]
   end
 
@@ -88,14 +86,10 @@ def global_options
     {
       authorization_requests_filter: ->(enrollment_row) do
         %w[
-          5
-          26
-          129
-          25590
-          54115
         ].exclude?(enrollment_row['id'])
       end,
-      authorization_requests_sql_where: 'target_api in (\'hubee_portail\', \'hubee_portail_dila\') order by id desc',
+      authorization_requests_sql_where: 'target_api in (\'api_impot_particulier_sandbox\') order by id desc',
+      # authorization_requests_sql_where: 'target_api not in (\'hubee_portail\', \'hubee_portail_dila\', \'api_entreprise\', \'api_particulier\') order by id desc',
       skipped: @skipped,
       warned: @warned,
     }

From a22cc5775ba3ebb0cd3a8c12035a209e5d29c599 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Loi=CC=88c=20Delmaire?= <loic.delmaire@gmail.com>
Date: Wed, 8 Jan 2025 13:31:09 +0100
Subject: [PATCH 09/40] Migration: Introduce
 Import::AuthorizationRequests::APIImpotParticulierAttributes

---
 .../import/authorization_requests.rb          |  5 +-
 .../api_impot_particulier_attributes.rb       | 67 +++++++++++++++++++
 ...pi_impot_particulier_sandbox_attributes.rb |  5 +-
 3 files changed, 74 insertions(+), 3 deletions(-)
 create mode 100644 app/migration/import/authorization_requests/api_impot_particulier_attributes.rb

diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index 4366ed871..b1dfe3bec 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -16,7 +16,7 @@ def extract(enrollment_row)
     authorization_request.applicant = user
     authorization_request.organization_id = fetch_organization(user, enrollment_row).try(:id)
 
-    authorization_request.form_uid = fetch_form(authorization_request).id
+    authorization_request.form_uid = fetch_form(authorization_request).try(:id)
     authorization_request.state = enrollment_row['status']
     authorization_request.external_provider_id = enrollment_row['external_provider_id']
     authorization_request.copied_from_request = AuthorizationRequest.find(enrollment_row['copied_from_enrollment_id']) if enrollment_row['copied_from_enrollment_id'] && AuthorizationRequest.exists?(enrollment_row['copied_from_enrollment_id'])
@@ -28,7 +28,7 @@ def extract(enrollment_row)
       )
     end
 
-    handle_authorization_request_type_specific_fields(authorization_request, enrollment_row)
+    authorization_request = handle_authorization_request_type_specific_fields(authorization_request, enrollment_row)
 
     begin
       authorization_request.save!
@@ -227,6 +227,7 @@ def from_target_api_to_type(enrollment)
       'api_entreprise' => 'api_entreprise',
       'api_particulier' => 'api_particulier',
       'api_impot_particulier_sandbox' => 'api_impot_particulier_sandbox',
+      'api_impot_particulier_production' => 'api_impot_particulier',
     }[enrollment['target_api']].try(:classify)
   end
 
diff --git a/app/migration/import/authorization_requests/api_impot_particulier_attributes.rb b/app/migration/import/authorization_requests/api_impot_particulier_attributes.rb
new file mode 100644
index 000000000..8bf0db286
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_impot_particulier_attributes.rb
@@ -0,0 +1,67 @@
+class Import::AuthorizationRequests::APIImpotParticulierAttributes < Import::AuthorizationRequests::APIImpotParticulierSandboxAttributes
+  def affect_data
+    migrate_from_sandbox_to_production!
+
+    affect_form_uid
+
+    affect_operational_acceptance
+    affect_safety_certification
+    affect_volumetrie
+
+    authorization_request.state = enrollment_row['status']
+  end
+
+  private
+
+  def migrate_from_sandbox_to_production!
+    @authorization_request = AuthorizationRequest.find(enrollment_row['previous_enrollment_id'])
+
+    authorization_request.update!(type: 'AuthorizationRequest::APIImpotParticulier', state: 'draft', id: enrollment_row['id'])
+
+    ActiveStorage::Attachment.where(record_type: 'AuthorizationRequest', record_id: enrollment_row['previous_enrollment_id']).update_all(record_id: enrollment_row['id'])
+
+    @authorization_request = AuthorizationRequest.find(enrollment_row['id'])
+  rescue ActiveRecord::RecordNotFound
+    skip_row!(:sandbox_missing)
+  end
+
+  # FIXME
+  def affect_form_uid
+    authorization_request.form_uid = authorization_request.definition.available_forms.first.id
+  end
+
+  def affect_operational_acceptance
+    authorization_request.operational_acceptance_done = additional_content['recette_fonctionnelle'] ? '1' : nil
+  end
+
+  def affect_safety_certification
+    {
+      'autorite_homologation_nom' => 'safety_certification_authority_name',
+      'autorite_homologation_fonction' => 'safety_certification_authority_function',
+      'date_homologation' => 'safety_certification_begin_date',
+      'date_fin_homologation' => 'safety_certification_end_date'
+    }.each do |from, to|
+      authorization_request.public_send("#{to}=", additional_content[from])
+    end
+
+    affect_potential_document('Document::DecisionHomologation', 'safety_certification_document')
+
+    return if authorization_request.safety_certification_begin_date.blank? || authorization_request.safety_certification_end_date.blank?
+
+    begin
+      return unless Date.parse(authorization_request.safety_certification_begin_date) == Date.parse(authorization_request.safety_certification_end_date)
+    rescue TypeError
+      return
+    end
+
+    authorization_request.safety_certification_end_date = (Date.parse(authorization_request.safety_certification_begin_date) + 1.day).to_s
+  end
+
+  def affect_volumetrie
+    authorization_request.volumetrie_appels_par_minute = additional_content['volumetrie_appels_par_minute'].try(:to_i)
+
+    return if authorization_request.volumetrie_appels_par_minute == 50
+
+    authorization_request.volumetrie_justification = 'Non renseignée'
+  end
+end
diff --git a/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb b/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb
index 032cd2d6d..56f3c2658 100644
--- a/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb
+++ b/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb
@@ -24,7 +24,6 @@ def affect_potential_specific_requirements
   end
 
   def affect_modalities
-    additional_content = JSON.parse(enrollment_row['additional_content']) || {}
     authorization_request.modalities ||= []
 
     {
@@ -107,4 +106,8 @@ def attributes_mapping
   def attributes_with_possible_null_values
     ['destinataire_donnees_caractere_personnel']
   end
+
+  def additional_content
+    @additional_content ||= JSON.parse(enrollment_row['additional_content'])
+  end
 end

From 697f83849d52d56cd0cba4679d7f82a69731d2cd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Loi=CC=88c=20Delmaire?= <loic.delmaire@gmail.com>
Date: Wed, 15 Jan 2025 10:30:25 +0100
Subject: [PATCH 10/40] Migration: print skipped while loading

---
 app/migration/import/base.rb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/migration/import/base.rb b/app/migration/import/base.rb
index ac0ba5897..b8956c51c 100644
--- a/app/migration/import/base.rb
+++ b/app/migration/import/base.rb
@@ -77,6 +77,7 @@ def load_from_csv!
         extract(row)
         print '.'
       rescue Import::AuthorizationRequests::Base::SkipRow => e
+        print 's'
         options[:skipped] << e
       rescue => e
         log(" ERROR: #{e.message}")

From ab7c8874e8755da7b9f9e1b619ce1d5e1d237577 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Loi=CC=88c=20Delmaire?= <loic.delmaire@gmail.com>
Date: Wed, 15 Jan 2025 10:32:07 +0100
Subject: [PATCH 11/40] Migration: Harden Import::AuthorizationRequests classes

---
 .../import/authorization_requests.rb          |  8 ++++++-
 .../api_entreprise_attributes.rb              |  6 -----
 ...pi_impot_particulier_sandbox_attributes.rb | 10 ---------
 .../import/authorization_requests/base.rb     | 22 ++++++++++++++++---
 4 files changed, 26 insertions(+), 20 deletions(-)

diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index b1dfe3bec..8c1a96752 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -16,7 +16,7 @@ def extract(enrollment_row)
     authorization_request.applicant = user
     authorization_request.organization_id = fetch_organization(user, enrollment_row).try(:id)
 
-    authorization_request.form_uid = fetch_form(authorization_request).try(:id)
+    authorization_request.form_uid ||= fetch_form(authorization_request).try(:id)
     authorization_request.state = enrollment_row['status']
     authorization_request.external_provider_id = enrollment_row['external_provider_id']
     authorization_request.copied_from_request = AuthorizationRequest.find(enrollment_row['copied_from_enrollment_id']) if enrollment_row['copied_from_enrollment_id'] && AuthorizationRequest.exists?(enrollment_row['copied_from_enrollment_id'])
@@ -40,6 +40,11 @@ def extract(enrollment_row)
       byebug
     rescue ActiveStorage::IntegrityError => e
       byebug
+    ensure
+      ($dummy_files || {}).each do |key, value|
+        value.close
+      end
+      $dummy_files = nil
     end
   end
 
@@ -228,6 +233,7 @@ def from_target_api_to_type(enrollment)
       'api_particulier' => 'api_particulier',
       'api_impot_particulier_sandbox' => 'api_impot_particulier_sandbox',
       'api_impot_particulier_production' => 'api_impot_particulier',
+      'franceconnect' => 'france_connect',
     }[enrollment['target_api']].try(:classify)
   end
 
diff --git a/app/migration/import/authorization_requests/api_entreprise_attributes.rb b/app/migration/import/authorization_requests/api_entreprise_attributes.rb
index 7c9013b13..f0e6c635a 100644
--- a/app/migration/import/authorization_requests/api_entreprise_attributes.rb
+++ b/app/migration/import/authorization_requests/api_entreprise_attributes.rb
@@ -66,12 +66,6 @@ def affect_not_specified_to_duree_conservation
     authorization_request.duree_conservation_donnees_caractere_personnel = 'Non renseigné'
   end
 
-  def recent_validated_enrollment_exists?
-    bool = database.execute('select id from enrollments where copied_from_enrollment_id = ? and status = "validated" limit 1;', enrollment_row['id']).any?
-    database.close
-    bool
-  end
-
   def attributes_mapping
     {
       "intitule" => "intitule",
diff --git a/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb b/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb
index 56f3c2658..9a1606f58 100644
--- a/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb
+++ b/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb
@@ -84,12 +84,6 @@ def demarche_to_form_uid
     end
   end
 
-  def recent_validated_enrollment_exists?
-    bool = database.execute('select id from enrollments where copied_from_enrollment_id = ? and status = "validated" limit 1;', enrollment_row['id']).any?
-    database.close
-    bool
-  end
-
   def attributes_mapping
     {
       "intitule" => "intitule",
@@ -106,8 +100,4 @@ def attributes_mapping
   def attributes_with_possible_null_values
     ['destinataire_donnees_caractere_personnel']
   end
-
-  def additional_content
-    @additional_content ||= JSON.parse(enrollment_row['additional_content'])
-  end
 end
diff --git a/app/migration/import/authorization_requests/base.rb b/app/migration/import/authorization_requests/base.rb
index ae5f3edc9..513c4c6cc 100644
--- a/app/migration/import/authorization_requests/base.rb
+++ b/app/migration/import/authorization_requests/base.rb
@@ -29,7 +29,11 @@ def initialize(authorization_request, enrollment_row, team_members, warned, all_
   end
 
   def perform
-    affect_data
+    begin
+      affect_data
+    ensure
+      database.close
+    end
 
     authorization_request
   end
@@ -168,7 +172,7 @@ def affect_contact(from_contact, to_contact)
         end
       end
 
-      byebug
+      # byebug
 
       if recent_validated_enrollment_exists?
         skip_row!('incomplete_contact_data_with_new_enrollments')
@@ -217,6 +221,10 @@ def attach_file(kind, row_data)
     authorization_request.public_send("#{kind}").attach(io:, filename:)
   end
 
