sanitized errors

backend/routes/stripe.js

@@ -6,7 +6,7 @@ const logger = require("../utils/logger");
 const router = express.Router();
 
 // Get checkout session status
-router.get("/checkout-session/:sessionId", async (req, res) => {
+router.get("/checkout-session/:sessionId", async (req, res, next) => {
   try {
     const { sessionId } = req.params;
 
@@ -32,14 +32,14 @@ router.get("/checkout-session/:sessionId", async (req, res) => {
     reqLogger.error("Stripe checkout session retrieval failed", {
       error: error.message,
       stack: error.stack,
-      sessionId: sessionId,
+      sessionId: req.params.sessionId,
     });
-    res.status(500).json({ error: error.message });
+    next(error);
   }
 });
 
 // Create connected account
-router.post("/accounts", authenticateToken, requireVerifiedEmail, async (req, res) => {
+router.post("/accounts", authenticateToken, requireVerifiedEmail, async (req, res, next) => {
   try {
     const user = await User.findByPk(req.user.id);
 
@@ -82,12 +82,12 @@ router.post("/accounts", authenticateToken, requireVerifiedEmail, async (req, re
       stack: error.stack,
       userId: req.user.id,
     });
-    res.status(500).json({ error: error.message });
+    next(error);
   }
 });
 
 // Generate onboarding link
-router.post("/account-links", authenticateToken, requireVerifiedEmail, async (req, res) => {
+router.post("/account-links", authenticateToken, requireVerifiedEmail, async (req, res, next) => {
   try {
     const user = await User.findByPk(req.user.id);
 
@@ -128,12 +128,12 @@ router.post("/account-links", authenticateToken, requireVerifiedEmail, async (re
       userId: req.user.id,
       stripeConnectedAccountId: user?.stripeConnectedAccountId,
     });
-    res.status(500).json({ error: error.message });
+    next(error);
   }
 });
 
 // Get account status
-router.get("/account-status", authenticateToken, async (req, res) => {
+router.get("/account-status", authenticateToken, async (req, res, next) => {
   try {
     const user = await User.findByPk(req.user.id);
 
@@ -168,7 +168,7 @@ router.get("/account-status", authenticateToken, async (req, res) => {
       userId: req.user.id,
       stripeConnectedAccountId: user?.stripeConnectedAccountId,
     });
-    res.status(500).json({ error: error.message });
+    next(error);
   }
 });
 
@@ -177,7 +177,7 @@ router.post(
   "/create-setup-checkout-session",
   authenticateToken,
   requireVerifiedEmail,
-  async (req, res) => {
+  async (req, res, next) => {
     try {
       const { rentalData } = req.body;
 
@@ -238,7 +238,7 @@ router.post(
         userId: req.user.id,
         stripeCustomerId: user?.stripeCustomerId,
       });
-      res.status(500).json({ error: error.message });
+      next(error);
     }
   }
 );