From f1096448038a42897d57333c95a2686a71fca587 Mon Sep 17 00:00:00 2001 From: Florian Dold Date: Thu, 12 Aug 2021 20:03:55 +0200 Subject: comment --- merchant-spec/public-orders-get.ts | 2 ++ 1 file changed, 2 insertions(+) diff --git a/merchant-spec/public-orders-get.ts b/merchant-spec/public-orders-get.ts index 84af8543..263e29f6 100644 --- a/merchant-spec/public-orders-get.ts +++ b/merchant-spec/public-orders-get.ts @@ -52,6 +52,8 @@ function handlePublicOrdersGet(mos: MerchantOrderStore, req: Req): Resp { } const authMissing = !!req.contractHash && !!req.claimToken; + // For this endpoint, when the order does not have a claim token, + // the order status can be accessed *without* h_contract. const authOk = ord.contractHash === req.contractHash || (ord.requireClaimToken && ord.claimToken === req.claimToken) || -- cgit v1.2.3