joshuaandClaude Opus 5.5
865a16abe9
The Yoco secret key and webhook secret now live in AppSetting (AES-256-GCM encrypted), with .env as a fallback. A new Site Settings → Yoco tab shows them masked card-style, registers a webhook with Yoco (storing the secret it returns) or accepts one entered by hand, and lists/deletes the account's webhooks. Generic settings endpoints never read or write these keys. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
13 lines
562 B
JavaScript
13 lines
562 B
JavaScript
const express = require('express');
|
|
const router = express.Router();
|
|
const { getConfig, updateConfig, getWebhooks, createWebhook, removeWebhook } = require('../controllers/yocoController');
|
|
const { protect, admin } = require('../middleware/authMiddleware');
|
|
|
|
router.get('/config', protect, admin, getConfig);
|
|
router.put('/config', protect, admin, updateConfig);
|
|
router.get('/webhooks', protect, admin, getWebhooks);
|
|
router.post('/webhooks', protect, admin, createWebhook);
|
|
router.delete('/webhooks/:id', protect, admin, removeWebhook);
|
|
|
|
module.exports = router;
|