feat(MED-100): small improvements

2025-07-21 11:54:07 +03:00
parent 15ed539283
commit 5d53e53ba8
11 changed files with 30 additions and 17 deletions
--- a/app/api/montonio/verify-token/route.ts
+++ b/app/api/montonio/verify-token/route.ts
@@ -58,6 +58,12 @@ export const POST = enhanceRouteHandler(
        algorithms: ['HS256'],
      }) as MontonioOrderToken;

+      const activeCartId = request.cookies.get('_medusa_cart_id')?.value;
+      const [, cartId] = decoded.merchantReferenceDisplay.split(':');
+      if (cartId !== activeCartId) {
+        throw new Error('Invalid cart id');
+      }
+
      logger.info(
        {
          name: namespace,