be3503b31b
- Payment endpoint no longer uses @_require_auth (not client-callable) - Identifies user from webhook payload user_id instead of client JWT - Removed hardcoded payment secret from chat.js - Client now shows placeholder message directing to admin - Webhook secret + user_id must come from payment provider server |
||
|---|---|---|
| .. | ||
| chat.js | ||
| crypto.js | ||
| socket.io.min.js | ||
| style.css | ||