StashAway Malaysia

Lowyat.NET forums

Lowyat.NET Kopitiam Garage Sales

Lowyat.NET Rules and Regulations FAQ Help Search Members

Welcome Guest ( Log In | Register )

Lowyat.NET -> Finance, Business and Investment House

Bump Topic Add Reply RSS Feed

Outline · [ Standard ] · Linear+

Investment StashAway Malaysia, Multi-Region ETF at your fingertips!

views

siaush	Nov 5 2020, 10:11 PM Return to original view \| IPv6 \| Post #1
Getting Started Junior Member 246 posts Joined: Jan 2005	QUOTE(polarzbearz @ Nov 5 2020, 01:28 PM) Off topic abit - just wondering if you've got the script back up and running? Interested to know how you did it. Thinking to write the same as well but in VBA instead of Gsheets how I wished that they have official API and key support. As it is right now seems like I have to use classic authentication method (username / password) I noticed that StashAway's web app does use some sort of an API to obtain data from the backend, which uses GraphQL. I guess that is the best alternative to an official API at this point of time? The endpoint is at: https://api.stashaway.my/graphql and requires POST HTTP method to access. Minimally you will also need the following Request Headers (apart from the usual HTTP request headers): CODE Authorization: Bearer <Your session token after logging in.> x-client-identifier: webapp@4.0.0 I have not figured out how to obtain the bearer token programmatically yet, currently just getting it from Chrome's developer tools. Then the following Request Body (in JSON) will get you your transaction history: » Click to show Spoiler - click again to hide... « CODE {"operationName":"transactions","variables":{"page":0,"pageSize":1000},"query":"query transactions($transactionTypes: [String], $fundingSources: [String], $startMonth: String, $endMonth: String, $pageSize: Int, $page: Int) {\n customer {\n _id\n transactions(transactionTypes: $transactionTypes, fundingSources: $fundingSources, startMonth: $startMonth, endMonth: $endMonth, pageSize: $pageSize, page: $page) {\n page\n pageSize\n count\n items {\n id\n groupedDate\n groupedType\n groupedStatus\n amount: totalRequestedAmount {\n amount\n currency\n __typename\n }\n totalTransactedAmount {\n amount\n currency\n __typename\n }\n transactions {\n id\n accountId\n transactionId\n transactionType\n fundingSource\n finalTransactedAmount {\n amount\n currency\n __typename\n }\n finalTransactedDate\n amount: initialRequestedAmount {\n amount\n currency\n __typename\n }\n date: initialRequestedDate\n transactionStatus\n metadata {\n type\n depositType\n portfolioId\n goalName\n units\n pricePerUnit {\n amount\n currency\n __typename\n }\n purpose\n securityCode\n operationId\n fxRate\n hasFullRedemption\n redemptionType\n __typename\n }\n __typename\n }\n __typename\n }\n __typename\n }\n __typename\n }\n}\n"} Which returns a JSON response that looks like: » Click to show Spoiler - click again to hide... « CODE { "data": { "customer": { "_id": "<redacted>", "transactions": { "page": 0, "pageSize": 1000, "count": 51, "items": [ { "id": "<redacted>", "groupedDate": "2020-10-01", "groupedType": "PortfolioInvestment", "groupedStatus": "Completed", "amount": { "amount": 250, "currency": "MYR", "__typename": "Currency" }, "totalTransactedAmount": { "amount": 250, "currency": "MYR", "__typename": "Currency" }, ...... It works for most of the operations on the website, and each of them require a different GraphQL request. I have not analysed the response data models yet. I have just stumbled upon this today while imagining to build a consolidated investment portfolio tracking sheet across different platforms. This post has been edited by siaush: Nov 5 2020, 10:30 PM polarzbearz and honsiong liked this post
Card PM	Report Top Like Quote Reply

siaush	Nov 6 2020, 12:34 AM Return to original view \| Post #2
Getting Started Junior Member 246 posts Joined: Jan 2005	QUOTE(honsiong @ Nov 5 2020, 10:36 PM) Yes my approach is same as yours. I doubt they will release an official API for us, there are too few of us piping the data elsewhere anyway. https://gist.github.com/anonoz/1461cd0733c4...52a25dc822762cb BTW deploying to Heroku is significantly easier than AWS Lambda, just that Heroku has a 6 seconds warm up period, Lambda has near 0. Thanks for the code snippets, not really familiar with Ruby, but will have a look and see what I can get out of it. QUOTE(polarzbearz @ Nov 5 2020, 11:32 PM) Thank you for the detailed explanation! Will take sometime to digest this weekend and see if I can find a way to fit into my excel tracker My excel tracks almost everything now (worldwide stocks via Yahoo Finance, FSMOne HK / SG / MY, Currency (exchange). Only left StashAway which I updated manually for now and got annoyed. I was poking around chrome inspector this morning and had some idea but hasn't tried it yet. I was thinking along the line of passing the Request Payload (hardcoded somewhere with my SA useename/password) to automate the login token generation You are welcome! Oh I see, I have downloaded your Excel template for a deeper look and inspirations. I am exploring on Google Sheets as it can run on the cloud and we can schedule automated snapshots without manual intervention. With a quick look, it seems like the snippets honsiong shared is passing actual credentials to the login API and retrieving the bearer token from the response as well. Will look into it for more details too, thanks! This post has been edited by siaush: Nov 6 2020, 12:36 AM
Card PM	Report Top Like Quote Reply

