fix(security): require authentication to place orders and enforce tok…

[Prateek2007-cmd]

Description

Resolves Issue #2356 (Unauthenticated Order Placement).

The /api/orders endpoint previously lacked authorization controls, allowing anonymous unauthenticated users to create arbitrary database records. Furthermore, the endpoint trusted the email provided in the JSON payload, exposing the system to identity spoofing.

This PR implements strict access control and enforces zero-trust identity mapping.

Changes Made

• Access Control Layer: Injected the get_current_user JWT authorization dependency into the create_order route, immediately blocking anonymous requests with a 401 Unauthorized.
• Identity Enforcement: The Order model instantiation now ignores order_data.email and directly maps current_user.email to the order, preventing malicious users from spoofing orders under other accounts.

Type of Change

• Security Fix
• Data Integrity

[vercel]

@Prateek2007-cmd is attempting to deploy a commit to the janavipandole's projects Team on Vercel.

A member of the Team first needs to authorize it.