+  def additional_content
+    @additional_content ||= JSON.parse(enrollment_row['additional_content'])
+  end
+
   def extract_attachable(kind, row_data)
     if ENV['LOCAL'] == 'true'
       if kind == 'specific_requirements_document'
@@ -239,7 +247,15 @@ def extract_attachable(kind, row_data)
   end
 
   def dummy_file_as_io(extension)
-    Rails.root.join('spec', 'fixtures', "dummy.#{extension}").open
+    $dummy_files ||= {}
+    $dummy_files[extension] ||= Rails.root.join('spec', 'fixtures', "dummy.#{extension}").open
+    $dummy_files[extension]
+  end
+
+  def recent_validated_enrollment_exists?
+    bool = database.execute('select id from enrollments where copied_from_enrollment_id = ? and status = "validated" limit 1;', enrollment_row['id']).any?
+    database.close
+    bool
   end
 
   def extract_io(row_data)

From 2486f85968948fcc1273906baf001ed1306f16b3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Loi=CC=88c=20Delmaire?= <loic.delmaire@gmail.com>
Date: Wed, 15 Jan 2025 10:32:11 +0100
Subject: [PATCH 12/40] Migration: Introduce
 Import::AuthorizationRequests::FranceConnectAttributes

---
 .../france_connect_attributes.rb              | 77 +++++++++++++++++++
 1 file changed, 77 insertions(+)
 create mode 100644 app/migration/import/authorization_requests/france_connect_attributes.rb

diff --git a/app/migration/import/authorization_requests/france_connect_attributes.rb b/app/migration/import/authorization_requests/france_connect_attributes.rb
new file mode 100644
index 000000000..77d3806ab
--- /dev/null
+++ b/app/migration/import/authorization_requests/france_connect_attributes.rb
@@ -0,0 +1,77 @@
+class Import::AuthorizationRequests::FranceConnectAttributes < Import::AuthorizationRequests::Base
+  def affect_data
+    affect_scopes
+    affect_attributes
+    affect_contacts
+    affect_potential_legal_document
+    # affect_not_specified_to_duree_conservation
+    affect_form_uid
+    authorization_request.france_connect_eidas = extract_eidas
+
+    return if authorization_request.valid?
+
+    skip_row!(:invalid_cadre_juridique) if authorization_request.errors[:cadre_juridique_url].any?
+  end
+
+  def affect_contacts
+    {
+      'responsable_technique' => 'contact_technique',
+      'responsable_traitement' => 'responsable_traitement',
+      'delegue_protection_donnees' => 'delegue_protection_donnees',
+    }.each do |from_contact, to_contact|
+      affect_contact(from_contact, to_contact)
+    end
+  end
+
+  def affect_potential_legal_document
+    return if authorization_request.cadre_juridique_url.present?
+
+    row = csv('documents').find { |row| row['attachable_id'] == enrollment_row['id'] && row['type'] == 'Document::LegalBasis' }
+
+    if row
+      attach_file('cadre_juridique_document', row)
+    end
+  end
+
+  def extract_eidas
+    case additional_content['eidas_level']
+    when '1'
+      'eidas_1'
+    when '2'
+      'eidas_2'
+    else
+      skip_row!(:eidas_missing)
+    end
+  end
+
+  def demarche_to_form_uid
+    case enrollment_row['demarche']
+    when 'collectivite'
+      'france-connect-collectivite-administration'
+    when 'epermis'
+      'france-connect-collectivite-epermis'
+    when 'sns'
+      'france-connect-sante'
+    else
+      'france-connect'
+    end
+  end
+
+  def attributes_mapping
+    {
+      "intitule" => "intitule",
+      "description" => "description",
+      "fondement_juridique_title" => "cadre_juridique_nature",
+      "fondement_juridique_url" => "cadre_juridique_url",
+      "date_mise_en_production" => "date_prevue_mise_en_production",
+      "volumetrie_approximative" => "volumetrie_approximative",
+      "data_recipients" => "destinataire_donnees_caractere_personnel",
+      "data_retention_period" => "duree_conservation_donnees_caractere_personnel",
+      "data_retention_comment" => "duree_conservation_donnees_caractere_personnel_justification",
+    }
+  end
+
+  def attributes_with_possible_null_values
+    ['duree_conservation_donnees_caractere_personnel_justification']
+  end
+end

From cc12619a4bdb23229b1d2f587da01e53743744b8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <skelz0r@gmail.com>
Date: Tue, 21 Jan 2025 11:54:48 +0100
Subject: [PATCH 13/40] Migration: FC no eidas => eidas 1

---
 .../authorization_requests/france_connect_attributes.rb       | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/app/migration/import/authorization_requests/france_connect_attributes.rb b/app/migration/import/authorization_requests/france_connect_attributes.rb
index 77d3806ab..dbb55bc4e 100644
--- a/app/migration/import/authorization_requests/france_connect_attributes.rb
+++ b/app/migration/import/authorization_requests/france_connect_attributes.rb
@@ -35,12 +35,10 @@ def affect_potential_legal_document
 
   def extract_eidas
     case additional_content['eidas_level']
-    when '1'
-      'eidas_1'
     when '2'
       'eidas_2'
     else
-      skip_row!(:eidas_missing)
+      'eidas_1'
     end
   end
 

From dad4a0a9ea304cd5cb72a36a9e8c3db963a456a8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <skelz0r@gmail.com>
Date: Tue, 21 Jan 2025 10:07:14 +0100
Subject: [PATCH 14/40] Migration: Harden Import::AuthorizationRequests
 organization build

---
 .../import/authorization_requests.rb          | 40 +++++++++++++++----
 1 file changed, 33 insertions(+), 7 deletions(-)

diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index 8c1a96752..3a51ee646 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -103,9 +103,25 @@ def fetch_organization(user, enrollment_row)
       '77564141800014' => '77564141800089',
     }[enrollment_row['siret']]
 
-    return if new_potential_siret.blank?
+    if new_potential_siret.present?
+      user.organizations.find_by(siret: new_potential_siret)
+    else
+      organization = build_organization(enrollment_row['siret'])
+
+      begin
+        organization.save!
+      rescue ActiveRecord::RecordInvalid => e
+        if e.record.errors.include?(:siret)
+          raise Import::AuthorizationRequests::Base::SkipRow.new(:invalid_siret_for_unknown_user_and_organization, id: enrollment_row['id'], target_api: enrollment_row['target_api'])
+        else
+          raise
+        end
+      end
 
-    user.organizations.find_by(siret: new_potential_siret)
+      user.organizations << organization
+
+      organization
+    end
   end
 
   def authorization_ids_where_user_belongs_to_organization
@@ -143,11 +159,8 @@ def try_to_create_user!(enrollment_row, demandeur)
       )
     )
 
-    organization = Organization.find_or_initialize_by(siret: enrollment_row['siret'])
-    organization.assign_attributes(
-      mon_compte_pro_payload: { siret: enrollment_row['siret'], manual_creation: true },
-      last_mon_compte_pro_updated_at: DateTime.now,
-    )
+    organization = build_organization(enrollment_row['siret'])
+
     begin
       organization.save!
     rescue ActiveRecord::RecordInvalid => e
@@ -166,6 +179,19 @@ def try_to_create_user!(enrollment_row, demandeur)
     user
   end
 
+  def build_organization(siret)
+    organization = Organization.find_or_initialize_by(siret: siret)
+
+    return organization if organization.persisted?
+
+    organization.assign_attributes(
+      mon_compte_pro_payload: { siret:, manual_creation: true },
+      last_mon_compte_pro_updated_at: DateTime.now,
+    )
+
+    organization
+  end
+
   def fetch_form(authorization_request)
     if authorization_request.definition.available_forms.one?
       authorization_request.definition.available_forms.first

From 000f375a3f1bb676655df9187f52c904420f7301 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <skelz0r@gmail.com>
Date: Tue, 21 Jan 2025 19:37:27 +0100
Subject: [PATCH 15/40] Migration: add disclaimer on reopening authorizations
 for invalid request from migration

---
 app/views/reopen_authorizations/new.html.erb | 6 ++++++
 config/locales/fr.yml                        | 3 +++
 2 files changed, 9 insertions(+)

diff --git a/app/views/reopen_authorizations/new.html.erb b/app/views/reopen_authorizations/new.html.erb
index 1e333bd51..c7151a009 100644
--- a/app/views/reopen_authorizations/new.html.erb
+++ b/app/views/reopen_authorizations/new.html.erb
@@ -10,6 +10,12 @@
           <p>
             <%= t('.disclaimer').html_safe %>
           </p>
+
+          <% unless @authorization.request.valid? %>
+            <p class="fr-error">
+              <%= t('.invalid_request') %>
+            </p>
+          <% end %>
         </div>
 
         <div class="fr-modal__footer">
diff --git a/config/locales/fr.yml b/config/locales/fr.yml
index 962ea7356..a2ecef37d 100644
--- a/config/locales/fr.yml
+++ b/config/locales/fr.yml
@@ -450,6 +450,9 @@ fr:
         <br />
         <br />
         Votre habilitation restera valide quelque soit l'issue de la demande de mise à jour.
+      invalid_request: |
+        Attention, vous réouvrez une demande qui possède des données invalides ou manquantes, vous pourrez avoir
+        des erreurs inattendues, si c'était le cas merci de contacter le support
       cancel: Annuler
       reopen: Mettre à jour l'habilitation
     create:

From e79ff0cae2276c6cf5388d6f7f038b633cd1980f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 22 Jan 2025 10:24:28 +0100
Subject: [PATCH 16/40] Migration: harden imports on rows warn/skip

---
 app/migration/import/authorization_requests.rb  |  9 ++++++---
 .../import/authorization_requests/base.rb       | 17 +++++++++++++----
 2 files changed, 19 insertions(+), 7 deletions(-)

diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index 3a51ee646..357962cf2 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -19,7 +19,8 @@ def extract(enrollment_row)
     authorization_request.form_uid ||= fetch_form(authorization_request).try(:id)
     authorization_request.state = enrollment_row['status']
     authorization_request.external_provider_id = enrollment_row['external_provider_id']
-    authorization_request.copied_from_request = AuthorizationRequest.find(enrollment_row['copied_from_enrollment_id']) if enrollment_row['copied_from_enrollment_id'] && AuthorizationRequest.exists?(enrollment_row['copied_from_enrollment_id'])
+    # FIXME to delete, will use raw data anyway
+    # authorization_request.copied_from_request = AuthorizationRequest.find(enrollment_row['copied_from_enrollment_id']) if enrollment_row['copied_from_enrollment_id'] && AuthorizationRequest.exists?(enrollment_row['copied_from_enrollment_id'])
 
     if authorization_request.state != 'draft'
       authorization_request.assign_attributes(
@@ -112,7 +113,7 @@ def fetch_organization(user, enrollment_row)
         organization.save!
       rescue ActiveRecord::RecordInvalid => e
         if e.record.errors.include?(:siret)
-          raise Import::AuthorizationRequests::Base::SkipRow.new(:invalid_siret_for_unknown_user_and_organization, id: enrollment_row['id'], target_api: enrollment_row['target_api'])
+          raise Import::AuthorizationRequests::Base::SkipRow.new(:invalid_siret_for_unknown_user_and_organization, id: enrollment_row['id'], target_api: enrollment_row['target_api'], authorization_request: e.record)
         else
           raise
         end
@@ -165,7 +166,7 @@ def try_to_create_user!(enrollment_row, demandeur)
       organization.save!
     rescue ActiveRecord::RecordInvalid => e
       if e.record.errors.include?(:siret)
-        raise Import::AuthorizationRequests::Base::SkipRow.new(:invalid_siret_for_unknown_user_and_organization, id: enrollment_row['id'], target_api: enrollment_row['target_api'])
+        raise Import::AuthorizationRequests::Base::SkipRow.new(:invalid_siret_for_unknown_user_and_organization, id: enrollment_row['id'], target_api: enrollment_row['target_api'], authorization_request: e.record)
       else
         raise
       end
@@ -258,7 +259,9 @@ def from_target_api_to_type(enrollment)
       'api_entreprise' => 'api_entreprise',
       'api_particulier' => 'api_particulier',
       'api_impot_particulier_sandbox' => 'api_impot_particulier_sandbox',
+      'api_impot_particulier_fc_sandbox' => 'api_impot_particulier_sandbox',
       'api_impot_particulier_production' => 'api_impot_particulier',
+      'api_impot_particulier_fc_production' => 'api_impot_particulier',
       'franceconnect' => 'france_connect',
     }[enrollment['target_api']].try(:classify)
   end
diff --git a/app/migration/import/authorization_requests/base.rb b/app/migration/import/authorization_requests/base.rb
index 513c4c6cc..01dd9afc2 100644
--- a/app/migration/import/authorization_requests/base.rb
+++ b/app/migration/import/authorization_requests/base.rb
@@ -6,12 +6,13 @@ class Import::AuthorizationRequests::Base
   include LocalDatabaseUtils
 
   class AbstractRow  < StandardError
-    attr_reader :kind, :id, :target_api
+    attr_reader :kind, :id, :target_api, :authorization_request
 
