damanukyan/pay-service
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add csrf

Browse Source
This commit is contained in:
Daniil Manukian
2026-05-12 23:37:30 +03:00
parent d4fe062f72
commit 07cd454248
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/presentation/routing/order.py
View File

@@ -237,6 +237,7 @@ async def payment_quote(
status_code=200, status_code=200,
responses=ERROR_RESPONSES, responses=ERROR_RESPONSES,
) )
@csrf_protect()
async def list_orders( async def list_orders(
limit: int = Query(default=20, ge=1, le=100), limit: int = Query(default=20, ge=1, le=100),
offset: int = Query(default=0, ge=0), offset: int = Query(default=0, ge=0),
@@ -254,6 +255,7 @@ async def list_orders(
status_code=200, status_code=200,
responses=ERROR_RESPONSES, responses=ERROR_RESPONSES,
) )
@csrf_protect()
async def list_payments( async def list_payments(
limit: int = Query(default=20, ge=1, le=100), limit: int = Query(default=20, ge=1, le=100),
offset: int = Query(default=0, ge=0), offset: int = Query(default=0, ge=0),
@@ -275,6 +277,7 @@ async def list_payments(
status_code=200, status_code=200,
responses=ERROR_RESPONSES, responses=ERROR_RESPONSES,
) )
@csrf_protect()
async def order_status( async def order_status(
order_id: str, order_id: str,
auth: AuthContext = Depends(require_access_token), auth: AuthContext = Depends(require_access_token),
@@ -327,6 +330,7 @@ async def order_events(
status_code=200, status_code=200,
responses=ERROR_RESPONSES, responses=ERROR_RESPONSES,
) )
@csrf_protect()
async def order_detail( async def order_detail(
order_id: str, order_id: str,
auth: AuthContext = Depends(require_access_token), auth: AuthContext = Depends(require_access_token),