Skip to content

Fix: [P2] Implement merchant IP allowlist feature - #580

Merged
martinzhames merged 3 commits into
dupdab:mainfrom
blesship:autosolve/issue-496
Oct 23, 2026
Merged

martinzhames merged 3 commits into
dupdab:mainfrom
blesship:autosolve/issue-496

Conversation

@blesship

Copy link
Copy Markdown
Contributor

Resolves #496.

Opened automatically by autosolve-cli.

Closes #496

…udit

- Add api_key_ip_allowlist column (CIDR/IP list) on merchants
- POST /merchants/api-keys/:id/ip-allowlist to set the allowlist (audited)
- JwtAuthGuard rejects API-key requests from unlisted IPs with 403 IP_NOT_ALLOWED
- Admin/superadmin-role keys may bypass the allowlist; each bypass is audit-logged

Co-Authored-By: Claude Haiku 5.5 <noreply@anthropic.com>
@drips-wave

drips-wave Bot commented Oct 20, 2026

Copy link
Copy Markdown

@blesship Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

# Conflicts:
#	src/auth/guards/jwt.guard.ts
#	src/merchants/merchants.controller.ts
#	src/merchants/merchants.service.ts
@martinzhames
martinzhames merged commit 93107ab into dupdab:main Oct 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[P2] Implement merchant IP allowlist feature

2 participants