feat: add csrf

This commit is contained in:
2026-05-12 23:39:57 +03:00
parent 07cd454248
commit 20840c95de

View File

@@ -239,6 +239,7 @@ async def payment_quote(
) )
@csrf_protect() @csrf_protect()
async def list_orders( async def list_orders(
request: Request,
limit: int = Query(default=20, ge=1, le=100), limit: int = Query(default=20, ge=1, le=100),
offset: int = Query(default=0, ge=0), offset: int = Query(default=0, ge=0),
auth: AuthContext = Depends(require_access_token), auth: AuthContext = Depends(require_access_token),
@@ -257,6 +258,7 @@ async def list_orders(
) )
@csrf_protect() @csrf_protect()
async def list_payments( async def list_payments(
request: Request,
limit: int = Query(default=20, ge=1, le=100), limit: int = Query(default=20, ge=1, le=100),
offset: int = Query(default=0, ge=0), offset: int = Query(default=0, ge=0),
auth: AuthContext = Depends(require_access_token), auth: AuthContext = Depends(require_access_token),
@@ -279,6 +281,7 @@ async def list_payments(
) )
@csrf_protect() @csrf_protect()
async def order_status( async def order_status(
request: Request,
order_id: str, order_id: str,
auth: AuthContext = Depends(require_access_token), auth: AuthContext = Depends(require_access_token),
command: GetOrderStatusCommand = Depends(get_order_status_command), command: GetOrderStatusCommand = Depends(get_order_status_command),
@@ -332,6 +335,7 @@ async def order_events(
) )
@csrf_protect() @csrf_protect()
async def order_detail( async def order_detail(
request: Request,
order_id: str, order_id: str,
auth: AuthContext = Depends(require_access_token), auth: AuthContext = Depends(require_access_token),
command: GetOrderCommand = Depends(get_order_command), command: GetOrderCommand = Depends(get_order_command),