Skip to content

Add validation, authorization, and deprecation handling for invoice operations - #935

Open
thelux134 wants to merge 1 commit into
WHEELBACK:mainfrom
thelux134:batch-114-features
Open

thelux134 wants to merge 1 commit into
WHEELBACK:mainfrom
thelux134:batch-114-features

Conversation

@thelux134

Copy link
Copy Markdown

Closes #866
Closes #868
Closes #869
Closes #870

Pull Request

Summary

  • Describe the purpose of this PR in one or two sentences.

Checklist

  • PR description includes: Closes #[issue_id]
  • Tests added or updated
  • ABI snapshot updated if contract sources changed (abis/ and COMEBACKHERE-contracts/)
  • Screenshots attached if UI changed
  • Documentation updated if needed

Notes

  • For contract changes, verify ABI snapshot hygiene with make check-abi-snapshots.
  • For UI changes, include screenshots or screen recordings to help reviewers.

…perations

- Issue WHEELBACK#868: Invoice creation rejects negative or zero amounts
  * Validate amount_usdc is greater than zero
  * Return 422 Unprocessable Entity with clear error message

- Issue WHEELBACK#869: Invoice creation rejects unsupported token symbols
  * Whitelist supported tokens: USDC, XLM, native
  * Return 422 with list of supported tokens for unknown symbols

- Issue WHEELBACK#870: Invoice lookup checks merchant authorization
  * Added authorization check to prevent data leakage
  * Ensures requesting merchant can only view their own invoices
  * Prevents unauthorized access to other merchants' records

- Issue WHEELBACK#866: Deprecated endpoint returns proper deprecation response
  * Add Deprecation and Sunset HTTP headers per RFC 8594
  * Include migration path and deprecation notice in response body
  * Ensure clients receive clear guidance on endpoint migration
  * Response format includes data wrapped with deprecation metadata

Closes WHEELBACK#868, WHEELBACK#869, WHEELBACK#870, WHEELBACK#866
@drips-wave

drips-wave Bot commented Oct 18, 2026

Copy link
Copy Markdown

@thelux134 Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

1 participant