-    def initialize(kind = nil, id:, target_api:)
+    def initialize(kind = nil, id:, target_api:, authorization_request:)
       @kind = kind
       @id = id
       @target_api = target_api
+      @authorization_request = authorization_request
     end
   end
 
@@ -208,11 +209,11 @@ def attributes_with_possible_null_values
   end
 
   def skip_row!(kind)
-    raise SkipRow.new(kind.to_s, id: enrollment_row['id'], target_api: enrollment_row['target_api'])
+    raise SkipRow.new(kind.to_s, id: enrollment_row['id'], target_api: enrollment_row['target_api'], authorization_request:)
   end
 
   def warn_row!(kind)
-    @warned << WarnRow.new(kind.to_s, id: enrollment_row['id'], target_api: enrollment_row['target_api'])
+    @warned << WarnRow.new(kind.to_s, id: enrollment_row['id'], target_api: enrollment_row['target_api'], authorization_request:)
   end
 
   def attach_file(kind, row_data)
@@ -225,6 +226,13 @@ def additional_content
     @additional_content ||= JSON.parse(enrollment_row['additional_content'])
   end
 
+  def affect_duree_conservation_donnees_caractere_personnel_justification
+    return if authorization_request.duree_conservation_donnees_caractere_personnel.blank?
+    return unless authorization_request.duree_conservation_donnees_caractere_personnel > 36 && authorization_request.duree_conservation_donnees_caractere_personnel_justification.blank?
+
+    authorization_request.duree_conservation_donnees_caractere_personnel_justification = 'Non renseigné'
+  end
+
   def extract_attachable(kind, row_data)
     if ENV['LOCAL'] == 'true'
       if kind == 'specific_requirements_document'
@@ -249,6 +257,7 @@ def extract_attachable(kind, row_data)
   def dummy_file_as_io(extension)
     $dummy_files ||= {}
     $dummy_files[extension] ||= Rails.root.join('spec', 'fixtures', "dummy.#{extension}").open
+    $dummy_files[extension].rewind
     $dummy_files[extension]
   end
 

From b5d45e4d87c97c9e4f1efdc459471f497eb6a75f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 22 Jan 2025 10:25:22 +0100
Subject: [PATCH 17/40] Migration: enhance imports for specific authorizations

---
 .../api_impot_particulier_attributes.rb       | 14 ++++++++++++++
 ...pi_impot_particulier_sandbox_attributes.rb | 19 +++++++++++++++++++
 .../api_particulier_attributes.rb             |  6 ------
 .../france_connect_attributes.rb              |  2 ++
 4 files changed, 35 insertions(+), 6 deletions(-)

diff --git a/app/migration/import/authorization_requests/api_impot_particulier_attributes.rb b/app/migration/import/authorization_requests/api_impot_particulier_attributes.rb
index 8bf0db286..73b08fb80 100644
--- a/app/migration/import/authorization_requests/api_impot_particulier_attributes.rb
+++ b/app/migration/import/authorization_requests/api_impot_particulier_attributes.rb
@@ -8,7 +8,13 @@ def affect_data
     affect_safety_certification
     affect_volumetrie
 
+    handle_franceconnect
+
     authorization_request.state = enrollment_row['status']
+
+    return if authorization_request.valid?
+
+    skip_row!(:invalid_cadre_juridique) if authorization_request.errors[:cadre_juridique_url].any?
   end
 
   private
@@ -25,6 +31,14 @@ def migrate_from_sandbox_to_production!
     skip_row!(:sandbox_missing)
   end
 
+  def handle_franceconnect
+    return unless enrollment_row['target_api'] == 'api_impot_particulier_fc_production'
+
+    authorization_request.modalities ||= []
+    authorization_request.modalities << 'with_france_connect'
+    authorization_request.modalities = authorization_request.modalities.uniq
+  end
+
   # FIXME
   def affect_form_uid
     authorization_request.form_uid = authorization_request.definition.available_forms.first.id
diff --git a/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb b/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb
index 9a1606f58..a40baa1fd 100644
--- a/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb
+++ b/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb
@@ -8,6 +8,12 @@ def affect_data
     affect_modalities
     # affect_form_uid
     handle_incompatible_scopes_error
+
+    affect_duree_conservation_donnees_caractere_personnel_justification
+
+    return if authorization_request.valid?
+
+    skip_row!(:invalid_cadre_juridique) if authorization_request.errors[:cadre_juridique_url].any?
   end
 
   def handle_incompatible_scopes_error
@@ -35,6 +41,8 @@ def affect_modalities
       authorization_request.modalities = authorization_request.modalities.concat([to])
     end
 
+    affect_franceconnect_data if with_franceconnect?
+
     authorization_request.modalities = authorization_request.modalities.uniq
 
     return if authorization_request.modalities.present?
@@ -43,6 +51,16 @@ def affect_modalities
     skip_row!("no_modalities_in_status_#{authorization_request.state}")
   end
 
+  def with_franceconnect?
+    return unless enrollment_row['previous_enrollment_id'].present?
+
+    authorization_request.modalities << 'with_france_connect'
+  end
+
+  def affect_franceconnect_data
+    authorization_request.france_connect_authorization_id = enrollment_row['previous_enrollment_id']
+  end
+
   def affect_contacts
     {
       'responsable_technique' => 'contact_technique',
@@ -53,6 +71,7 @@ def affect_contacts
     end
   end
 
+  # FIXME check https://metabase.entreprise.api.gouv.fr/dashboard/50-datapass-exploration?nom_de_l%27api_(target_api)=api_impot_particulier_sandbox
   def demarche_to_form_uid
     case enrollment_row['demarche']
     when 'marches_publics'
diff --git a/app/migration/import/authorization_requests/api_particulier_attributes.rb b/app/migration/import/authorization_requests/api_particulier_attributes.rb
index ff5f42de0..3c5f868cf 100644
--- a/app/migration/import/authorization_requests/api_particulier_attributes.rb
+++ b/app/migration/import/authorization_requests/api_particulier_attributes.rb
@@ -50,12 +50,6 @@ def affect_potentiel_maquette_projet_document
     attach_file('maquette_projet', row)
   end
 
-  def affect_duree_conservation_donnees_caractere_personnel_justification
-    return unless authorization_request.duree_conservation_donnees_caractere_personnel > 36 && authorization_request.duree_conservation_donnees_caractere_personnel_justification.blank?
-
-    authorization_request.duree_conservation_donnees_caractere_personnel_justification = 'Non renseigné'
-  end
-
   def demarche_to_form_uid
     case enrollment_row['demarche']
     when 'arpege-concerto'
diff --git a/app/migration/import/authorization_requests/france_connect_attributes.rb b/app/migration/import/authorization_requests/france_connect_attributes.rb
index dbb55bc4e..94bcf8b69 100644
--- a/app/migration/import/authorization_requests/france_connect_attributes.rb
+++ b/app/migration/import/authorization_requests/france_connect_attributes.rb
@@ -11,6 +11,8 @@ def affect_data
     return if authorization_request.valid?
 
     skip_row!(:invalid_cadre_juridique) if authorization_request.errors[:cadre_juridique_url].any?
+    skip_row!(:no_scopes) if authorization_request.scopes.blank?
+    skip_row!(:no_destinataire_donnees_caractere_personnel) if authorization_request.destinataire_donnees_caractere_personnel.blank?
   end
 
   def affect_contacts

From 043a335effc49bc464f93e8646831255688f3718 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 22 Jan 2025 10:25:51 +0100
Subject: [PATCH 18/40] Migration: can skip validation on skipped rows and save
 anyway

---
 app/migration/import/base.rb | 6 ++++++
 app/migration/local_run.sh   | 4 ++--
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/app/migration/import/base.rb b/app/migration/import/base.rb
index b8956c51c..d48149a62 100644
--- a/app/migration/import/base.rb
+++ b/app/migration/import/base.rb
@@ -79,6 +79,12 @@ def load_from_csv!
       rescue Import::AuthorizationRequests::Base::SkipRow => e
         print 's'
         options[:skipped] << e
+
+        begin
+          e.authorization_request.save(validate: false) if ENV['SKIP_VALIDATION'] == 'true'
+        rescue ActiveStorage::IntegrityError => ebis
+          byebug
+        end
       rescue => e
         log(" ERROR: #{e.message}")
         log(e.backtrace.join("\n"))
diff --git a/app/migration/local_run.sh b/app/migration/local_run.sh
index 5e081c0bb..85181ddd9 100755
--- a/app/migration/local_run.sh
+++ b/app/migration/local_run.sh
@@ -7,8 +7,8 @@ LOCAL=true bundle exec rails runner "ImportDataInLocalDb.new.perform(delete_db_f
 
 if [ $# -eq 1 ]; then
   echo "Run for $1 only"
-  DUMP=true LOCAL=true bundle exec rails runner "MainImport.new(authorization_request_ids: [$1]).perform"
+  SKIP_VALIDATION=true DUMP=true LOCAL=true bundle exec rails runner "MainImport.new(authorization_request_ids: [$1]).perform"
 else
   echo "Run for all"
-  DUMP=true LOCAL=true bundle exec rails runner "MainImport.new.perform"
+  SKIP_VALIDATION=true DUMP=true LOCAL=true bundle exec rails runner "MainImport.new.perform"
 fi

From 576e4b38f5335f0afb762156a76ecfc0af09050c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 22 Jan 2025 14:05:46 +0100
Subject: [PATCH 19/40] Migration: Harden
 Import::AuthorizationRequestEvents#find_closest_authorization

---
 app/migration/import/authorization_request_events.rb | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/app/migration/import/authorization_request_events.rb b/app/migration/import/authorization_request_events.rb
index 4da32b557..bcf1237f8 100644
--- a/app/migration/import/authorization_request_events.rb
+++ b/app/migration/import/authorization_request_events.rb
@@ -156,8 +156,11 @@ def create_authorization(event_row, authorization_request)
   end
 
   def find_closest_authorization(event_row, authorization_request)
+    event_created_at_as_datetime = DateTime.parse(event_row['created_at'])
+
     Authorization.where(
       request_id: authorization_request.id
+      created_at: (event_created_at_as_datetime-10.seconds..event_created_at_as_datetime+10.seconds),
     ).order(created_at: :desc).first
   end
 

