Remove auth from insurance listener. Fail silently if invalid callback given #761

config/packages/security.yaml

@@ -53,6 +53,10 @@ security:
             pattern: ^\/test_capi\/
             security: false
 
+        insurance:
+            pattern: ^\/insurance\/
+            security: false
+
         paymongo:
             pattern: ^\/paymongo\/
             security: false

src/Controller/InsuranceController.php

@@ -39,6 +39,13 @@ class InsuranceController extends Controller
         
         // END DEBUG
 
+        // if no transaction code given, silently fail
+        if (empty($attr['transaction_code'])) {
+            return $this->json([
+                'success' => true,
+            ]);
+        }
+
         // get event type and process accordingly
         $event_name = $payload['transaction_code'];
 

src/Controller/PayMongoController.php

@@ -34,6 +34,13 @@ class PayMongoController extends Controller
         
         // END DEBUG
 
+        // if no event type given, silently fail
+        if (empty($attr['type'])) {
+            return $this->json([
+                'success' => true,
+            ]);
+        }
+
         // get event type and process accordingly
         $attr = $payload['data']['attributes'];
         $event = $attr['data'];