github-starred/actual
2
0
Fork 0
mirror of https://github.com/actualbudget/actual.git synced 2026-03-22 00:13:45 -05:00
Code Issues 250 Packages Projects Releases 53 Wiki Activity

Require authentication for SimpleFIN and Pluggy.ai endpoints (#7034)

Browse Source 
* Add authentication middleware to SimpleFIN and Pluggy.ai endpoints

Protect /simplefin/* and /pluggyai/* routes with validateSessionMiddleware
so only authenticated users can access bank account and transaction data.

Co-authored-by: Cursor <cursoragent@cursor.com>

* Release notes

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Matiss Janis Aboltins
2026-02-19 22:46:10 +00:00
committed by GitHub
parent cf58712bf1
commit 0de44af1de
3 changed files with 18 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
packages/sync-server/src/app-pluggyai/app-pluggyai.js
View File

@@ -2,14 +2,18 @@ import express from 'express';
import { handleError } from '../app-gocardless/util/handle-error';
import { SecretName, secretsService } from '../services/secrets-service';
import { requestLoggerMiddleware } from '../util/middlewares';
import {
requestLoggerMiddleware,
validateSessionMiddleware,
} from '../util/middlewares';
import { pluggyaiService } from './pluggyai-service';
const app = express();
export { app as handlers };
app.use(express.json());
app.use(requestLoggerMiddleware);
app.use(express.json());
app.use(validateSessionMiddleware);
app.post(
'/status',

8
packages/sync-server/src/app-simplefin/app-simplefin.js
View File

@@ -4,12 +4,16 @@ import express from 'express';
import { handleError } from '../app-gocardless/util/handle-error';
import { SecretName, secretsService } from '../services/secrets-service';
import { requestLoggerMiddleware } from '../util/middlewares';
import {
requestLoggerMiddleware,
validateSessionMiddleware,
} from '../util/middlewares';
const app = express();
export { app as handlers };
app.use(express.json());
app.use(requestLoggerMiddleware);
app.use(express.json());
app.use(validateSessionMiddleware);
app.post(
'/status',