feat: enhance account retrieval with authentication checks

Merged
LU
7mo ago
+110-0
  • Updated the account retrieval API to require authentication via x-api-key or Authorization: Bearer.
  • Added validation to ensure the caller has access to the requested account.
  • Introduced unit tests for the account handler to cover various scenarios including invalid UUIDs and authorization failures.

Summary by CodeRabbit

  • Bug Fixes

    • Added authentication and authorization validation to the account retrieval endpoint to ensure proper access control.

  • Documentation

    • Updated API documentation to specify authentication requirements (API key or bearer token) and authorization policies for account access.