feat: add csrf
This commit is contained in:
@@ -237,6 +237,7 @@ async def payment_quote(
|
||||
status_code=200,
|
||||
responses=ERROR_RESPONSES,
|
||||
)
|
||||
@csrf_protect()
|
||||
async def list_orders(
|
||||
limit: int = Query(default=20, ge=1, le=100),
|
||||
offset: int = Query(default=0, ge=0),
|
||||
@@ -254,6 +255,7 @@ async def list_orders(
|
||||
status_code=200,
|
||||
responses=ERROR_RESPONSES,
|
||||
)
|
||||
@csrf_protect()
|
||||
async def list_payments(
|
||||
limit: int = Query(default=20, ge=1, le=100),
|
||||
offset: int = Query(default=0, ge=0),
|
||||
@@ -275,6 +277,7 @@ async def list_payments(
|
||||
status_code=200,
|
||||
responses=ERROR_RESPONSES,
|
||||
)
|
||||
@csrf_protect()
|
||||
async def order_status(
|
||||
order_id: str,
|
||||
auth: AuthContext = Depends(require_access_token),
|
||||
@@ -327,6 +330,7 @@ async def order_events(
|
||||
status_code=200,
|
||||
responses=ERROR_RESPONSES,
|
||||
)
|
||||
@csrf_protect()
|
||||
async def order_detail(
|
||||
order_id: str,
|
||||
auth: AuthContext = Depends(require_access_token),
|
||||
|
||||
Reference in New Issue
Block a user