search: mask ACH results

Author: adamdecaf

examples/config.yml

@@ -7,6 +7,9 @@ RailMsgSQL:
 
   Search:
     SqliteFilepath: "ach.db"
+    AchMasking:
+      MaskNames: true
+      MaskAccountNumbers: true
 
   Storage:
     ACH:

go.mod

@@ -4,7 +4,7 @@ go 1.24.4
 
 require (
 	github.com/gorilla/mux v1.8.1
-	github.com/moov-io/ach v1.51.0
+	github.com/moov-io/ach v1.51.1-0.20250627200125-def87fc661c8
 	github.com/moov-io/ach-web-viewer v0.12.7-0.20250626211433-b71716051d91
 	github.com/moov-io/base v0.56.0
 	github.com/ncruces/go-sqlite3 v0.26.2

go.sum

@@ -225,6 +225,8 @@ github.com/mitchellh/mapstructure v1.5.0 h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyua
 github.com/mitchellh/mapstructure v1.5.0/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo=
 github.com/moov-io/ach v1.51.0 h1:YeQcdGThImVhw9UTvmP3cc6zpLMKcOt23lMc2C/4wCs=
 github.com/moov-io/ach v1.51.0/go.mod h1:CkyghZB14RLCagR3HERvLGhQ6hrJZPYmUfpHGBBGHws=
+github.com/moov-io/ach v1.51.1-0.20250627200125-def87fc661c8 h1:CeZfWGoKggI7lqJkCMCluuopINciukLo29buP4OcKoQ=
+github.com/moov-io/ach v1.51.1-0.20250627200125-def87fc661c8/go.mod h1:CkyghZB14RLCagR3HERvLGhQ6hrJZPYmUfpHGBBGHws=
 github.com/moov-io/ach-web-viewer v0.12.7-0.20250626211433-b71716051d91 h1:TOZ1ePqy/zkRS70p6hGIq3lT4gHfdZ60gYz/8atxaK4=
 github.com/moov-io/ach-web-viewer v0.12.7-0.20250626211433-b71716051d91/go.mod h1:CqVrIWTMEaYwdjqHMy3QlTWq+QxkTfpzp/I2LqRIKRY=
 github.com/moov-io/base v0.56.0 h1:zNeviN7lW3hP0lsVeKwLYb8dTxcFvVTPX5xwrelCl8s=

internal/search/model_config.go

@@ -1,5 +1,11 @@
 package search
 
+import (
+	"github.com/moov-io/ach/cmd/achcli/describe/mask"
+)
+
 type Config struct {
 	SqliteFilepath string
+
+	AchMasking mask.Options
 }

internal/search/service.go

@@ -7,6 +7,7 @@ import (
 	"fmt"
 
 	"github.com/moov-io/ach"
+	"github.com/moov-io/ach/cmd/achcli/describe/mask"
 	"github.com/moov-io/base/log"
 	railmsgsql "github.com/moov-io/rail-msg-sql"
 	"github.com/moov-io/rail-msg-sql/internal/achhelp"
@@ -43,6 +44,7 @@ func NewService(logger log.Logger, config Config, fileStorage *storage.Repositor
 
 	return &service{
 		logger:      logger,
+		config:      config,
 		fileStorage: fileStorage,
 		db:          db,
 	}, nil
@@ -53,7 +55,9 @@ func openSqliteDB(config Config) (*sql.DB, error) {
 }
 
 type service struct {
-	logger      log.Logger
+	logger log.Logger
+	config Config
+
 	fileStorage *storage.Repository
 
 	db *sql.DB
@@ -411,6 +415,9 @@ func (s *service) IngestACHFile(ctx context.Context, filename string, file *ach.
 	// Make sure to normalize the IDs
 	file = achhelp.PopulateIDs(file)
 
+	// Mask the file before storage
+	file = mask.File(file, s.config.AchMasking)
+
 	// Begin transaction
 	tx, err := s.db.BeginTx(ctx, nil)
 	if err != nil {