Skip to content

Fix 3 backend/contract issues (CORS, fuzzing, docs) - #568

Open
Muhammadcodes112 wants to merge 4 commits into
Abdulazeem-code:mainfrom
Muhammadcodes112:fix/issue-batch-1
Open

Fix 3 backend/contract issues (CORS, fuzzing, docs)#568
Muhammadcodes112 wants to merge 4 commits into
Abdulazeem-code:mainfrom
Muhammadcodes112:fix/issue-batch-1

Conversation

@Muhammadcodes112

Copy link
Copy Markdown
  • Validate CORS origins against a DB-backed approved-origins list (cached in Redis), in addition to the existing static allowlist.
  • Add a cargo-fuzz target for route_payments and a CI job that runs it on push/PR.
  • Add Rustdoc (parameters, returns, panics) for every public struct, enum, and function in payment_router/src/lib.rs.

No test suite was run for the Rust changes (no local libFuzzer/cargo-fuzz support on this machine); cargo check and cargo doc were run manually against payment_router to confirm the crate builds and docs generate cleanly, and the fuzz harness and Node.js CORS change were verified by manual code review/tracing rather than execution.

Closes #501
Closes #527
Closes #529

@vercel

vercel Bot commented Aug 25, 2026

Copy link
Copy Markdown

Someone is attempting to deploy a commit to the Abdulazeem's projects Team on Vercel.

A member of the Team first needs to authorize it.

@drips-wave

drips-wave Bot commented Aug 25, 2026

Copy link
Copy Markdown

@Muhammadcodes112 Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

@Abdulazeem-code

Copy link
Copy Markdown
Owner

KINDLY RESOLVE CONFLICTS

Resolves conflicts introduced by upstream's timelock/governance system
(queue_action/execute_action, ActionType, TimelockEntry, Governance
DataKey) landing after this branch was created. Kept both sides:
upstream's new timelock functionality and this branch's Rustdoc
comments (merged deprecation notes into the existing docs). Also kept
both the ApprovedOrigin (CORS) and ApiKey prisma models, which were
independent additions that happened to sit next to each other in the
schema.
@Abdulazeem-code

Copy link
Copy Markdown
Owner

FIX FAILED CHECKS

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

2 participants