Project

General

Profile

Actions
Copy link

Bug #3

open
PK PK

[SEC-02] Change to fail CLOSED: reject any webhook if the secret is missing/unset instead of silently accepting it.

Bug #3: [SEC-02] Change to fail CLOSED: reject any webhook if the secret is missing/unset instead of silently accepting it.

Added by Prabhakar Kumar about 3 hours ago.

Status:
New
Priority:
P0
Assignee:
Prabhakar Kumar
Category:
Security
Start date:
10 Aug 2026
Due date:
% Done:

0%

Estimated time:

Description

Module: Security / Payment

Current State:
verify_razorpay_webhook_signature() returns "valid" (fails OPEN) if RAZORPAY_WEBHOOK_SECRET is unset (payment_service.py ~line 349). Confirmed the secret IS currently set on production, so this is not actively being exploited today — but this exact project has had two real infra misconfigurations in the last month alone.

Task:
Change to fail CLOSED: reject any webhook if the secret is missing/unset instead of silently accepting it.

Why It Matters:
A missing env var should never silently disable payment-fraud protection. One misconfiguration away from letting anyone POST a fake "payment captured" event and get free goods.

Target Week: Week 1

Excel Owner: Prabhakar

Excel Priority: P0 - Critical

Excel Status: Not Started

Sprint Plan ID: SEC-02

No data to display

Actions
Copy link

Also available in: PDF Atom