Budget: 6000 UAH Deadline: 10 days
Hello!
I have done a similar integration of the 1C/BAS bot through an extension, so I can immediately see how to do it correctly and safely.
What is important in your technical specification and what I will consider:
Architecture. The bot with the FTP server will be a separate backend, BAS will connect to it on its own (only outgoing requests), it will not accept anything from the outside — just as you requested in the update. In mode 1, a secure link with a limited validity period is attached to the document instead of a file.
Security. HTTPS, a token for the BAS↔bot server connection, signed links to files, MIME type checking based on file content (not by extension), size/type restrictions — everything will be configurable, not hardcoded.
Implementation without changing the configuration. Everything will be done through an extension: settings logs, bot user directory, departments/FTP, a button on document forms.
Deployment. A server for the bot, GitHub with auto-building and deployment to the server, settings for connecting with BAS.
Support. One month of bug fixes after delivery is included.