Forbidden on StripeID mismatch.

ro-tex · ro-tex · commit 6a97405f4696 · 2022-07-25T13:37:22.000+03:00
diff --git a/api/stripe.go b/api/stripe.go
@@ -300,7 +300,7 @@ func (api *API) stripeCheckoutIDGET(u *database.User, w http.ResponseWriter, req
 		return
 	}
 	if cos.Customer.ID != u.StripeID {
-		api.WriteError(w, ErrCheckoutDoesNotBelongToUser, http.StatusBadRequest)
+		api.WriteError(w, ErrCheckoutDoesNotBelongToUser, http.StatusForbidden)
 		return
 	}
 	coSub := cos.Subscription

Original file line number	Diff line number	Diff line change
`@@ -300,7 +300,7 @@ func (api API) stripeCheckoutIDGET(u database.User, w http.ResponseWriter, req`
`300`	`300`	`return`
`301`	`301`	`}`
`302`	`302`	`if cos.Customer.ID != u.StripeID {`
`303`		`- api.WriteError(w, ErrCheckoutDoesNotBelongToUser, http.StatusBadRequest)`
	`303`	`+ api.WriteError(w, ErrCheckoutDoesNotBelongToUser, http.StatusForbidden)`
`304`	`304`	`return`
`305`	`305`	`}`
`306`	`306`	`coSub := cos.Subscription`