kavore 3f22c3a531 fix(payments): enforce strict YooKassa webhook binding ...

Require payment_db_id for successful webhook processing and validate ownership. Precreate payment records for auto-renew and include payment_db_id in provider metadata. Ignore replayed succeeded webhooks. Also normalize empty Telegram webhook secret before set_webhook and request handler usage.

2026-02-09 10:17:37 +03:00

..

controllers

channel require and db update

2025-10-17 09:36:25 +03:00

factories

chore(security): replace silent exception swallowing across handlers

2026-02-08 21:30:39 +03:00

web

fix(payments): enforce strict YooKassa webhook binding

2026-02-09 10:17:37 +03:00