From 4ab3e2cb97c4210aa84542f917b8f64d80b656b8 Mon Sep 17 00:00:00 2001
From: Fang-Pen Lin <hello@fangpenlin.com>
Date: Mon, 3 Nov 2025 19:00:54 -0800
Subject: [PATCH] comments

---
 backend/src/ee/services/pki-acme/pki-acme-service.ts | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/backend/src/ee/services/pki-acme/pki-acme-service.ts b/backend/src/ee/services/pki-acme/pki-acme-service.ts
index 49142d5c1..237eb2061 100644
--- a/backend/src/ee/services/pki-acme/pki-acme-service.ts
+++ b/backend/src/ee/services/pki-acme/pki-acme-service.ts
@@ -158,9 +158,11 @@ export const pkiAcmeServiceFactory = ({
     const { protectedHeader: rawProtectedHeader, payload: rawPayload } = result;
     try {
       const protectedHeader = ProtectedHeaderSchema.parse(rawProtectedHeader);
+      // Validate the URL
       if (new URL(protectedHeader.url).href !== url.href) {
         throw new AcmeUnauthorizedError({ detail: "URL mismatch in the protected header" });
       }
+      // Consume the nonce
       if (!protectedHeader.nonce) {
         throw new AcmeMalformedError({ detail: "Nonce is required in the protected header" });
       }
@@ -169,7 +171,7 @@ export const pkiAcmeServiceFactory = ({
         throw new AcmeBadNonceError({ detail: "Invalid nonce" });
       }
 
-      // TODO: consume the nonce here
+      // Parse the payload
       const decoder = new TextDecoder();
       const textPayload = decoder.decode(rawPayload);
       const payload = schema ? schema.parse(JSON.parse(textPayload)) : textPayload;