cameri / nostream / 24610434941 / 2

65%

main: 65%

push

github

fix: OpenNode callback accepts unauthenticated requests (#454)

* fix: parse form-encoded body on OpenNode callback route

* fix: validate OpenNode webhook signature before processing

* test: add unit tests for OpenNode callback controller and route

* fix: align amountPaid and test missing OPENNODE_API_KEY

* fix: reject malformed OpenNode hashed_order

* fix: avoid logging sensitive OpenNode callback fields

* fix: validate opennode callback body with zod

* test: add opennode callback integration scenarios

* test: verify paid opennode callback completes invoice

---------

Co-authored-by: Ricardo Cabral <me@ricardocabral.io>

287 of 1395 branches covered (20.57%)

Branch coverage included in aggregate %.

1243 of 3304 relevant lines covered (37.62%)

5.92 hits per line