BazaRb#transfer accepts a non-string idempotency badge.
Steps to reproduce
baza.transfer("recipient", 1.0, "test", badge: 42)
Actual result
The client accepts the integer and includes it in the request body. The public API documents badge as a String, and a non-string badge can fail later during request encoding or be interpreted differently by the server. BazaRb::Fake already rejects this input.
Expected result
BazaRb#transfer should validate badge as a String before making a request and return a clear argument error for other types.
The affected code is BazaRb#transfer in lib/baza-rb.rb.
BazaRb#transfer accepts a non-string idempotency badge.
Steps to reproduce
Actual result
The client accepts the integer and includes it in the request body. The public API documents badge as a String, and a non-string badge can fail later during request encoding or be interpreted differently by the server. BazaRb::Fake already rejects this input.
Expected result
BazaRb#transfer should validate badge as a String before making a request and return a clear argument error for other types.
The affected code is BazaRb#transfer in lib/baza-rb.rb.