coinos-server.git, branch mastercoinos server — legacy coinos.io backend (Lightning, on-chain, Liquid)https://git.coinos.io/coinos-server.git/atom?h=master2026-10-13T23:23:37Zusers: let a password unlock the encrypted nostr key for any session2026-10-13T23:23:37ZAdam Soltysadam@coinos.io2026-10-13T23:23:37Zurn:sha1:12349761c03e769e1d54e878746a10d0a464b38d
/me only reports hasnsec now, so sessions that didn't start with a
password login had no way to reveal or sign with their key. POST /nsec
returns it after re-checking the password, under the login per-IP
failure limit.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UjHzoBmW1iPpEe5qC2LDYB
login: drop the unused per-username failure counter2026-10-13T14:52:33ZAdam Soltysadam@coinos.io2026-10-13T14:52:33Zurn:sha1:d1a12bc0585aa583263362304218803ebf0afa9a
The counter was incremented on every failed login and read but never
acted on; the per-IP limits do the throttling. Its keys never expired
and had grown to most of the keyspace.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UjHzoBmW1iPpEe5qC2LDYB
bolt12: put the requested expiry and single-use on the offer itself2026-10-09T06:16:37ZAdam Soltysadam@coinos.io2026-10-09T06:16:37Zurn:sha1:0cbfab4779545afcc621d019ec93b30e5aec99df
The expiry was only stored on our invoice record, so CLN kept issuing
invoices for the offer after it had expired. Pass it as absolute_expiry,
and accept single_use to cap an offer at one payment.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
users: keep the encrypted nostr key and 2FA seed away from bearer tokens2026-10-08T19:15:15ZAdam Soltysadam@coinos.io2026-10-08T19:15:15Zurn:sha1:5df9bc39ac48fdf1b19b00b9b457f9ebc1ee157c
/me and user emits return a hasnsec flag instead of the encrypted key, which
is now only sent with a password login or registration. /otpsecret refuses
once 2FA is enabled, and disabling 2FA rotates the seed.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
analytics-geo: read rotated request log chunks2026-10-08T19:03:38ZAdam Soltysadam@coinos.io2026-10-08T19:03:38Zurn:sha1:621cb7b6ae6655db60971f248d2e799dbb8c4b3d
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Remove response logger2026-10-08T19:03:38ZAdam Soltysadam@coinos.io2026-10-08T19:03:38Zurn:sha1:b3d6c983719560b6d3e2eb17b413f1147f2522a1
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
me: stop reporting archived balance as locked for frozen accounts2026-10-08T19:03:38ZAdam Soltysadam@coinos.io2026-10-08T19:03:38Zurn:sha1:fbf99d4d212baeae1750cec12244d0f904dfe669
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
lightningd: bump to v26.06.92026-10-07T15:10:19ZAdam Soltysadam@coinos.io2026-10-07T15:10:19Zurn:sha1:d2d86384ee203bdaefa7c5fcaf147f44b0d2c6ee
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
email: escape support form HTML and enforce recaptcha v3 score2026-10-07T04:12:19ZAdam Soltysadam@coinos.io2026-10-07T04:12:19Zurn:sha1:fb7c0086bbfcf17fbaba1ea83a1e3faf2849315b
Escape the message body, stop accepting a client-supplied subject, strip
control characters from header values, require the expected action and a
minimum score from siteverify, and drop the adminpass captcha bypass.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
payments: lowercase payreq before looking up our own invoices2026-10-07T04:12:19ZAdam Soltysadam@coinos.io2026-10-07T04:12:19Zurn:sha1:f53e70ed98eb723479b4276c5b621b599fe570a0
An uppercase bolt11 for a coinos invoice missed the getInvoice lookup, so
it was paid over lightning to our own node instead of internally. The
listener then saw the sender's payment pointer for that bolt11 and skipped
crediting the recipient. Normalize in POST /payments and nwc pay_invoice.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>