Skip to content
Merged
Show file tree
Hide file tree
Changes from 5 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 0 additions & 2 deletions ApiDocs/HelloFutsal/Booking/BulkBookSlots.bru
Original file line number Diff line number Diff line change
Expand Up @@ -23,8 +23,6 @@ body:json {
"fieldId": "{{fieldId}}",
"startDate": "2026-05-10",
"endDate": "2026-05-12",
"startTime": "6:00",
"endTime": "11:00",
"userName": "John Doe",
"phoneNumber": "+9779800000000"
}
Expand Down
31 changes: 31 additions & 0 deletions ApiDocs/HelloFutsal/Create Field/DeleteField/DeleteField.bru
Original file line number Diff line number Diff line change
@@ -0,0 +1,31 @@
meta {
name: DeleteField
type: http
seq: 9
}

delete {
url: {{development}}/fields/{{fieldId}}
body: none
auth: bearer
}

headers {
~Authorization: Bearer $TOKEN
}

auth:bearer {
token: {{token}}
}

docs {
# Delete Field

Soft-deletes a field and deactivates its related rule books and membership plans.

## Requirements

- Only admins can delete fields
- At least one active field must remain for the owner
- Use a valid `fieldId`
}
Original file line number Diff line number Diff line change
@@ -0,0 +1,36 @@
meta {
name: DeleteMembership
type: http
seq: 41
}

delete {
url: {{development}}/membership-plans/{{membershipId}}
body: none
auth: bearer
}

headers {
~Authorization: Bearer $TOKEN
}

auth:bearer {
token: {{token}}
}

docs {
# Delete Membership Plan

Deletes a membership plan by cancelling it immediately.

## Behavior

- Marks the membership as inactive
- Sets the end date to today
- Releases future booked membership slots tied to the plan

## Requirements

- Only admins can delete membership plans
- Use a valid `membershipId`
}
3 changes: 2 additions & 1 deletion ApiDocs/HelloFutsal/Rule Book/CreateFieldRuleBook.bru
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,8 @@ auth:bearer {

body:json {
{
"ruleName": "Early Bird Morning Special",
"ruleName": "Early Bird Morning Special 3",
"effectiveDate": "2026-05-21",
"slotSelectionType": "timeRange",
"actionType": "fixedPrice",
"value": 1000,
Expand Down
30 changes: 30 additions & 0 deletions ApiDocs/HelloFutsal/Rule Book/DeleteRuleBook/DeleteRuleBook.bru
Original file line number Diff line number Diff line change
@@ -0,0 +1,30 @@
meta {
name: DeleteRuleBook
type: http
seq: 12
}

delete {
url: {{development}}/fields/{{fieldId}}/rule-books/{{ruleBookId}}
Comment thread
AyushAdh1 marked this conversation as resolved.
body: none
auth: bearer
}

headers {
~Authorization: Bearer $TOKEN
}

auth:bearer {
token: {{token}}
}

docs {
# Delete Rule Book

Soft-deletes a field rule book by marking it inactive.

## Requirements

- The field must belong to the authenticated admin
- Use valid `fieldId` and `ruleBookId`
}
Original file line number Diff line number Diff line change
@@ -1,18 +1,18 @@
meta {
name: UpdateFieldRuleBook
name: EditTimeRange
type: http
seq: 8
seq: 1
}

patch {
url: {{development}}/fields/{{fieldId}}/rule-books/{{ruleBookId}}
url: {{development}}/fields/{{fieldId}}/rule-books/{{rulebookId}}
body: json
auth: bearer
}

headers {
Content-Type: application/json
~Authorization: Bearer {{token}}
~Authorization: Bearer YOUR_TOKEN
}

auth:bearer {
Expand All @@ -21,16 +21,20 @@ auth:bearer {

body:json {
{
"effectiveDate": "2026-05-21",
"ruleName": "Early Bird Morning Special",
"slotSelectionType": "timeRange",
"actionType": "fixedPrice",
"value": 1000,
"value": 10,
"activeDays": [
"sunday"
"monday",
"wednesday",
"friday"
],
"timeRange": {
"startTime": "06:00",
"endTime": "11:00"
}
},
"isActive": true
}
}
30 changes: 0 additions & 30 deletions ApiDocs/HelloFutsal/Rule Book/UpdateFieldRuleBookAllSlots.bru

This file was deleted.

