use secret as session key

2 files changed, 2 insertions, 3 deletions

diff --git a/routes/lnurl.js b/routes/lnurl.js
index e9c1f930..b89f52a2 100644
--- a/routes/lnurl.js
+++ b/routes/lnurl.js
@@ -65,7 +65,7 @@ lnurlServer.bindToHook("login", async params => {
     if (user && user.username) {
       const payload = { username: user.username };
       const token = jwt.sign(payload, config.jwt);
-      const ws = sessions[key];
+      const ws = sessions[k1];
       if (ws && ws.send)
         ws.send(JSON.stringify({ type: "token", data: token }));
     }
diff --git a/routes/users.js b/routes/users.js
index 13837bd6..e11a1b9d 100644
--- a/routes/users.js
+++ b/routes/users.js
@@ -270,8 +270,7 @@ app.post("/login", async (req, res) => {
   } = req.body;
 
   if (sig) {
-    const { callback, k1 } = params;
-    sessions[key] = sessions[k1];
+    const { callback } = params;
 
     try {
       const url = `${callback}&sig=${sig}&key=${key}`;