summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorFlorian Dold <florian@dold.me>2021-08-12 20:03:55 +0200
committerFlorian Dold <florian@dold.me>2021-08-12 20:03:55 +0200
commitf1096448038a42897d57333c95a2686a71fca587 (patch)
tree151de271eb0cdb69b53f7e48aa2b64bb904b06b6
parent2953525355a1b8d7c667c535f48c1e0b628d3f61 (diff)
downloaddocs-f1096448038a42897d57333c95a2686a71fca587.tar.gz
docs-f1096448038a42897d57333c95a2686a71fca587.tar.bz2
docs-f1096448038a42897d57333c95a2686a71fca587.zip
comment
-rw-r--r--merchant-spec/public-orders-get.ts2
1 files changed, 2 insertions, 0 deletions
diff --git a/merchant-spec/public-orders-get.ts b/merchant-spec/public-orders-get.ts
index 84af8543..263e29f6 100644
--- a/merchant-spec/public-orders-get.ts
+++ b/merchant-spec/public-orders-get.ts
@@ -52,6 +52,8 @@ function handlePublicOrdersGet(mos: MerchantOrderStore, req: Req): Resp {
}
const authMissing = !!req.contractHash && !!req.claimToken;
+ // For this endpoint, when the order does not have a claim token,
+ // the order status can be accessed *without* h_contract.
const authOk =
ord.contractHash === req.contractHash ||
(ord.requireClaimToken && ord.claimToken === req.claimToken) ||