coinos-server.git/lib/auth.ts, branch stagingcoinos server — legacy coinos.io backend (Lightning, on-chain, Liquid)https://git.coinos.io/coinos-server.git/atom?h=staging2026-03-17T08:34:28Zfix: add account ownership checks and harden PIN validation2026-03-17T08:34:28ZAdam Soltysadam@coinos.io2026-03-17T08:21:48Zurn:sha1:136ba2a12e87178f6d83fba2874abf4c9ad32915
- Validate account ownership (aid) before allowing ark send/sync/vault
operations and in debit/sendOnchain as defense-in-depth
- Harden PIN check to reject missing/empty pin when user has one set
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
migrate to hono2026-02-28T22:14:30ZAdam Soltysadam@coinos.io2026-02-28T22:14:30Zurn:sha1:a1632ae402d11fdd7ffc360de97c55e0b4fad677formatting2026-02-24T21:18:42ZAdam Soltysadam@coinos.io2026-02-24T21:18:42Zurn:sha1:ad7b09b43323d0ffc0a8ddabb43e4838a184c697support readonly tokens2025-09-04T15:45:01ZAdam Soltysadam@coinos.io2025-09-04T15:45:01Zurn:sha1:e663c5f78dec8c788f822eb0765f9f8ec3a44277record lnurl invoice2025-07-16T07:04:56ZAdam Soltysadam@coinos.io2025-07-16T07:04:56Zurn:sha1:428fb7d17e393304641a9438500faecd8775672abiome lint2024-10-31T16:34:42ZAdam Soltysadam@coinos.io2024-10-31T16:29:04Zurn:sha1:aa4cd39c943b67169def224e224bd07b815b70ectypescript2024-08-27T04:17:43ZAdam Soltysasoltys@gmail.com2024-08-27T04:17:43Zurn:sha1:fe62cadd6fb4a7e49f7d59401fc74ae0411e32a7