Use the same find by account and order id to always have valid obj ownership check

This commit is contained in:
Fang-Pen Lin
2025-11-07 09:18:39 -08:00
parent 6b85ab54a4
commit 0ed464308f
4 changed files with 44 additions and 46 deletions
+1 -5
View File
@@ -371,11 +371,7 @@ export const registerPkiAcmeRouter = async (server: FastifyZodProvider) => {
return sendAcmeResponse(
res,
profileId,
await server.services.pkiAcme.downloadAcmeCertificate({
profileId,
accountId,
orderId: req.params.orderId
})
await server.services.pkiAcme.downloadAcmeCertificate({ profileId, accountId, orderId: req.params.orderId })
);
}
});