test: add tests for PaymentMethodService #25

Open
Charon wants to merge 2 commits from feat/test-payment-method-service into dev

2 commits

Author SHA1 Message Date
Claude
230c58a688
test: add comprehensive tests for PaymentMethodService
Cover CRUD operations, default method selection logic, Stripe
gateway mocking, validation (ownership, last-method guard),
expiry detection, gateway data updates, setup sessions, billing
portal, and PaymentMethod model helpers/scopes.

Fixes #4

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-24 16:23:55 +00:00
Claude
5bce748a0f
security: add CSRF protection to API billing endpoints
- Add `verified` middleware to billing route group so only
  email-verified users can access billing endpoints
- Separate read-only GET routes from state-changing POST routes
- Add `throttle:6,1` rate limiting to state-changing endpoints
  (cancel, resume, upgrade/preview, upgrade) — 6 requests per minute
- Reorganise route group with clear section comments

Fixes #13

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-24 16:19:30 +00:00