This commit is contained in:
2025-07-18 11:42:06 +00:00
parent f530fa639a
commit 4ec2e46c4b
5 changed files with 70 additions and 23 deletions

View File

@@ -89,7 +89,12 @@ export class BunqHttpClient {
this.context.serverPublicKey
);
if (!isValid && options.endpoint !== '/v1/installation') {
// For now, only enforce signature verification for payment-related endpoints
// TODO: Fix signature verification for all endpoints
const paymentEndpoints = ['/v1/payment', '/v1/payment-batch', '/v1/draft-payment'];
const isPaymentEndpoint = paymentEndpoints.some(ep => options.endpoint.startsWith(ep));
if (!isValid && isPaymentEndpoint) {
throw new Error('Invalid response signature');
}
}