coinos-server.git/routes/users.ts, branch stagingcoinos server — legacy coinos.io backend (Lightning, on-chain, Liquid)https://git.coinos.io/coinos-server.git/atom?h=staging2026-06-17T14:47:46Zusers: add authenticated self-delete endpoint2026-06-17T14:47:46ZAdam Soltysadam@coinos.io2026-06-14T19:33:43Zurn:sha1:7332e55641c21e024e50f83176b302df9c488e9a
Port of master 2548f757, adapted from Express to this stack's Hono
handlers (c.get("user"), c.req.json(), setCookie, bail) and TigerBeetle
balances (getBalance/getPending instead of the Redis balance:/pending:
keys). POST /delete (auth) wipes every key tied to the calling user:
user records, payments/invoices, sub-accounts, NWC apps, nostr follow
graph + nip5. Gated by typing the username and refuses while
balance+pending > 10k sats so funds can't be destroyed by accident.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
verifyRecaptcha: check x-forwarded-host before host header2026-05-18T06:48:59ZAdam Soltysadam@coinos.io2026-05-18T06:48:59Zurn:sha1:7f4bf4d886bd43f3b15f18e3c4f7c040892e9f73
Tor users access via .onion through a forwarding layer that puts the
real hostname in x-forwarded-host while the literal host header is the
internal target. Without checking the forwarded header first, captcha
prompted for .onion visitors who should have been exempt.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
stop republishing external events and add NWC rate limiting2026-03-18T18:39:05ZAdam Soltysadam@coinos.io2026-03-18T18:39:05Zurn:sha1:a8977f8c5c84b0c37c4fb36f0a0be5bf6f492f3d
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
check for server generated key2026-03-06T06:20:52ZAdam Soltysadam@coinos.io2026-03-06T06:20:51Zurn:sha1:133cf91d2f0836b58c10efc8c05b8004bcc68799auth fix2026-03-06T06:20:52ZAdam Soltysadam@coinos.io2026-03-06T00:45:10Zurn:sha1:87d01366d1de2a28c81ca56d9835ef00fbf8d7d5fix pending payment cleanup and login password verification2026-03-06T06:19:55ZAdam Soltysasoltys@gmail.com2026-03-06T06:11:55Zurn:sha1:4ac3f491fbb77433aef4dd8fcf560a1d1475e0bd
Skip non-lightning entries in pending payments check and handle
malformed password hashes gracefully during login.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
funds route2026-03-04T19:10:49ZAdam Soltysadam@coinos.io2026-03-04T19:10:49Zurn:sha1:6781fd2935ebc3abdeed182b4cee62c25c5482e7vault wallet fixes2026-03-04T07:02:57ZAdam Soltysadam@coinos.io2026-03-04T07:02:57Zurn:sha1:63fad61716c013b6663df789ed96f6e294630642sync vault2026-03-04T05:40:58ZAdam Soltysadam@coinos.io2026-03-04T05:40:58Zurn:sha1:55ae58daf23028fa0f647f7bb2b4b0f8cd751de7bip3532026-03-04T05:26:57ZAdam Soltysadam@coinos.io2026-03-04T05:26:57Zurn:sha1:9507e040a03834f7d603c5c13a1f69ae6ef48b3a