Files

Siavash Sameni 4cf5c49274 docs(audit): align documentation with post-remediation backend reality

- Update data model enums to match backend models
- Update API reference auth requirements
- Add dispute module references and warning blocks
- Add 2026-05-24 audit remediation callout to Overview
- Generate task breakdowns and audit artifacts
- Add doc alignment report (.taskmaster/reports/)

2026-05-24 11:16:29 +04:00

1022 B

Raw Blame History

taskmaster_id, status, priority, depends_on, parent_id, source, generated_at

taskmaster_id

status

priority

depends_on

parent_id

source

generated_at

2.1

done

high

taskmaster

2026-05-24T07:15:25.199Z

2.1 - Secure unauthenticated endpoints and owner enforcement

2.1 - Secure unauthenticated endpoints and owner enforcement #taskmaster #priority/high #status/done ⏫ 🆔 tm-2-1

Metadata

Field	Value
Taskmaster ID	2.1
Status	done
Priority	high
Dependencies	None
Parent	2 - Implement platform audit remediation plan

Description

Require authenticateToken and owner/admin checks on exposed payment, AI, and legacy notification routes.

Details

Derive notification userId from authenticated principal. Protect payment history and mutation endpoints. Restrict AI calls to authenticated users with per-user budgets. Add denied-access audit logs.

Verification

Unauthorized callers receive 401/403; users cannot access or mutate other users' payments/notifications; admins retain authorized access.

1022 B Raw Blame History