fix(review): harden miniapp auth and finance flows

2026-03-31 22:34:03 +00:00 · 2026-03-09 00:30:31 +04:00
parent 91a040f2ee
commit c8b17136be
22 changed files with 327 additions and 157 deletions
--- a/apps/bot/src/scheduler-auth.ts
+++ b/apps/bot/src/scheduler-auth.ts
@@ -57,10 +57,8 @@ export function createSchedulerRequestAuthorizer(options: {
        return true
      }

-      if (!oidcAudience || allowedEmails.size === 0) {
-        if (allowedEmails.size === 0) {
-          return false
-        }
+      if (allowedEmails.size === 0) {
+        return false
      }

      try {