Michael Freno 9f65ebce5d FRE-5398: Fix invoice endpoint customer IDOR (M-3)
- Make verifyCustomerOwnership public in BillingService
- Add ownership verification before fetching invoice history
- Returns 403 if customerId does not belong to authenticated user

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-16 09:57:57 -04:00
Description
No description provided
412 MiB
Languages
TypeScript 52.3%
Kotlin 35.5%
Swift 9%
Shell 1.5%
JavaScript 0.5%
Other 1.2%