jeffemmett
/
rspace-online
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(rcart): make payment pages publicly accessible 

Payment request URLs (e.g. /rcart/pay/:id) should be accessible without
authentication, even in private spaces. The API endpoints were already
exempted from auth, but the client-side shell gate was redirecting
unauthenticated visitors to the module landing page. Set
spaceVisibility="public" on the payment page render to bypass this.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Jeff Emmett 2026-04-03 02:33:53 +00:00
parent 3c801aecaf
commit 19885c98e6
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
modules/rcart/mod.ts
View File

@ -2455,6 +2455,7 @@ routes.get("/pay/:id", (c) => {
title: `Payment | rCart`, title: `Payment | rCart`,
moduleId: "rcart", moduleId: "rcart",
spaceSlug: space, spaceSlug: space,
spaceVisibility: "public", // Payment pages are always public
modules: getModuleInfoList(), modules: getModuleInfoList(),
theme: "dark", theme: "dark",
body: `<folk-payment-page space="${space}" payment-id="${paymentId}"></folk-payment-page>`, body: `<folk-payment-page space="${space}" payment-id="${paymentId}"></folk-payment-page>`,