github-starred/actual-actualbudget
2
0
Fork 0
mirror of https://github.com/actualbudget/actual.git synced 2026-03-09 06:02:22 -05:00
Code Issues Packages Projects Releases Wiki Activity

Require authentication for SimpleFIN and Pluggy.ai endpoints (#7034)

Browse Source 
* Add authentication middleware to SimpleFIN and Pluggy.ai endpoints

Protect /simplefin/* and /pluggyai/* routes with validateSessionMiddleware
so only authenticated users can access bank account and transaction data.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Release notes

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Matiss Janis Aboltins
2026-02-19 22:46:10 +00:00
committed by GitHub
parent cf58712bf1
commit 0de44af1de
3 changed files with 18 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
packages/sync-server/src/app-pluggyai/app-pluggyai.js
View File

@@ -2,14 +2,18 @@ import express from 'express';
import { handleError } from '../app-gocardless/util/handle-error';
import { SecretName, secretsService } from '../services/secrets-service';
import { requestLoggerMiddleware } from '../util/middlewares';
import {
requestLoggerMiddleware,
validateSessionMiddleware,
} from '../util/middlewares';
import { pluggyaiService } from './pluggyai-service';
const app = express();
export { app as handlers };
app.use(express.json());
app.use(requestLoggerMiddleware);
app.use(express.json());
app.use(validateSessionMiddleware);
app.post(
'/status',

8
packages/sync-server/src/app-simplefin/app-simplefin.js
View File

@@ -4,12 +4,16 @@ import express from 'express';
import { handleError } from '../app-gocardless/util/handle-error';
import { SecretName, secretsService } from '../services/secrets-service';
import { requestLoggerMiddleware } from '../util/middlewares';
import {
requestLoggerMiddleware,
validateSessionMiddleware,
} from '../util/middlewares';
const app = express();
export { app as handlers };
app.use(express.json());
app.use(requestLoggerMiddleware);
app.use(express.json());
app.use(validateSessionMiddleware);
app.post(
'/status',

6
upcoming-release-notes/7034.md Normal file
View File

@@ -0,0 +1,6 @@
---
category: Bugfixes
authors: [MatissJanis]
---
Fix: simplefin and pluggy not requiring auth