Benjamin_Boenisch/breakpilot-core
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: allow investors to query fp_ scenarios by scenarioId
Build pitch-deck / build-push-deploy (push) Successful in 1m55s
Details
CI / go-lint (push) Has been skipped
Details
CI / python-lint (push) Has been skipped
Details
CI / nodejs-lint (push) Has been skipped
Details
CI / test-go-consent (push) Successful in 40s
Details
CI / test-python-voice (push) Successful in 37s
Details
CI / test-bqas (push) Successful in 34s
Details

Browse Source 
AssumptionsSlide sends ?scenarioId=<uuid> for Bear/Base/Bull cards but
the route was silently dropping it for non-admin requests, making all
three cards return the same default Base Case data. Since fp_ financial
projections are already investor-facing, any valid scenarioId is allowed.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Sharang Parnerkar
2026-05-04 14:27:07 +02:00
parent 652e3a65a3
commit 6c022d1a79
1 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pitch-deck/app/api/finanzplan/[sheetName]/route.ts
+1 -3
View File
@@ -48,9 +48,7 @@ export async function GET(
return NextResponse.json({ error: `Unknown sheet: ${sheetName}` }, { status: 400 }) return NextResponse.json({ error: `Unknown sheet: ${sheetName}` }, { status: 400 })
} }
// Only admin callers may query an arbitrary scenarioId; investors always see the default const scenarioId = request.nextUrl.searchParams.get('scenarioId')
const isAdmin = validateAdminSecret(request)
const scenarioId = isAdmin ? request.nextUrl.searchParams.get('scenarioId') : null
try { try {
let query = `SELECT * FROM ${table}` let query = `SELECT * FROM ${table}`