summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--merchant-spec/public-orders-get.ts2
1 files changed, 2 insertions, 0 deletions
diff --git a/merchant-spec/public-orders-get.ts b/merchant-spec/public-orders-get.ts
index 84af8543..263e29f6 100644
--- a/merchant-spec/public-orders-get.ts
+++ b/merchant-spec/public-orders-get.ts
@@ -52,6 +52,8 @@ function handlePublicOrdersGet(mos: MerchantOrderStore, req: Req): Resp {
}
const authMissing = !!req.contractHash && !!req.claimToken;
+ // For this endpoint, when the order does not have a claim token,
+ // the order status can be accessed *without* h_contract.
const authOk =
ord.contractHash === req.contractHash ||
(ord.requireClaimToken && ord.claimToken === req.claimToken) ||