Skip to content

Add CORS middleware (CorsLayer::permissive) to handle preflight requests for all allowed origins - #937

Open
edwardfavour998-code wants to merge 1 commit into
WHEELBACK:mainfrom
edwardfavour998-code:batch-116-features
Open

edwardfavour998-code wants to merge 1 commit into
WHEELBACK:mainfrom
edwardfavour998-code:batch-116-features

Conversation

@edwardfavour998-code

Copy link
Copy Markdown

Changes:

  • lib.rs: Import tower_http::cors::CorsLayer and add to router middleware
  • Cargo.toml: Add tower-http dependency with cors feature
  • routes/invoices.rs: Add expires_in_seconds validation, standardize error codes (403/404/422/500)
  • routes/pay.rs: Standardize error codes to match HTTP status (403/404/500)
  • routes/cancel.rs: Standardize error codes to match HTTP status (403/404/500)
  • routes/refund.rs: Standardize error codes (403/404/422/500)

Closes #858
Closes #860
Closes #861
Closes #862

Pull Request

Summary

  • Describe the purpose of this PR in one or two sentences.

Checklist

  • PR description includes: Closes #[issue_id]
  • Tests added or updated
  • ABI snapshot updated if contract sources changed (abis/ and COMEBACKHERE-contracts/)
  • Screenshots attached if UI changed
  • Documentation updated if needed

Notes

  • For contract changes, verify ABI snapshot hygiene with make check-abi-snapshots.
  • For UI changes, include screenshots or screen recordings to help reviewers.

- WHEELBACK#858: Add CORS middleware (CorsLayer::permissive) to handle preflight requests for all allowed origins
- WHEELBACK#860: Standardize error codes across all routes - use HTTP status codes (400/403/404/422/500) instead of custom codes
- WHEELBACK#861: Idempotency store and mechanism already properly implemented in all mutation endpoints (pay/cancel/refund)
- WHEELBACK#862: Add validation in create_invoice to reject zero expiration time, ensuring due dates are valid

Changes:
- lib.rs: Import tower_http::cors::CorsLayer and add to router middleware
- Cargo.toml: Add tower-http dependency with cors feature
- routes/invoices.rs: Add expires_in_seconds validation, standardize error codes (403/404/422/500)
- routes/pay.rs: Standardize error codes to match HTTP status (403/404/500)
- routes/cancel.rs: Standardize error codes to match HTTP status (403/404/500)
- routes/refund.rs: Standardize error codes (403/404/422/500)
@drips-wave

drips-wave Bot commented Oct 18, 2026

Copy link
Copy Markdown

@edwardfavour998-code Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

1 participant