From b6b66a9bd15b081a5408454bfdc5ed44dd339621 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 22 Jan 2025 14:06:25 +0100
Subject: [PATCH 20/40] Migration: harden FC linked

---
 .../api_impot_particulier_attributes.rb                |  2 +-
 .../api_impot_particulier_sandbox_attributes.rb        | 10 ++++++----
 2 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/app/migration/import/authorization_requests/api_impot_particulier_attributes.rb b/app/migration/import/authorization_requests/api_impot_particulier_attributes.rb
index 73b08fb80..3c4f92814 100644
--- a/app/migration/import/authorization_requests/api_impot_particulier_attributes.rb
+++ b/app/migration/import/authorization_requests/api_impot_particulier_attributes.rb
@@ -35,7 +35,7 @@ def handle_franceconnect
     return unless enrollment_row['target_api'] == 'api_impot_particulier_fc_production'
 
     authorization_request.modalities ||= []
-    authorization_request.modalities << 'with_france_connect'
+    authorization_request.modalities = authorization_request.modalities.concat(['with_france_connect'])
     authorization_request.modalities = authorization_request.modalities.uniq
   end
 
diff --git a/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb b/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb
index a40baa1fd..81745da23 100644
--- a/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb
+++ b/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb
@@ -52,13 +52,15 @@ def affect_modalities
   end
 
   def with_franceconnect?
-    return unless enrollment_row['previous_enrollment_id'].present?
-
-    authorization_request.modalities << 'with_france_connect'
+    enrollment_row['previous_enrollment_id'].present?
   end
 
   def affect_franceconnect_data
-    authorization_request.france_connect_authorization_id = enrollment_row['previous_enrollment_id']
+    authorization_request.modalities = authorization_request.modalities.concat(['with_france_connect'])
+
+    france_connect_authorization = AuthorizationRequest::FranceConnect.find_by(id: enrollment_row['previous_enrollment_id'])
+
+    authorization_request.france_connect_authorization_id = france_connect_authorization.latest_authorization.id.to_s
   end
 
   def affect_contacts

From 390f98a8758e9d15f1a4db52f2d6292dd773d6a5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 22 Jan 2025 17:17:51 +0100
Subject: [PATCH 21/40] Migration: clean

---
 app/migration/import/base.rb | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/app/migration/import/base.rb b/app/migration/import/base.rb
index d48149a62..b30af5b40 100644
--- a/app/migration/import/base.rb
+++ b/app/migration/import/base.rb
@@ -80,11 +80,7 @@ def load_from_csv!
         print 's'
         options[:skipped] << e
 
-        begin
-          e.authorization_request.save(validate: false) if ENV['SKIP_VALIDATION'] == 'true'
-        rescue ActiveStorage::IntegrityError => ebis
-          byebug
-        end
+        e.authorization_request.save(validate: false) if ENV['SKIP_VALIDATION'] == 'true'
       rescue => e
         log(" ERROR: #{e.message}")
         log(e.backtrace.join("\n"))

From 840efe3651be73e977d558d91e7590cd6b217beb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 22 Jan 2025 17:18:03 +0100
Subject: [PATCH 22/40] Migration: create approve events with authorizations
 within authorization requests for FC

Have to have an authorization to link in future API FC authorization
requests
---
 .../import/authorization_request_events.rb    |  6 ++++--
 .../import/authorization_requests.rb          | 12 +++++++++--
 .../import/authorization_requests/base.rb     |  2 +-
 .../france_connect_attributes.rb              | 20 +++++++++++++++++++
 4 files changed, 35 insertions(+), 5 deletions(-)

diff --git a/app/migration/import/authorization_request_events.rb b/app/migration/import/authorization_request_events.rb
index bcf1237f8..eab0bbac4 100644
--- a/app/migration/import/authorization_request_events.rb
+++ b/app/migration/import/authorization_request_events.rb
@@ -3,7 +3,7 @@ class Import::AuthorizationRequestEvents < Import::Base
   include UserLegacyUtils
 
   def extract(event_row)
-    authorization_request = AuthorizationRequest.find(event_row['enrollment_id'])
+    authorization_request = options[:authorization_request] || AuthorizationRequest.find(event_row['enrollment_id'])
 
     case event_row['name']
     when 'create'
@@ -50,6 +50,8 @@ def extract(event_row)
         authorization_request.update!(last_submitted_at: event_created_at)
       end
     when 'approve', 'validate'
+      return if options[:create_from_authorization_request_import].blank? && authorization_request.type == 'AuthorizationRequest::FranceConnect'
+
       authorization_request.update(
         last_validated_at: event_row['created_at'],
       )
@@ -159,7 +161,7 @@ def find_closest_authorization(event_row, authorization_request)
     event_created_at_as_datetime = DateTime.parse(event_row['created_at'])
 
     Authorization.where(
-      request_id: authorization_request.id
+      request_id: authorization_request.id,
       created_at: (event_created_at_as_datetime-10.seconds..event_created_at_as_datetime+10.seconds),
     ).order(created_at: :desc).first
   end
diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index 357962cf2..a4ee173b4 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -33,6 +33,7 @@ def extract(enrollment_row)
 
     begin
       authorization_request.save!
+      after_save_authorization_request(authorization_request, enrollment_row)
       @models << authorization_request
     rescue ActiveRecord::RecordInvalid => e
       log("DataPass: https://datapass.api.gouv.fr/#{enrollment_row['target_api'].gsub('_', '-')}/#{enrollment_row['id']} (status: #{enrollment_row['status']})")
@@ -51,6 +52,12 @@ def extract(enrollment_row)
 
   private
 
+  def after_save_authorization_request(authorization_request, enrollment_row)
+    return unless @authorization_request_type_specific_field_builder.respond_to?(:after_save)
+
+    @authorization_request_type_specific_field_builder.after_save(authorization_request, enrollment_row)
+  end
+
   def sql_tables_to_save
     super.concat(
       %w[
@@ -204,7 +211,7 @@ def fetch_form(authorization_request)
   end
 
   def handle_authorization_request_type_specific_fields(authorization_request, enrollment_row)
-    Kernel.const_get(
+    @authorization_request_type_specific_field_builder = Kernel.const_get(
       "Import::AuthorizationRequests::#{authorization_request.type.split('::')[-1]}Attributes"
     ).new(
       authorization_request,
@@ -212,7 +219,8 @@ def handle_authorization_request_type_specific_fields(authorization_request, enr
       fetch_team_members(enrollment_row['id']),
       options[:warned],
       @models,
-    ).perform
+    )
+    @authorization_request_type_specific_field_builder.perform
   end
 
   def import?(enrollment_row)
diff --git a/app/migration/import/authorization_requests/base.rb b/app/migration/import/authorization_requests/base.rb
index 01dd9afc2..0ca71a0c9 100644
--- a/app/migration/import/authorization_requests/base.rb
+++ b/app/migration/import/authorization_requests/base.rb
@@ -223,7 +223,7 @@ def attach_file(kind, row_data)
   end
 
   def additional_content
-    @additional_content ||= JSON.parse(enrollment_row['additional_content'])
+    @additional_content ||= enrollment_row['additional_content'].is_a?(String) ? JSON.parse(enrollment_row['additional_content']) : enrollment_row['additional_content']
   end
 
   def affect_duree_conservation_donnees_caractere_personnel_justification
diff --git a/app/migration/import/authorization_requests/france_connect_attributes.rb b/app/migration/import/authorization_requests/france_connect_attributes.rb
index 94bcf8b69..b8ce34a74 100644
--- a/app/migration/import/authorization_requests/france_connect_attributes.rb
+++ b/app/migration/import/authorization_requests/france_connect_attributes.rb
@@ -35,6 +35,26 @@ def affect_potential_legal_document
     end
   end
 
+  def after_save(authorization_request, row)
+    @authorization_request = authorization_request
+
+    create_approved_events
+  end
+
+  def create_approved_events
+    @database = SQLite3::Database.new(db_path)
+
+    event_rows = database.execute('select * from events where authorization_request_id = ?', enrollment_row['id']).to_a.map do |row|
+      JSON.parse(row[-1]).to_h
+    end.select { |e| e['name'] == 'validate' }
+
+    event_rows.map do |event_row|
+      Import::AuthorizationRequestEvents.new(authorization_request:, create_from_authorization_request_import: true).send(:extract, event_row)
+    end
+
+    @database.close
+  end
+
   def extract_eidas
     case additional_content['eidas_level']
     when '2'

From 0f8b9826972fd006fdc88b35fd76bdf0d3c8bea8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <skelz0r@gmail.com>
Date: Tue, 21 Jan 2025 10:12:09 +0100
Subject: [PATCH 23/40] Migration: wip main script

---
 app/migration/main_import.rb | 17 ++++++++++++-----
 1 file changed, 12 insertions(+), 5 deletions(-)

diff --git a/app/migration/main_import.rb b/app/migration/main_import.rb
index d4d5da386..260fb52f5 100644
--- a/app/migration/main_import.rb
+++ b/app/migration/main_import.rb
@@ -22,7 +22,7 @@ def perform
       valid_authorization_request_ids = authorization_requests.pluck(:id)
     end
 
-    import(:authorization_request_events, { dump_sql: ENV['DUMP'] == 'true', valid_authorization_request_ids: })
+    # import(:authorization_request_events, { dump_sql: ENV['DUMP'] == 'true', valid_authorization_request_ids: })
 
     %i[warned skipped].each do |kind|
       export(kind)
@@ -54,10 +54,10 @@ def export(kind)
 
     data = public_send(kind)
     CSV.open(export_path(kind), 'w') do |csv|
-      csv << %w[id target_api kind]
+      csv << %w[id target_api kind url]
 
       data.each do |datum|
-        csv << [datum.id, datum.target_api, datum.kind]
+        csv << [datum.id, datum.target_api, datum.kind, "https://datapass.api.gouv.fr/#{datum.target_api.gsub('_', '-')}/#{datum.id}"]
       end
     end
   end
@@ -86,10 +86,17 @@ def global_options
     {
       authorization_requests_filter: ->(enrollment_row) do
         %w[
+          64447 64348 62067 6195 6033 5055 4438 4436 4433 4198 4166 4162 4159 4157 4155
+          4153 4151 4149 4147 4145 4143 4140 4138 4136 4134 4132 4130 4127 4125 4123
+          4121 4119 4117 4115 4113 4109 4106 4104 4101 4098 4096 4094 4092 4090 4088
+          3932 3540 54510 54497 43297 40647 40116 39580 14323 51640 49730 49191 48323
+          23657 14770 45463 45442 43965 43816 5893 4442 45173 3666
         ].exclude?(enrollment_row['id'])
+        # %w[63955 64669].include?(enrollment_row['id'])
+        true
       end,
-      authorization_requests_sql_where: 'target_api in (\'api_impot_particulier_sandbox\') order by id desc',
-      # authorization_requests_sql_where: 'target_api not in (\'hubee_portail\', \'hubee_portail_dila\', \'api_entreprise\', \'api_particulier\') order by id desc',
+      authorization_requests_sql_where: 'target_api in (\'franceconnect\') order by id',
+      # authorization_requests_sql_where: 'target_api in (\'api_impot_particulier_sandbox\', \'api_impot_particulier_production\') order by case when target_api like \'%_sandbox\' then 1 else 2 end',
       skipped: @skipped,
       warned: @warned,
     }

From 8c5e45c080e2130fb904fdaacbebf0ecb3927f85 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <skelz0r@gmail.com>
Date: Tue, 21 Jan 2025 18:15:32 +0100
Subject: [PATCH 24/40] Migration: can load extra sql