siaush	Nov 6 2020, 03:22 PM Return to original view \| IPv6 \| Post #3
Getting Started Junior Member 246 posts Joined: Jan 2005	QUOTE(polarzbearz @ Nov 6 2020, 02:41 PM) So I've just poked around abit, I managed to implement it in EXCEL VB to POST login, get its token and call graphql querying the portfolio's I'd and got a successful JSON return. Now just have to 1) clean up code base and move all hardcoding to config page 2) parse the values Then I'm done. Thanks so much again both! The reference helped me quite significantly to poke the correct direction You are welcome, glad that it helped Looking forward to see your implementation should you decide to release it after the clean up Cheers!
Card PM	Report Top Like Quote Reply

siaush	Nov 6 2020, 09:44 PM Return to original view \| IPv6 \| Post #4
Getting Started Junior Member 246 posts Joined: Jan 2005	QUOTE(polarzbearz @ Nov 6 2020, 04:05 PM) It's not done yet but the form is there - just need to merge to my fundUpdater function I think I need to decouple my functions. My fundUpdater() is getting longer and longer with all these different fetch() methods And its done! Also feeling abit eerie to leave my username / password / device cookie in plain-text on the sheet. I might try to find ways to encrypt/decrypt it but might be useless also if it's all housed within same file Wow that's quick! Thanks for sharing it I will have a look in detail when situation permits. On the other hand, I have created a quick and dirty (but should be safe) way to store secrets inside the Excel file. I'll keep it in the spoiler tag below in order not to take up too much space for those who are not interested in this. » Click to show Spoiler - click again to hide... « I will attach my PoC Excel Workbook here. https://www.dropbox.com/s/2ay2rpi4iipwrh5/E...Shell.xlsm?dl=0 What I am doing is: - Created 2 functions in VBA - CreateEncryptedSecureString and DecryptEncryptedSecureString. - CreateEncryptedSecureString will allow one to create a SecureString, and then stored in an encrypted form of a normal String. It then store the encrypted text in a cell in Excel. - DecryptEncryptedSecureString decrypts the encrypted string back to plain text. The decrypted string can then be passed to whichever API call that requires the secret. - These functions executes PowerShell scripts embedded in the VBA scripts, so a PowerShell window will appear shortly when it is executing. The benefits are: - Uses the standard Windows authentication prompt dialog to obtain the secret to be encrypted - in the Password field of the dialog box. - The data is encrypted with the Windows Data Protection API (DPAPI), which only allows it to be decrypted on the same machine, by the same Windows user that encrypts it. (Big plus point for me) I have created a secret on my PC and kept it in the Excel I shared, you can try and see if you are able to decrypt it. This is how it will look like if it is decrypted successfully: The downsides are: - Requires PowerShell, I have only tested on Windows 10, not sure if it works for PowerShell Core which is cross-platform, as I see that you mentioned that your sheet currently works with Mac as well. - Even if it works with PowerShell Core on non-Windows systems, the data may not be encrypted properly as it requires an API that is only available on Windows. Further reading. - Might not be 100% secure, as the decryption is done by PowerShell and then written into the stdout stream and picked up by the VBA script. But it is still way better than storing it as plain text in Excel. Feel free to message if you need any help or clarification. Cheers! This post has been edited by siaush: Nov 6 2020, 10:39 PM polarzbearz liked this post
Card PM	Report Top Like Quote Reply

siaush	Jan 18 2024, 02:37 PM Return to original view \| IPv6 \| Post #5
Getting Started Junior Member 246 posts Joined: Jan 2005	QUOTE(Gabriel03 @ Jan 18 2024, 01:13 PM) Stashaway Simple is reducing to 3.6% pa. There are other money market funds which offer better deposit and withdrawal processing time at the same or better rate. Any other suggestions other than Versa, GO+ and KDI? This post has been edited by siaush: Jan 18 2024, 02:40 PM
Card PM	Report Top Like Quote Reply

siaush	Jan 22 2024, 03:04 PM Return to original view \| IPv6 \| Post #6
Getting Started Junior Member 246 posts Joined: Jan 2005	QUOTE(siaush @ Jan 18 2024, 02:37 PM) Any other suggestions other than Versa, GO+ and KDI? Answering my own question, if you have a FSMOne account, both of the funds in the new SA Simple target portfolio are available on FSM. - Eastspring Investments Islamic Income Fund - Class R - Principal Islamic Money Market Fund - Class AR So one of the option is to buy the MMFs directly through FSM, and you get the option of selecting the weightage you desire between the two funds, mimic SA Simple, or all-in into one, without the 0.15% p.a. fees. However the downside is, the initial and subsequent investment amounts of the funds are quite high, hence it is not as accessible as SA Simple.
Card PM	Report Top Like Quote Reply

« Next Oldest · Finance, Business and Investment House · Next Newest »

Add Reply Options

Change to:

0.0423sec

0.56

7 queries

GZIP Disabled
Time is now: 30th November 2025 - 04:28 PM

All Rights Reserved © 2002- 2025 Vijandren Ramadass (~unite against racism~)

Removal Request

Powered by Invision Power Board © 2025 IPS, Inc.