@opengis/pay 1.1.3 → 1.1.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@opengis/pay",
|
|
3
|
-
"version": "1.1.
|
|
3
|
+
"version": "1.1.4",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"description": "pay plugins for billing",
|
|
6
6
|
"main": "plugin.js",
|
|
@@ -12,6 +12,8 @@
|
|
|
12
12
|
],
|
|
13
13
|
"scripts": {
|
|
14
14
|
"docs:dev": "vitepress dev docs",
|
|
15
|
+
"docs:build": "vitepress build docs",
|
|
16
|
+
"docs:preview": "vitepress preview docs",
|
|
15
17
|
"test": "node --test test/**/*.test.js",
|
|
16
18
|
"start": "node --watch-path=server server",
|
|
17
19
|
"admin": "cross-env NODE_ENV=admin npm run start",
|
|
@@ -30,7 +30,7 @@ export default async function PortmoneRedirect(req, reply) {
|
|
|
30
30
|
}
|
|
31
31
|
|
|
32
32
|
const { host, payeeId } = config.integrations?.pay || {};
|
|
33
|
-
const domain = `${req.protocol}://${req.hostname}`;
|
|
33
|
+
const domain = `${req.protocol}://${req.hostname.split(':').shift()}`;
|
|
34
34
|
|
|
35
35
|
if (!host) {
|
|
36
36
|
return { message: 'empty integration host', status: 400 };
|
|
@@ -62,7 +62,9 @@ export default async function PortmoneRedirect(req, reply) {
|
|
|
62
62
|
}
|
|
63
63
|
|
|
64
64
|
if (!headers?.referer || !headers.referer.includes(domain)) {
|
|
65
|
-
logger.file('payments/warn', {
|
|
65
|
+
logger.file('payments/warn', {
|
|
66
|
+
message: 'invalid referer', domain, referer: headers?.referer, uid: user.uid,
|
|
67
|
+
});
|
|
66
68
|
return { message: 'access restricted', status: 403 };
|
|
67
69
|
}
|
|
68
70
|
|