 Chris Farhood
|
2c2a69f20b
|
fix(GRO-1036): secure /api/invoices/stats/summary and refund endpoint
- Add requireRole('manager') auth middleware to /stats/summary handler
(was completely unauthenticated, exposing revenue/PII stats)
- Restore stripePaymentIntentId pre-condition check on refund: return 422
when invoice has no Stripe payment intent (prevents manual_ refund abuse)
- Remove groomer from refund role check (CTO ruling: manager-only)
- Remove manual refund branch since precondition now guarantees Stripe ID
- Move processRefund import to top of file
Fixes GRO-1036/GRO-1035 security findings.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
|
2026-05-04 22:37:23 +00:00 |
|