hedena_gold/apps/api/src/modules/customers/customers.module.ts

import { Module } from '@nestjs/common';
import { CustomersService } from './customers.service';

/**
 * Customer reads, exposed only through CustomerAuthController's token-derived
 * /customer/me* routes.
 *
 * CustomersController used to live here and served GET /customers,
 * /customers/:id, /customers/:id/orders and /customers/:id/ledger-entries, all
 * unauthenticated. The list handed any visitor every customer's national code,
 * debts, credit limit and identity-document URLs, and the :id routes let anyone
 * holding an id read that customer's profile, orders and ledger — so narrowing
 * the list alone did not close it. The whole controller is gone; the service
 * stays and is now only reachable behind a customer token.
 *
 * See SEC-08 in docs/parity/ISSUES.md.
 */
@Module({
  providers: [CustomersService],
  exports: [CustomersService],
})
export class CustomersModule {}