fix: clients should not be able to view canceled invoices

simsustech · Aug 15, 2024 · f538001 · f538001
1 parent 91d42f3
commit f538001
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/packages/api/src/trpc/public/invoices.ts b/packages/api/src/trpc/public/invoices.ts
@@ -32,7 +32,13 @@ export const publicInvoiceRoutes = ({
             withAmountRefunded: true
           }
         })
-        if (invoice?.status !== 'concept') return invoice
+        if (
+          invoice?.status &&
+          ![InvoiceStatus.CONCEPT, InvoiceStatus.CANCELED].includes(
+            invoice.status
+          )
+        )
+          return invoice
       }
       throw new TRPCError({
         code: 'BAD_REQUEST'