---
 app/migration/main_import.rb | 17 ++++++++++++++---
 1 file changed, 14 insertions(+), 3 deletions(-)

diff --git a/app/migration/main_import.rb b/app/migration/main_import.rb
index 260fb52f5..0d6b18230 100644
--- a/app/migration/main_import.rb
+++ b/app/migration/main_import.rb
@@ -14,7 +14,10 @@ def initialize(authorization_request_ids: [])
   def perform
     import(:organizations, { load_from_sql: true })
     import(:users, { load_from_sql: true })
-    authorization_requests = import(:authorization_requests, { load_from_sql: false })
+
+    import_extra_authorization_requests_sql_data
+
+    authorization_requests = import(:authorization_requests, { load_from_sql: false, dump_sql: true })
 
     if types_to_import.any?
       valid_authorization_request_ids = AuthorizationRequest.where(id: authorization_requests.pluck(:id), type: types_to_import).pluck(:id)
@@ -32,6 +35,14 @@ def perform
 
   private
 
+  def import_extra_authorization_requests_sql_data
+    Dir[Rails.root.join('app/migration/dumps/authorization_requests_sql_to_load/*.sql')].each do |file|
+      log("# Importing authorization requests file #{file}")
+
+      `psql -d #{ActiveRecord::Base.connection.current_database} -f #{file}`
+    end
+  end
+
   def types_to_import
     %w[
     ]
@@ -95,8 +106,8 @@ def global_options
         # %w[63955 64669].include?(enrollment_row['id'])
         true
       end,
-      authorization_requests_sql_where: 'target_api in (\'franceconnect\') order by id',
-      # authorization_requests_sql_where: 'target_api in (\'api_impot_particulier_sandbox\', \'api_impot_particulier_production\') order by case when target_api like \'%_sandbox\' then 1 else 2 end',
+      # authorization_requests_sql_where: 'target_api in (\'franceconnect\') order by id',
+      authorization_requests_sql_where: 'target_api in (\'api_impot_particulier_sandbox\', \'api_impot_particulier_production\', \'api_impot_particulier_fc_sandbox\', \'api_impot_particulier_fc_production\') order by case when target_api = \'franceconnect\' then 1 when target_api like \'%_sandbox\' then 2 else 3 end',
       skipped: @skipped,
       warned: @warned,
     }

From b9630bab7823d7b5002b2167ecab4c75df0122ff Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 29 Jan 2025 08:52:00 +0100
Subject: [PATCH 25/40] Migration: wip main scripts

---
 app/migration/main_import.rb | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/app/migration/main_import.rb b/app/migration/main_import.rb
index 0d6b18230..0c5510e24 100644
--- a/app/migration/main_import.rb
+++ b/app/migration/main_import.rb
@@ -36,8 +36,8 @@ def perform
   private
 
   def import_extra_authorization_requests_sql_data
-    Dir[Rails.root.join('app/migration/dumps/authorization_requests_sql_to_load/*.sql')].each do |file|
-      log("# Importing authorization requests file #{file}")
+    Dir[Rails.root.join('app/migration/dumps/authorization_requests_sql_to_load/*.sql')].sort.each do |file|
+      log("# Importing file #{File.basename(file)}")
 
       `psql -d #{ActiveRecord::Base.connection.current_database} -f #{file}`
     end
@@ -104,10 +104,12 @@ def global_options
           23657 14770 45463 45442 43965 43816 5893 4442 45173 3666
         ].exclude?(enrollment_row['id'])
         # %w[63955 64669].include?(enrollment_row['id'])
-        true
+        %w[
+          1465
+        ].exclude?(enrollment_row['id'])
       end,
-      # authorization_requests_sql_where: 'target_api in (\'franceconnect\') order by id',
-      authorization_requests_sql_where: 'target_api in (\'api_impot_particulier_sandbox\', \'api_impot_particulier_production\', \'api_impot_particulier_fc_sandbox\', \'api_impot_particulier_fc_production\') order by case when target_api = \'franceconnect\' then 1 when target_api like \'%_sandbox\' then 2 else 3 end',
+      authorization_requests_sql_where: 'target_api in (\'franceconnect\') order by id',
+      # authorization_requests_sql_where: 'target_api in (\'franceconnect\', \'api_impot_particulier_fc_sandbox\', \'api_impot_particulier_fc_production\') order by case when target_api = \'franceconnect\' then 1 when target_api like \'%_sandbox\' then 2 else 3 end',
       skipped: @skipped,
       warned: @warned,
     }

From fabfc689dfca64c0d17650984db65c2323f167cb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 29 Jan 2025 11:21:58 +0100
Subject: [PATCH 26/40] Migration: APIRialSandbox

---
 .../import/authorization_requests.rb          | 22 +++++-----
 ...pi_impot_particulier_sandbox_attributes.rb | 20 +---------
 .../api_rial_sandbox_attributes.rb            | 40 +++++++++++++++++++
 .../dgfip_sandbox_attributes.rb               | 19 +++++++++
 4 files changed, 72 insertions(+), 29 deletions(-)
 create mode 100644 app/migration/import/authorization_requests/api_rial_sandbox_attributes.rb
 create mode 100644 app/migration/import/authorization_requests/dgfip_sandbox_attributes.rb

diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index a4ee173b4..fa427d753 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -99,16 +99,16 @@ def fetch_organization(user, enrollment_row)
     end
 
     new_potential_siret = {
-      # PM => DINUM
-      '11000101300017' => '13002526500013',
-      # Agence de la recherche fermée
-      '13000250400020' => '13000250400038',
-      # DRJSCS => DREETS
-      '13001252900017' => '13002921800018',
-      # Recia
-      '18450311800020' => '12002503600035',
-      # Port de strasbourg
-      '77564141800014' => '77564141800089',
+      # # PM => DINUM
+      # '11000101300017' => '13002526500013',
+      # # Agence de la recherche fermée
+      # '13000250400020' => '13000250400038',
+      # # DRJSCS => DREETS
+      # '13001252900017' => '13002921800018',
+      # # Recia
+      # '18450311800020' => '12002503600035',
+      # # Port de strasbourg
+      # '77564141800014' => '77564141800089',
     }[enrollment_row['siret']]
 
     if new_potential_siret.present?
@@ -271,6 +271,8 @@ def from_target_api_to_type(enrollment)
       'api_impot_particulier_production' => 'api_impot_particulier',
       'api_impot_particulier_fc_production' => 'api_impot_particulier',
       'franceconnect' => 'france_connect',
+      'api_rial_sandbox' => 'api_rial_sandbox',
+      'api_rial_production' => 'api_rial',
     }[enrollment['target_api']].try(:classify)
   end
 
diff --git a/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb b/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb
index 81745da23..8cbe75929 100644
--- a/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb
+++ b/app/migration/import/authorization_requests/api_impot_particulier_sandbox_attributes.rb
@@ -1,4 +1,4 @@
-class Import::AuthorizationRequests::APIImpotParticulierSandboxAttributes < Import::AuthorizationRequests::Base
+class Import::AuthorizationRequests::APIImpotParticulierSandboxAttributes < Import::AuthorizationRequests::DGFIPSandboxAttributes
   def affect_data
     affect_scopes
     affect_attributes
@@ -23,12 +23,6 @@ def handle_incompatible_scopes_error
     skip_row!("invalid_scopes_in_status_#{authorization_request.state}")
   end
 
-  def affect_potential_specific_requirements
-    return unless affect_potential_document('Document::ExpressionBesoinSpecifique', 'specific_requirements_document')
-
-    authorization_request.specific_requirements = '1'
-  end
-
   def affect_modalities
     authorization_request.modalities ||= []
 
@@ -51,18 +45,6 @@ def affect_modalities
     skip_row!("no_modalities_in_status_#{authorization_request.state}")
   end
 
-  def with_franceconnect?
-    enrollment_row['previous_enrollment_id'].present?
-  end
-
-  def affect_franceconnect_data
-    authorization_request.modalities = authorization_request.modalities.concat(['with_france_connect'])
-
-    france_connect_authorization = AuthorizationRequest::FranceConnect.find_by(id: enrollment_row['previous_enrollment_id'])
-
-    authorization_request.france_connect_authorization_id = france_connect_authorization.latest_authorization.id.to_s
-  end
-
   def affect_contacts
     {
       'responsable_technique' => 'contact_technique',
diff --git a/app/migration/import/authorization_requests/api_rial_sandbox_attributes.rb b/app/migration/import/authorization_requests/api_rial_sandbox_attributes.rb
new file mode 100644
index 000000000..19847894c
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_rial_sandbox_attributes.rb
@@ -0,0 +1,40 @@
+class Import::AuthorizationRequests::APIRialSandboxAttributes < Import::AuthorizationRequests::DGFIPSandboxAttributes
+  def affect_data
+    affect_attributes
+    affect_contacts
+    affect_potential_legal_document
+    affect_potential_specific_requirements
+    affect_duree_conservation_donnees_caractere_personnel_justification
+
+    return if authorization_request.valid?
+
+    skip_row!(:invalid_cadre_juridique) if authorization_request.errors[:cadre_juridique_url].any?
+  end
+
+  def affect_contacts
+    {
+      'responsable_technique' => 'contact_technique',
+      'responsable_traitement' => 'responsable_traitement',
+      'delegue_protection_donnees' => 'delegue_protection_donnees',
+    }.each do |from_contact, to_contact|
+      affect_contact(from_contact, to_contact)
+    end
+  end
+
+  def attributes_mapping
+    {
+      "intitule" => "intitule",
+      "description" => "description",
+      "fondement_juridique_title" => "cadre_juridique_nature",
+      "fondement_juridique_url" => "cadre_juridique_url",
+      "date_mise_en_production" => "date_prevue_mise_en_production",
+      "data_recipients" => "destinataire_donnees_caractere_personnel",
+      "data_retention_period" => "duree_conservation_donnees_caractere_personnel",
+      "data_retention_comment" => "duree_conservation_donnees_caractere_personnel_justification",
+    }
+  end
+
+  def attributes_with_possible_null_values
+    ['destinataire_donnees_caractere_personnel']
+  end
+end
diff --git a/app/migration/import/authorization_requests/dgfip_sandbox_attributes.rb b/app/migration/import/authorization_requests/dgfip_sandbox_attributes.rb
new file mode 100644
index 000000000..396f38f8f
--- /dev/null
+++ b/app/migration/import/authorization_requests/dgfip_sandbox_attributes.rb
@@ -0,0 +1,19 @@
+class Import::AuthorizationRequests::DGFIPSandboxAttributes < Import::AuthorizationRequests::Base
+  def affect_potential_specific_requirements
+    return unless affect_potential_document('Document::ExpressionBesoinSpecifique', 'specific_requirements_document')
+
+    authorization_request.specific_requirements = '1'
+  end
+
+  def with_franceconnect?
+    enrollment_row['previous_enrollment_id'].present?
+  end
+
+  def affect_franceconnect_data
+    authorization_request.modalities = authorization_request.modalities.concat(['with_france_connect'])
+
+    france_connect_authorization = AuthorizationRequest::FranceConnect.find_by(id: enrollment_row['previous_enrollment_id'])
+
+    authorization_request.france_connect_authorization_id = france_connect_authorization.latest_authorization.id.to_s
+  end
+end

From bef5da92170940301f5d85737f671ce8c884de56 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 29 Jan 2025 11:46:52 +0100
Subject: [PATCH 27/40] Migration: API CPR Adelie

