From d0f75e5bcede22838f2a03e0d5355ed5512c74d8 Mon Sep 17 00:00:00 2001 From: Adam Soltys Date: Tue, 11 Apr 2023 18:47:10 +0000 Subject: lookup payment without user id --- routes/payments.js | 1 - 1 file changed, 1 deletion(-) diff --git a/routes/payments.js b/routes/payments.js index ab3b547e..a30a0518 100644 --- a/routes/payments.js +++ b/routes/payments.js @@ -271,7 +271,6 @@ app.get("/payment/:hash", auth, async function(req, res) { let { hash } = req.params; let payment = await db.Payment.findOne({ where: { - user_id: req.user.id, [Op.or]: [{ hash }, { redeemcode: hash }] }, -- cgit v1.2.3