From 57124b48fef976ca1ed8d1ed092d3991956901de Mon Sep 17 00:00:00 2001 From: Riddhesh Mahajan <40472653+riddhesh-mahajan@users.noreply.github.com> Date: Sun, 14 Jan 2024 18:38:02 +0530 Subject: [PATCH] fix: don't allow uid update in bookings update api (#13071) * don't allow uid update in bookings update api * omit uid from schemaBookingEditBodyParams instead of updating schemaBookingBaseBodyParams --------- Co-authored-by: Alex van Andel Co-authored-by: Peer Richelsen --- apps/api/lib/validations/booking.ts | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/apps/api/lib/validations/booking.ts b/apps/api/lib/validations/booking.ts index 21dacd0611..950c6ab98c 100644 --- a/apps/api/lib/validations/booking.ts +++ b/apps/api/lib/validations/booking.ts @@ -28,7 +28,9 @@ const schemaBookingEditParams = z }) .strict(); -export const schemaBookingEditBodyParams = schemaBookingBaseBodyParams.merge(schemaBookingEditParams); +export const schemaBookingEditBodyParams = schemaBookingBaseBodyParams + .merge(schemaBookingEditParams) + .omit({ uid: true }); export const schemaBookingReadPublic = Booking.extend({ attendees: z