cerca fic

app/Services/FattureInCloudClient.php

@@ -50,9 +50,12 @@ class FattureInCloudClient
             'page' => max(1, $page),
             'per_page' => 20,
         ];
-        $term = trim(str_replace("'", '', $term));
+        $term = $this->searchTerm($term);
         if ($term !== '') {
-            $params['q'] = "(name like '%{$term}%' or vat_number like '%{$term}%' or tax_code like '%{$term}%')";
+            // contains, senza % e senza parentesi: like '%…%' viene bloccato
+            // dal gateway di Fatture in Cloud con un 403 senza corpo JSON.
+            $quoted = "'{$term}'";
+            $params['q'] = "name contains {$quoted} or vat_number contains {$quoted} or tax_code contains {$quoted}";
         }
 
         $json = $this->decode($this->http()->get($this->url('/entities/clients'), $params));
@@ -76,6 +79,13 @@ class FattureInCloudClient
         ];
     }
 
+    private function searchTerm(string $term): string
+    {
+        $term = trim(str_replace(["'", '\\', '%', '(', ')', "\0", "\n", "\r"], '', $term));
+
+        return mb_substr($term, 0, 80);
+    }
+
     public function getClient(int $id): array
     {
         $json = $this->decode($this->http()->get($this->url('/entities/clients/'.$id), [

resources/views/azienda/fic-scripts.blade.php

@@ -137,6 +137,28 @@ $(function () {
             results: data.results || [],
             pagination: { more: !!(data.pagination && data.pagination.more) }
           };
+        },
+        transport: function (params, success, failure) {
+          const request = $.ajax(params);
+          request.done(function (data) {
+            const el = document.getElementById('ficErrorAlert');
+            if (el.dataset.searchError === '1') {
+              el.removeAttribute('data-search-error');
+              showAlert('ficErrorAlert', '');
+            }
+            success(data);
+          });
+          request.fail(function (xhr) {
+            if (xhr.status === 0) {
+              failure();
+              return;
+            }
+            const message = (xhr.responseJSON && xhr.responseJSON.message) || 'Impossibile cercare su Fatture in Cloud.';
+            showAlert('ficErrorAlert', message);
+            document.getElementById('ficErrorAlert').dataset.searchError = '1';
+            failure();
+          });
+          return request;
         }
       }
     });