diff --git a/src/main/kotlin/com/android/trisolarisserver/controller/RazorpayRefundsController.kt b/src/main/kotlin/com/android/trisolarisserver/controller/RazorpayRefundsController.kt index e84eb2f..5d55acf 100644 --- a/src/main/kotlin/com/android/trisolarisserver/controller/RazorpayRefundsController.kt +++ b/src/main/kotlin/com/android/trisolarisserver/controller/RazorpayRefundsController.kt @@ -67,6 +67,11 @@ class RazorpayRefundsController( if (payment.booking.id != bookingId || payment.property.id != propertyId) { throw ResponseStatusException(HttpStatus.NOT_FOUND, "Payment not found for booking") } + request.amount?.let { + if (it > payment.amount) { + throw ResponseStatusException(HttpStatus.BAD_REQUEST, "amount must be <= payment amount") + } + } payment.gatewayPaymentId ?: throw ResponseStatusException(HttpStatus.BAD_REQUEST, "Payment is missing gateway id") }