---
 .../import/authorization_requests.rb          |  2 +
 .../api_cpr_pro_adelie_attributes.rb          | 15 ++++++
 .../api_cpr_pro_adelie_sandbox_attributes.rb  |  2 +
 .../api_impot_particulier_attributes.rb       | 47 ------------------
 .../dgfip_production_attributes.rb            | 48 +++++++++++++++++++
 5 files changed, 67 insertions(+), 47 deletions(-)
 create mode 100644 app/migration/import/authorization_requests/api_cpr_pro_adelie_attributes.rb
 create mode 100644 app/migration/import/authorization_requests/api_cpr_pro_adelie_sandbox_attributes.rb
 create mode 100644 app/migration/import/authorization_requests/dgfip_production_attributes.rb

diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index fa427d753..825705e1e 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -273,6 +273,8 @@ def from_target_api_to_type(enrollment)
       'franceconnect' => 'france_connect',
       'api_rial_sandbox' => 'api_rial_sandbox',
       'api_rial_production' => 'api_rial',
+      'api_cpr_pro_sandbox' => 'api_cpr_pro_adelie_sandbox',
+      'api_cpr_pro_production' => 'api_cpr_pro_adelie',
     }[enrollment['target_api']].try(:classify)
   end
 
diff --git a/app/migration/import/authorization_requests/api_cpr_pro_adelie_attributes.rb b/app/migration/import/authorization_requests/api_cpr_pro_adelie_attributes.rb
new file mode 100644
index 000000000..e6aa35535
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_cpr_pro_adelie_attributes.rb
@@ -0,0 +1,15 @@
+class Import::AuthorizationRequests::APICprProAdelieAttributes < Import::AuthorizationRequests::DGFIPProductionAttributes
+  def affect_data
+    migrate_from_sandbox_to_production!
+
+    affect_operational_acceptance
+    affect_safety_certification
+    affect_volumetrie
+
+    authorization_request.state = enrollment_row['status']
+
+    return if authorization_request.valid?
+
+    skip_row!(:invalid_cadre_juridique) if authorization_request.errors[:cadre_juridique_url].any?
+  end
+end
diff --git a/app/migration/import/authorization_requests/api_cpr_pro_adelie_sandbox_attributes.rb b/app/migration/import/authorization_requests/api_cpr_pro_adelie_sandbox_attributes.rb
new file mode 100644
index 000000000..f5b0e6dd8
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_cpr_pro_adelie_sandbox_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APICprProAdelieSandboxAttributes < Import::AuthorizationRequests::APIRialSandboxAttributes
+end
diff --git a/app/migration/import/authorization_requests/api_impot_particulier_attributes.rb b/app/migration/import/authorization_requests/api_impot_particulier_attributes.rb
index 3c4f92814..cf6a07e01 100644
--- a/app/migration/import/authorization_requests/api_impot_particulier_attributes.rb
+++ b/app/migration/import/authorization_requests/api_impot_particulier_attributes.rb
@@ -19,18 +19,6 @@ def affect_data
 
   private
 
-  def migrate_from_sandbox_to_production!
-    @authorization_request = AuthorizationRequest.find(enrollment_row['previous_enrollment_id'])
-
-    authorization_request.update!(type: 'AuthorizationRequest::APIImpotParticulier', state: 'draft', id: enrollment_row['id'])
-
-    ActiveStorage::Attachment.where(record_type: 'AuthorizationRequest', record_id: enrollment_row['previous_enrollment_id']).update_all(record_id: enrollment_row['id'])
-
-    @authorization_request = AuthorizationRequest.find(enrollment_row['id'])
-  rescue ActiveRecord::RecordNotFound
-    skip_row!(:sandbox_missing)
-  end
-
   def handle_franceconnect
     return unless enrollment_row['target_api'] == 'api_impot_particulier_fc_production'
 
@@ -43,39 +31,4 @@ def handle_franceconnect
   def affect_form_uid
     authorization_request.form_uid = authorization_request.definition.available_forms.first.id
   end
-
-  def affect_operational_acceptance
-    authorization_request.operational_acceptance_done = additional_content['recette_fonctionnelle'] ? '1' : nil
-  end
-
-  def affect_safety_certification
-    {
-      'autorite_homologation_nom' => 'safety_certification_authority_name',
-      'autorite_homologation_fonction' => 'safety_certification_authority_function',
-      'date_homologation' => 'safety_certification_begin_date',
-      'date_fin_homologation' => 'safety_certification_end_date'
-    }.each do |from, to|
-      authorization_request.public_send("#{to}=", additional_content[from])
-    end
-
-    affect_potential_document('Document::DecisionHomologation', 'safety_certification_document')
-
-    return if authorization_request.safety_certification_begin_date.blank? || authorization_request.safety_certification_end_date.blank?
-
-    begin
-      return unless Date.parse(authorization_request.safety_certification_begin_date) == Date.parse(authorization_request.safety_certification_end_date)
-    rescue TypeError
-      return
-    end
-
-    authorization_request.safety_certification_end_date = (Date.parse(authorization_request.safety_certification_begin_date) + 1.day).to_s
-  end
-
-  def affect_volumetrie
-    authorization_request.volumetrie_appels_par_minute = additional_content['volumetrie_appels_par_minute'].try(:to_i)
-
-    return if authorization_request.volumetrie_appels_par_minute == 50
-
-    authorization_request.volumetrie_justification = 'Non renseignée'
-  end
 end
diff --git a/app/migration/import/authorization_requests/dgfip_production_attributes.rb b/app/migration/import/authorization_requests/dgfip_production_attributes.rb
new file mode 100644
index 000000000..f6ce57a7f
--- /dev/null
+++ b/app/migration/import/authorization_requests/dgfip_production_attributes.rb
@@ -0,0 +1,48 @@
+class Import::AuthorizationRequests::DGFIPProductionAttributes < Import::AuthorizationRequests::Base
+  def migrate_from_sandbox_to_production!
+    @authorization_request = AuthorizationRequest.find(enrollment_row['previous_enrollment_id'])
+
+    authorization_request.update!(type: "AuthorizationRequest::#{self.class.to_s.split('::')[-1].sub('Attributes', '')}", state: 'draft', id: enrollment_row['id'])
+
+    ActiveStorage::Attachment.where(record_type: 'AuthorizationRequest', record_id: enrollment_row['previous_enrollment_id']).update_all(record_id: enrollment_row['id'])
+
+    @authorization_request = AuthorizationRequest.find(enrollment_row['id'])
+  rescue ActiveRecord::RecordNotFound
+    skip_row!(:sandbox_missing)
+  end
+
+  def affect_operational_acceptance
+    authorization_request.operational_acceptance_done = additional_content['recette_fonctionnelle'] ? '1' : nil
+  end
+
+  def affect_safety_certification
+    {
+      'autorite_homologation_nom' => 'safety_certification_authority_name',
+      'autorite_homologation_fonction' => 'safety_certification_authority_function',
+      'date_homologation' => 'safety_certification_begin_date',
+      'date_fin_homologation' => 'safety_certification_end_date'
+    }.each do |from, to|
+      authorization_request.public_send("#{to}=", additional_content[from])
+    end
+
+    affect_potential_document('Document::DecisionHomologation', 'safety_certification_document')
+
+    return if authorization_request.safety_certification_begin_date.blank? || authorization_request.safety_certification_end_date.blank?
+
+    begin
+      return unless Date.parse(authorization_request.safety_certification_begin_date) == Date.parse(authorization_request.safety_certification_end_date)
+    rescue TypeError
+      return
+    end
+
+    authorization_request.safety_certification_end_date = (Date.parse(authorization_request.safety_certification_begin_date) + 1.day).to_s
+  end
+
+  def affect_volumetrie
+    authorization_request.volumetrie_appels_par_minute = additional_content['volumetrie_appels_par_minute'].try(:to_i)
+
+    return if authorization_request.volumetrie_appels_par_minute == 50
+
+    authorization_request.volumetrie_justification = 'Non renseignée'
+  end
+end

From 7445503f13077fc003a5666a648973d9393ca991 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 29 Jan 2025 11:50:42 +0100
Subject: [PATCH 28/40] Migration: API Rial

---
 .../api_cpr_pro_adelie_attributes.rb              | 15 +--------------
 .../authorization_requests/api_rial_attributes.rb | 15 +++++++++++++++
 2 files changed, 16 insertions(+), 14 deletions(-)
 create mode 100644 app/migration/import/authorization_requests/api_rial_attributes.rb

diff --git a/app/migration/import/authorization_requests/api_cpr_pro_adelie_attributes.rb b/app/migration/import/authorization_requests/api_cpr_pro_adelie_attributes.rb
index e6aa35535..c2432bbc3 100644
--- a/app/migration/import/authorization_requests/api_cpr_pro_adelie_attributes.rb
+++ b/app/migration/import/authorization_requests/api_cpr_pro_adelie_attributes.rb
@@ -1,15 +1,2 @@
-class Import::AuthorizationRequests::APICprProAdelieAttributes < Import::AuthorizationRequests::DGFIPProductionAttributes
-  def affect_data
-    migrate_from_sandbox_to_production!
-
-    affect_operational_acceptance
-    affect_safety_certification
-    affect_volumetrie
-
-    authorization_request.state = enrollment_row['status']
-
-    return if authorization_request.valid?
-
-    skip_row!(:invalid_cadre_juridique) if authorization_request.errors[:cadre_juridique_url].any?
-  end
+class Import::AuthorizationRequests::APICprProAdelieAttributes < Import::AuthorizationRequests::APIRialAttributes
 end
diff --git a/app/migration/import/authorization_requests/api_rial_attributes.rb b/app/migration/import/authorization_requests/api_rial_attributes.rb
new file mode 100644
index 000000000..4a421f1ae
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_rial_attributes.rb
@@ -0,0 +1,15 @@
+class Import::AuthorizationRequests::APIRialAttributes < Import::AuthorizationRequests::DGFIPProductionAttributes
+  def affect_data
+    migrate_from_sandbox_to_production!
+
+    affect_operational_acceptance
+    affect_safety_certification
+    affect_volumetrie
+
+    authorization_request.state = enrollment_row['status']
+
+    return if authorization_request.valid?
+
+    skip_row!(:invalid_cadre_juridique) if authorization_request.errors[:cadre_juridique_url].any?
+  end
+end

From 00c5d5e86d8e9227a4cc11c405ae01cf9d909121 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 29 Jan 2025 12:16:56 +0100
Subject: [PATCH 29/40] Migration: APIEContacts

---
 app/migration/import/authorization_requests.rb                  | 2 ++
 .../import/authorization_requests/api_e_contacts_attributes.rb  | 2 ++
 .../authorization_requests/api_e_contacts_sandbox_attributes.rb | 2 ++
 3 files changed, 6 insertions(+)
 create mode 100644 app/migration/import/authorization_requests/api_e_contacts_attributes.rb
 create mode 100644 app/migration/import/authorization_requests/api_e_contacts_sandbox_attributes.rb

diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index 825705e1e..fddc230fe 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -275,6 +275,8 @@ def from_target_api_to_type(enrollment)
       'api_rial_production' => 'api_rial',
       'api_cpr_pro_sandbox' => 'api_cpr_pro_adelie_sandbox',
       'api_cpr_pro_production' => 'api_cpr_pro_adelie',
+      'api_e_contacts_sandbox' => 'api_e_contacts_sandbox',
+      'api_e_contacts_production' => 'api_e_contacts',
     }[enrollment['target_api']].try(:classify)
   end
 
diff --git a/app/migration/import/authorization_requests/api_e_contacts_attributes.rb b/app/migration/import/authorization_requests/api_e_contacts_attributes.rb
new file mode 100644
index 000000000..f72b0085f
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_e_contacts_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APIEContactsAttributes < Import::AuthorizationRequests::APIRialAttributes
+end
diff --git a/app/migration/import/authorization_requests/api_e_contacts_sandbox_attributes.rb b/app/migration/import/authorization_requests/api_e_contacts_sandbox_attributes.rb
new file mode 100644
index 000000000..a4ac69a53
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_e_contacts_sandbox_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APIEContactsSandboxAttributes < Import::AuthorizationRequests::APIRialSandboxAttributes
+end

