From 20840c95dee2642c29cf525bd62852668e57e933 Mon Sep 17 00:00:00 2001
From: Noloquideus <daniilmanukian@gmail.com>
Date: Tue, 12 May 2026 23:39:57 +0300
Subject: [PATCH] feat: add csrf

---
 src/presentation/routing/order.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/presentation/routing/order.py b/src/presentation/routing/order.py
index 8e4e193..1976b9b 100644
--- a/src/presentation/routing/order.py
+++ b/src/presentation/routing/order.py
@@ -239,6 +239,7 @@ async def payment_quote(
 )
 @csrf_protect()
 async def list_orders(
+        request: Request,
         limit: int = Query(default=20, ge=1, le=100),
         offset: int = Query(default=0, ge=0),
         auth: AuthContext = Depends(require_access_token),
@@ -257,6 +258,7 @@ async def list_orders(
 )
 @csrf_protect()
 async def list_payments(
+        request: Request,
         limit: int = Query(default=20, ge=1, le=100),
         offset: int = Query(default=0, ge=0),
         auth: AuthContext = Depends(require_access_token),
@@ -279,6 +281,7 @@ async def list_payments(
 )
 @csrf_protect()
 async def order_status(
+        request: Request,
         order_id: str,
         auth: AuthContext = Depends(require_access_token),
         command: GetOrderStatusCommand = Depends(get_order_status_command),
@@ -332,6 +335,7 @@ async def order_events(
 )
 @csrf_protect()
 async def order_detail(
+        request: Request,
         order_id: str,
         auth: AuthContext = Depends(require_access_token),
         command: GetOrderCommand = Depends(get_order_command),