From 31801455f019074cc924021d1c1bf6e5617d10d1 Mon Sep 17 00:00:00 2001
From: Fang-Pen Lin <hello@fangpenlin.com>
Date: Fri, 31 Oct 2025 14:36:34 -0700
Subject: [PATCH] Add cond

---
 backend/src/ee/services/pki-acme/pki-acme-challenge-dal.ts | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/backend/src/ee/services/pki-acme/pki-acme-challenge-dal.ts b/backend/src/ee/services/pki-acme/pki-acme-challenge-dal.ts
index 7d77f51bd..03d309c03 100644
--- a/backend/src/ee/services/pki-acme/pki-acme-challenge-dal.ts
+++ b/backend/src/ee/services/pki-acme/pki-acme-challenge-dal.ts
@@ -50,6 +50,8 @@ export const pkiAcmeChallengeDALFactory = (db: TDbClient) => {
                   authStatus: AcmeAuthStatus.Valid
                 }
               )
+              // Only update orders that are pending
+              .where(`${TableName.PkiAcmeOrder}.status`, AcmeOrderStatus.Pending)
               .whereIn(`${TableName.PkiAcmeOrder}.id`, involvedOrderIds);
           })
           .update({ status: AcmeOrderStatus.Ready });