Ho Ngoc Hai 9583d1cb66 fix(payments): harden payment flow with idempotency keys, amount validation, and magic byte file validation ...

- Add dedicated idempotencyKey column with unique constraint (userId, provider, idempotencyKey) to prevent duplicate payments at DB level
- Add @Min(1) @Max(100B) validators on amountVND in CreatePaymentDto to reject invalid amounts at API boundary
- Replace read-check-write callback handler with atomic updateIfStatus to eliminate race condition on concurrent callbacks
- Add magic byte verification in FileValidationPipe to validate file content matches declared MIME type server-side

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-04-08 06:18:26 +07:00

..

migration.sql

fix(payments): harden payment flow with idempotency keys, amount validation, and magic byte file validation

2026-04-08 06:18:26 +07:00