40 changes: 0 additions & 40 deletions ApiDocs/HelloFutsal/Rule Book/UpdateFieldRuleBookSpecificSlots.bru

This file was deleted.

34 changes: 0 additions & 34 deletions ApiDocs/HelloFutsal/Rule Book/UpdateFieldRuleBookTimeRange.bru

This file was deleted.

4 changes: 2 additions & 2 deletions ApiDocs/HelloFutsal/VerifyOTP/Admin OTP Verify.bru
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ auth:bearer {

body:json {
{
"requestId": "dcec5e4b-303c-4fd2-ac10-204f6e872c04",
"otp": "160433"
"requestId": "57864a07-ec0d-493d-a474-0dc0548ecc39",
"otp": "503657"
}
}
5 changes: 3 additions & 2 deletions ApiDocs/HelloFutsal/environments/Dev.bru
Original file line number Diff line number Diff line change
@@ -1,12 +1,13 @@
vars {
development: http://localhost:3000
fieldId: 1bdfdb6b-41d8-4e39-a38c-398bdca0ba39
token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIzMDIyMWFkOS0zZjgyLTQzZDgtYjQ1OS1kZGYyMGY2YzgzOTAiLCJlbWFpbCI6bnVsbCwibW9iaWxlTnVtYmVyIjoiOTg2Nzc1NDczOCIsInJvbGUiOiJhZG1pbiIsImlhdCI6MTc3ODMwMDMyOSwiZXhwIjoxNzc4Mzg2NzI5fQ.GHeUq7DIOmimuj6eBVFtFq6HiFXf9oSQP8RS0pW1sCU
fieldId: 7e64459c-4a92-490c-bfdd-4ab660a626e9
token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIzZjljZWYwZi0zZGQ0LTQwOGMtYTI2Ni0wMDJjN2E3MjlhODUiLCJlbWFpbCI6bnVsbCwibW9iaWxlTnVtYmVyIjoiOTg2Nzc1NDczOCIsInJvbGUiOiJhZG1pbiIsImlhdCI6MTc3ODYzNzYxNywiZXhwIjoxNzc4NzI0MDE3fQ.lF51reUEi07ST1GxobnaRq_nQ9vHWKrmRwRx9yryfYU
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Remove committed bearer token from tracked environment file.

A real JWT is committed in source control. Even if expired, this is a secrets-handling breach and encourages unsafe reuse.

Suggested fix
-  token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
+  token: YOUR_TOKEN_HERE
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIzZjljZWYwZi0zZGQ0LTQwOGMtYTI2Ni0wMDJjN2E3MjlhODUiLCJlbWFpbCI6bnVsbCwibW9iaWxlTnVtYmVyIjoiOTg2Nzc1NDczOCIsInJvbGUiOiJhZG1pbiIsImlhdCI6MTc3ODYzNzYxNywiZXhwIjoxNzc4NzI0MDE3fQ.lF51reUEi07ST1GxobnaRq_nQ9vHWKrmRwRx9yryfYU
token: YOUR_TOKEN_HERE
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@ApiDocs/HelloFutsal/environments/Dev.bru` at line 4, The Dev.bru environment
file contains a committed bearer token under the key "token"; remove the token
value and replace it with a non-secret placeholder (e.g. TOKEN_PLACEHOLDER) in
the Dev.bru file, add Dev.bru (or the environment files pattern) to .gitignore,
rotate/revoke the exposed JWT immediately, and purge the secret from repository
history using a tool like git filter-repo or BFG to remove the leaked value from
past commits.

ruleBookSpecificSlotId: 2e78fc78-08e4-423e-a8ef-5ff10c59f1a7
ruleBookAllSlotId: 81e212b2-dd86-47db-bb96-8a163b615d61
ruleBookTimeSlotId: 4aebf2ac-9651-4450-8968-812cd487261e
slotId: c7b13c7d-6d73-4e24-941e-d74a8eb18d5f
bookingId: c04ce07f-f1af-4ac2-a854-2f4394b2c565
scheduleSettingId: c06a9396-8f7f-4158-94d9-59ebd9d0adfd
membershipId: 528852ea-9aa7-499f-bb9d-77301c0f8eae
rulebookId: 5d6ca08c-cfad-4273-9656-66b4cdb13262
}
Loading
Loading