From 8ce1adcd5534ff73f18eed181ac637c5d8a6a254 Mon Sep 17 00:00:00 2001
From: airdropzamani <airdropzamani.resmi@gmail.com>
Date: Fri, 4 Sep 2026 03:42:45 +0300
Subject: [PATCH] fix: filter GET /api/transactions by authenticated user_id

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 app/api/transactions/route.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/app/api/transactions/route.ts b/app/api/transactions/route.ts
index ff6b0b6..56fc466 100644
--- a/app/api/transactions/route.ts
+++ b/app/api/transactions/route.ts
@@ -213,11 +213,12 @@ export async function GET(req: NextRequest) {
       });
     }
 
-    // Fetch user transactions (filter by USER type)
+    // Fetch user transactions (filter by USER type and authenticated user)
     const { data: transactions, error: txError } = await supabase
       .from("transactions")
       .select("*")
       .eq("transaction_type", "USER")
+      .eq("user_id", user.id)
       .order("created_at", { ascending: false });
 
     if (txError) {