From ee555870709c324e7662a45ae03aa229544a3124 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 29 Jan 2025 12:21:39 +0100
Subject: [PATCH 30/40] Migration: APIEPro

---
 app/migration/import/authorization_requests.rb                 | 2 ++
 .../import/authorization_requests/api_e_pro_attributes.rb      | 3 +++
 .../authorization_requests/api_e_pro_sandbox_attributes.rb     | 2 ++
 3 files changed, 7 insertions(+)
 create mode 100644 app/migration/import/authorization_requests/api_e_pro_attributes.rb
 create mode 100644 app/migration/import/authorization_requests/api_e_pro_sandbox_attributes.rb

diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index fddc230fe..1b24a8569 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -277,6 +277,8 @@ def from_target_api_to_type(enrollment)
       'api_cpr_pro_production' => 'api_cpr_pro_adelie',
       'api_e_contacts_sandbox' => 'api_e_contacts_sandbox',
       'api_e_contacts_production' => 'api_e_contacts',
+      'api_e_pro_sandbox' => 'api_e_pro_sandbox',
+      'api_e_pro_production' => 'api_e_pro',
     }[enrollment['target_api']].try(:classify)
   end
 
diff --git a/app/migration/import/authorization_requests/api_e_pro_attributes.rb b/app/migration/import/authorization_requests/api_e_pro_attributes.rb
new file mode 100644
index 000000000..3e89f5094
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_e_pro_attributes.rb
@@ -0,0 +1,3 @@
+class Import::AuthorizationRequests::APIEProAttributes < Import::AuthorizationRequests::APIRialAttributes
+end
+
diff --git a/app/migration/import/authorization_requests/api_e_pro_sandbox_attributes.rb b/app/migration/import/authorization_requests/api_e_pro_sandbox_attributes.rb
new file mode 100644
index 000000000..16e4de5ac
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_e_pro_sandbox_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APIEProSandboxAttributes < Import::AuthorizationRequests::APIRialSandboxAttributes
+end

From 4ae7ef1e37a9951b7d0f232b4509d0f5f6c8d82c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 29 Jan 2025 12:26:03 +0100
Subject: [PATCH 31/40] Migration: APIENSUDocuments

---
 app/migration/import/authorization_requests.rb                  | 2 ++
 .../authorization_requests/api_ensu_documents_attributes.rb     | 2 ++
 .../api_ensu_documents_sandbox_attributes.rb                    | 2 ++
 3 files changed, 6 insertions(+)
 create mode 100644 app/migration/import/authorization_requests/api_ensu_documents_attributes.rb
 create mode 100644 app/migration/import/authorization_requests/api_ensu_documents_sandbox_attributes.rb

diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index 1b24a8569..efe499bf7 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -279,6 +279,8 @@ def from_target_api_to_type(enrollment)
       'api_e_contacts_production' => 'api_e_contacts',
       'api_e_pro_sandbox' => 'api_e_pro_sandbox',
       'api_e_pro_production' => 'api_e_pro',
+      'api_ensu_documents_sandbox' => 'api_ensu_documents_sandbox',
+      'api_ensu_documents_production' => 'api_ensu_documents',
     }[enrollment['target_api']].try(:classify)
   end
 
diff --git a/app/migration/import/authorization_requests/api_ensu_documents_attributes.rb b/app/migration/import/authorization_requests/api_ensu_documents_attributes.rb
new file mode 100644
index 000000000..6067242ee
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_ensu_documents_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APIENSUDocumentsAttributes < Import::AuthorizationRequests::APIRialAttributes
+end
diff --git a/app/migration/import/authorization_requests/api_ensu_documents_sandbox_attributes.rb b/app/migration/import/authorization_requests/api_ensu_documents_sandbox_attributes.rb
new file mode 100644
index 000000000..051b8b71e
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_ensu_documents_sandbox_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APIENSUDocumentsSandboxAttributes < Import::AuthorizationRequests::APIRialSandboxAttributes
+end

From ff509eb51628143ba1672bc12392478ce91bc1f4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 29 Jan 2025 13:03:55 +0100
Subject: [PATCH 32/40] Migration: do not import validated production with more
 recent validated

---
 app/migration/import/authorization_requests.rb | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index efe499bf7..2c4bf68d3 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -19,6 +19,7 @@ def extract(enrollment_row)
     authorization_request.form_uid ||= fetch_form(authorization_request).try(:id)
     authorization_request.state = enrollment_row['status']
     authorization_request.external_provider_id = enrollment_row['external_provider_id']
+    authorization_request.last_validated_at = enrollment_row['last_validated_at']
     # FIXME to delete, will use raw data anyway
     # authorization_request.copied_from_request = AuthorizationRequest.find(enrollment_row['copied_from_enrollment_id']) if enrollment_row['copied_from_enrollment_id'] && AuthorizationRequest.exists?(enrollment_row['copied_from_enrollment_id'])
 
@@ -228,10 +229,16 @@ def import?(enrollment_row)
       (
         !old_unused?(enrollment_row) &&
           !ignore?(enrollment_row['id']) &&
+          !more_recent_validated_production?(enrollment_row) &&
           from_target_api_to_type(enrollment_row).present?
       )
   end
 
+  def more_recent_validated_production?(enrollment_row)
+    enrollment_row['target_api'] =~ /_production$/ &&
+      database.execute("select id from enrollments where status = 'validated' and copied_from_enrollment_id = ?", enrollment_row['id']).any?
+  end
+
   def whitelisted_enrollment?(enrollment_row)
     (options[:authorization_request_ids] || []).include?(enrollment_row['id'].to_i)
   end

From db19f7398b357fe9b9297e6ef9f8888a0871ff60 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 29 Jan 2025 13:04:11 +0100
Subject: [PATCH 33/40] Migration: API Hermes

---
 app/migration/import/authorization_requests.rb                  | 2 ++
 .../import/authorization_requests/api_hermes_attributes.rb      | 2 ++
 .../authorization_requests/api_hermes_sandbox_attributes.rb     | 2 ++
 3 files changed, 6 insertions(+)
 create mode 100644 app/migration/import/authorization_requests/api_hermes_attributes.rb
 create mode 100644 app/migration/import/authorization_requests/api_hermes_sandbox_attributes.rb

diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index 2c4bf68d3..893053417 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -288,6 +288,8 @@ def from_target_api_to_type(enrollment)
       'api_e_pro_production' => 'api_e_pro',
       'api_ensu_documents_sandbox' => 'api_ensu_documents_sandbox',
       'api_ensu_documents_production' => 'api_ensu_documents',
+      'api_hermes_sandbox' => 'api_hermes_sandbox',
+      'api_hermes_production' => 'api_hermes',
     }[enrollment['target_api']].try(:classify)
   end
 
diff --git a/app/migration/import/authorization_requests/api_hermes_attributes.rb b/app/migration/import/authorization_requests/api_hermes_attributes.rb
new file mode 100644
index 000000000..95a5851cc
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_hermes_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APIHermesAttributes < Import::AuthorizationRequests::APIRialAttributes
+end
diff --git a/app/migration/import/authorization_requests/api_hermes_sandbox_attributes.rb b/app/migration/import/authorization_requests/api_hermes_sandbox_attributes.rb
new file mode 100644
index 000000000..cf18da632
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_hermes_sandbox_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APIHermesSandboxAttributes < Import::AuthorizationRequests::APIRialSandboxAttributes
+end

From 9e9cf9b7712f96d95474ce8daa75f436ea6962ae Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 29 Jan 2025 13:09:02 +0100
Subject: [PATCH 34/40] Migration: APIImprimfip

---
 app/migration/import/authorization_requests.rb                  | 2 ++
 .../import/authorization_requests/api_imprimfip_attributes.rb   | 2 ++
 .../authorization_requests/api_imprimfip_sandbox_attributes.rb  | 2 ++
 3 files changed, 6 insertions(+)
 create mode 100644 app/migration/import/authorization_requests/api_imprimfip_attributes.rb
 create mode 100644 app/migration/import/authorization_requests/api_imprimfip_sandbox_attributes.rb

diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index 893053417..7fd8cfc3b 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -290,6 +290,8 @@ def from_target_api_to_type(enrollment)
       'api_ensu_documents_production' => 'api_ensu_documents',
       'api_hermes_sandbox' => 'api_hermes_sandbox',
       'api_hermes_production' => 'api_hermes',
+      'api_imprimfip_sandbox' => 'api_imprimfip_sandbox',
+      'api_imprimfip_production' => 'api_imprimfip',
     }[enrollment['target_api']].try(:classify)
   end
 
diff --git a/app/migration/import/authorization_requests/api_imprimfip_attributes.rb b/app/migration/import/authorization_requests/api_imprimfip_attributes.rb
new file mode 100644
index 000000000..88c683691
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_imprimfip_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APIImprimfipAttributes < Import::AuthorizationRequests::APIRialAttributes
+end
diff --git a/app/migration/import/authorization_requests/api_imprimfip_sandbox_attributes.rb b/app/migration/import/authorization_requests/api_imprimfip_sandbox_attributes.rb
new file mode 100644
index 000000000..7fcdf1189
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_imprimfip_sandbox_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APIImprimfipSandboxAttributes < Import::AuthorizationRequests::APIRialSandboxAttributes
+end

From 0fbe701f636eb5f11a832b51863b57257b17f5c5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 29 Jan 2025 13:18:25 +0100
Subject: [PATCH 35/40] Migration: API Mire / AI Ofci

---
 app/migration/import/authorization_requests.rb                | 4 ++++
 .../import/authorization_requests/api_mire_attributes.rb      | 2 ++
 .../authorization_requests/api_mire_sandbox_attributes.rb     | 2 ++
 .../import/authorization_requests/api_ocfi_attributes.rb      | 2 ++
 .../authorization_requests/api_ocfi_sandbox_attributes.rb     | 2 ++
 5 files changed, 12 insertions(+)
 create mode 100644 app/migration/import/authorization_requests/api_mire_attributes.rb
 create mode 100644 app/migration/import/authorization_requests/api_mire_sandbox_attributes.rb
 create mode 100644 app/migration/import/authorization_requests/api_ocfi_attributes.rb
 create mode 100644 app/migration/import/authorization_requests/api_ocfi_sandbox_attributes.rb

diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index 7fd8cfc3b..49d14a41c 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -292,6 +292,10 @@ def from_target_api_to_type(enrollment)
       'api_hermes_production' => 'api_hermes',
       'api_imprimfip_sandbox' => 'api_imprimfip_sandbox',
       'api_imprimfip_production' => 'api_imprimfip',
+      'api_mire_sandbox' => 'api_mire_sandbox',
+      'api_mire_production' => 'api_mire',
+      'api_ocfi_sandbox' => 'api_ocfi_sandbox',
+      'api_ocfi_production' => 'api_ocfi',
     }[enrollment['target_api']].try(:classify)
   end
 
diff --git a/app/migration/import/authorization_requests/api_mire_attributes.rb b/app/migration/import/authorization_requests/api_mire_attributes.rb
new file mode 100644
index 000000000..4c8e86ff3
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_mire_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APIMireAttributes < Import::AuthorizationRequests::APIRialAttributes
+end
diff --git a/app/migration/import/authorization_requests/api_mire_sandbox_attributes.rb b/app/migration/import/authorization_requests/api_mire_sandbox_attributes.rb
new file mode 100644
index 000000000..d7ddb8188
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_mire_sandbox_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APIMireSandboxAttributes < Import::AuthorizationRequests::APIRialSandboxAttributes
+end
diff --git a/app/migration/import/authorization_requests/api_ocfi_attributes.rb b/app/migration/import/authorization_requests/api_ocfi_attributes.rb
new file mode 100644
index 000000000..a5fe498bd
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_ocfi_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APIOcfiAttributes < Import::AuthorizationRequests::APIRialAttributes
+end
diff --git a/app/migration/import/authorization_requests/api_ocfi_sandbox_attributes.rb b/app/migration/import/authorization_requests/api_ocfi_sandbox_attributes.rb
new file mode 100644
index 000000000..270303d9e
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_ocfi_sandbox_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APIOcfiSandboxAttributes < Import::AuthorizationRequests::APIRialSandboxAttributes
+end

From 88b693a964699f8972c4a6b06d750f5fa5b8418e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 29 Jan 2025 13:22:26 +0100
Subject: [PATCH 36/40] Migration: API Opale

---
 app/migration/import/authorization_requests.rb                  | 2 ++
 .../import/authorization_requests/api_opale_attributes.rb       | 2 ++
 .../authorization_requests/api_opale_sandbox_attributes.rb      | 2 ++
 3 files changed, 6 insertions(+)
 create mode 100644 app/migration/import/authorization_requests/api_opale_attributes.rb
 create mode 100644 app/migration/import/authorization_requests/api_opale_sandbox_attributes.rb

diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index 49d14a41c..75205d6df 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -296,6 +296,8 @@ def from_target_api_to_type(enrollment)
       'api_mire_production' => 'api_mire',
       'api_ocfi_sandbox' => 'api_ocfi_sandbox',
       'api_ocfi_production' => 'api_ocfi',
+      'api_opale_sandbox' => 'api_opale_sandbox',
+      'api_opale_production' => 'api_opale',
     }[enrollment['target_api']].try(:classify)
   end
 
diff --git a/app/migration/import/authorization_requests/api_opale_attributes.rb b/app/migration/import/authorization_requests/api_opale_attributes.rb
new file mode 100644
index 000000000..ae18716d8
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_opale_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APIOpaleAttributes < Import::AuthorizationRequests::APIRialAttributes
+end
diff --git a/app/migration/import/authorization_requests/api_opale_sandbox_attributes.rb b/app/migration/import/authorization_requests/api_opale_sandbox_attributes.rb
new file mode 100644
index 000000000..c75e02374
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_opale_sandbox_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APIOpaleSandboxAttributes < Import::AuthorizationRequests::APIRialSandboxAttributes
+end

From 245dce1d2252613c6b52ca5b6b5f9e1dd405d29e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 29 Jan 2025 13:26:09 +0100
Subject: [PATCH 37/40] Migration: API Robf

---
 app/migration/import/authorization_requests.rb                  | 2 ++
 .../import/authorization_requests/api_robf_attributes.rb        | 2 ++
 .../authorization_requests/api_robf_sandbox_attributes.rb       | 2 ++
 3 files changed, 6 insertions(+)
 create mode 100644 app/migration/import/authorization_requests/api_robf_attributes.rb
 create mode 100644 app/migration/import/authorization_requests/api_robf_sandbox_attributes.rb

diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index 75205d6df..5d8477edc 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -298,6 +298,8 @@ def from_target_api_to_type(enrollment)
       'api_ocfi_production' => 'api_ocfi',
       'api_opale_sandbox' => 'api_opale_sandbox',
       'api_opale_production' => 'api_opale',
+      'api_robf_sandbox' => 'api_robf_sandbox',
+      'api_robf_production' => 'api_robf',
     }[enrollment['target_api']].try(:classify)
   end
 
diff --git a/app/migration/import/authorization_requests/api_robf_attributes.rb b/app/migration/import/authorization_requests/api_robf_attributes.rb
new file mode 100644
index 000000000..e1d22e8b2
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_robf_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APIRobfAttributes < Import::AuthorizationRequests::APIRialAttributes
+end
diff --git a/app/migration/import/authorization_requests/api_robf_sandbox_attributes.rb b/app/migration/import/authorization_requests/api_robf_sandbox_attributes.rb
new file mode 100644
index 000000000..ae4282837
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_robf_sandbox_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APIRobfSandboxAttributes < Import::AuthorizationRequests::APIRialSandboxAttributes
+end

From a9cd161d090bd7b0f0066def4495018e2dde7154 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 29 Jan 2025 13:27:47 +0100
Subject: [PATCH 38/40] Migration: API Satelit

---
 app/migration/import/authorization_requests.rb                  | 2 ++
 .../import/authorization_requests/api_satelit_attributes.rb     | 2 ++
 .../authorization_requests/api_satelit_sandbox_attributes.rb    | 2 ++
 3 files changed, 6 insertions(+)
 create mode 100644 app/migration/import/authorization_requests/api_satelit_attributes.rb
 create mode 100644 app/migration/import/authorization_requests/api_satelit_sandbox_attributes.rb

diff --git a/app/migration/import/authorization_requests.rb b/app/migration/import/authorization_requests.rb
index 5d8477edc..2cea65c52 100644
--- a/app/migration/import/authorization_requests.rb
+++ b/app/migration/import/authorization_requests.rb
@@ -300,6 +300,8 @@ def from_target_api_to_type(enrollment)
       'api_opale_production' => 'api_opale',
       'api_robf_sandbox' => 'api_robf_sandbox',
       'api_robf_production' => 'api_robf',
+      'api_satelit_sandbox' => 'api_satelit_sandbox',
+      'api_satelit_production' => 'api_satelit',
     }[enrollment['target_api']].try(:classify)
   end
 
diff --git a/app/migration/import/authorization_requests/api_satelit_attributes.rb b/app/migration/import/authorization_requests/api_satelit_attributes.rb
new file mode 100644
index 000000000..5297e5a01
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_satelit_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APISatelitAttributes < Import::AuthorizationRequests::APIRialAttributes
+end
diff --git a/app/migration/import/authorization_requests/api_satelit_sandbox_attributes.rb b/app/migration/import/authorization_requests/api_satelit_sandbox_attributes.rb
new file mode 100644
index 000000000..67eda012e
--- /dev/null
+++ b/app/migration/import/authorization_requests/api_satelit_sandbox_attributes.rb
@@ -0,0 +1,2 @@
+class Import::AuthorizationRequests::APISatelitSandboxAttributes < Import::AuthorizationRequests::APIRialSandboxAttributes
+end

From f77bc6045d312a279818433d2a4f5e35006c203a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Wed, 29 Jan 2025 15:48:48 +0100
Subject: [PATCH 39/40] Migration: WIP

---
 app/migration/main_import.rb | 35 ++++++++++++++++++++++-------------
 1 file changed, 22 insertions(+), 13 deletions(-)

diff --git a/app/migration/main_import.rb b/app/migration/main_import.rb
index 0c5510e24..7be0fc25b 100644
--- a/app/migration/main_import.rb
+++ b/app/migration/main_import.rb
@@ -15,7 +15,7 @@ def perform
     import(:organizations, { load_from_sql: true })
     import(:users, { load_from_sql: true })
 
-    import_extra_authorization_requests_sql_data
+    # import_extra_authorization_requests_sql_data
 
     authorization_requests = import(:authorization_requests, { load_from_sql: false, dump_sql: true })
 
@@ -96,22 +96,31 @@ def export_path(kind)
   def global_options
     {
       authorization_requests_filter: ->(enrollment_row) do
-        %w[
-          64447 64348 62067 6195 6033 5055 4438 4436 4433 4198 4166 4162 4159 4157 4155
-          4153 4151 4149 4147 4145 4143 4140 4138 4136 4134 4132 4130 4127 4125 4123
-          4121 4119 4117 4115 4113 4109 4106 4104 4101 4098 4096 4094 4092 4090 4088
-          3932 3540 54510 54497 43297 40647 40116 39580 14323 51640 49730 49191 48323
-          23657 14770 45463 45442 43965 43816 5893 4442 45173 3666
-        ].exclude?(enrollment_row['id'])
-        # %w[63955 64669].include?(enrollment_row['id'])
-        %w[
-          1465
-        ].exclude?(enrollment_row['id'])
+        true
       end,
-      authorization_requests_sql_where: 'target_api in (\'franceconnect\') order by id',
       # authorization_requests_sql_where: 'target_api in (\'franceconnect\', \'api_impot_particulier_fc_sandbox\', \'api_impot_particulier_fc_production\') order by case when target_api = \'franceconnect\' then 1 when target_api like \'%_sandbox\' then 2 else 3 end',
+      authorization_requests_sql_where: "target_api in (#{target_apis_to_import}) order by case when target_api = 'franceconnect' then 1 when target_api like '%_sandbox' then 2 else 3 end",
       skipped: @skipped,
       warned: @warned,
     }
   end
+
+  def target_apis_to_import
+    %w[
+      api_rial
+      api_cpr_pro
+      api_e_contacts
+      api_e_pro
+      api_ensu_documents
+      api_hermes
+      api_imprimfip
+      api_mire
+      api_ocfi
+      api_opale
+      api_robf
+      api_satelit
+    ].map do |name|
+      ["'#{name}_sandbox'", "'#{name}_production'"]
+    end.flatten.join(', ')
+  end
 end

From fa28a632e10fb9b816573ecaf3e1a353db94186d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Delmaire=20Lo=C3=AFc?= <loic.delmaire@gmail.com>
Date: Tue, 4 Feb 2025 15:25:30 +0100
Subject: [PATCH 40/40] Update brakeman

---
 config/brakeman.ignore | 32 +++++++++++++++++++++++++++-----
 1 file changed, 27 insertions(+), 5 deletions(-)

diff --git a/config/brakeman.ignore b/config/brakeman.ignore
index 901d884ef..cae246f6e 100644
--- a/config/brakeman.ignore
+++ b/config/brakeman.ignore
@@ -30,7 +30,7 @@
       "check_name": "SQL",
       "message": "Possible SQL injection",
       "file": "app/lib/seeds.rb",
-      "line": 18,
+      "line": 19,
       "link": "https://brakemanscanner.org/docs/warning_types/sql_injection/",
       "code": "ActiveRecord::Base.connection.execute(\"TRUNCATE TABLE #{table} CASCADE;\")",
       "render_path": null,
@@ -84,7 +84,7 @@
           "type": "controller",
           "class": "AuthorizationRequestFormsController",
           "method": "new",
-          "line": 16,
+          "line": 20,
           "file": "app/controllers/authorization_request_forms_controller.rb",
           "rendered": {
             "name": "authorization_request_forms/new",
@@ -141,7 +141,7 @@
           "type": "controller",
           "class": "AuthorizationRequestFormsController",
           "method": "new",
-          "line": 21,
+          "line": 25,
           "file": "app/controllers/authorization_request_forms_controller.rb",
           "rendered": {
             "name": "authorization_requests/unauthenticated_start",
@@ -182,8 +182,30 @@
         77
       ],
       "note": ""
+    },
+    {
+      "warning_type": "Command Injection",
+      "warning_code": 14,
+      "fingerprint": "f7b89e7a16053d1ff4ee5f354ba065a2297647f963533cf8d684a31be5bc6697",
+      "check_name": "Execute",
+      "message": "Possible command injection",
+      "file": "app/migration/main_import.rb",
+      "line": 42,
+      "link": "https://brakemanscanner.org/docs/warning_types/command_injection/",
+      "code": "`psql -d #{ActiveRecord::Base.connection.current_database} -f #{file}`",
+      "render_path": null,
+      "location": {
+        "type": "method",
+        "class": "MainImport",
+        "method": "import_extra_authorization_requests_sql_data"
+      },
+      "user_input": "ActiveRecord::Base.connection.current_database",
+      "confidence": "Medium",
+      "cwe_id": [
+        77
+      ],
+      "note": ""
     }
   ],
-  "updated": "2024-11-19 07:38:19 +0100",
-  "brakeman_version": "6.2.2"
+  "brakeman_version": "7.0.0"
 }