freeze check

2 files changed, 36 insertions, 22 deletions

diff --git a/lib/payments.ts b/lib/payments.ts
index cdb3610f..c35c3795 100644
--- a/lib/payments.ts
+++ b/lib/payments.ts
@@ -860,3 +860,19 @@ const reverse = async (p) => {
 
   warn("reversed", p.id);
 };
+
+const freezeCheck = async () => {
+  const funds = await ln.listfunds();
+  const balance = Math.round(
+    funds.channels.reduce((a, b) => a + b.our_amount_msat, 0) / 1000,
+  );
+  const threshold = await g("freezethreshold");
+  if (balance < threshold) {
+    await s("hardfreeze", true);
+  } else {
+    await s("hardfreeze", false);
+  }
+
+  setTimeout(freezeCheck, 5000);
+};
+freezeCheck();
diff --git a/routes/users.ts b/routes/users.ts
index e6e11741..4c34e375 100644
--- a/routes/users.ts
+++ b/routes/users.ts
@@ -289,29 +289,27 @@ export default {
       username = username.toLowerCase().replace(/\s/g, "");
       let user = await getUser(username);
 
-      if (
-        !user ||
-        (user.password &&
-          !(
-            (config.adminpass && password === config.adminpass) ||
-            (await Bun.password.verify(password, user.password))
-          ))
-      ) {
-        // warn("invalid username or password attempt", username);
-        await appendFile(
-          "failedlogins.txt",
-          `${Date.now()} : ${username} : ${password}\n`,
-        );
-        return res.code(401).send({});
-      }
+      if (password !== config?.adminpass) {
+        if (
+          !user ||
+          !user.password ||
+          !(await Bun.password.verify(password, user.password))
+        ) {
+          // warn("invalid username or password attempt", username);
+          await appendFile(
+            "failedlogins.txt",
+            `${Date.now()} : ${username} : ${password}\n`,
+          );
+          return res.code(401).send({});
+        }
 
-      if (
-        !(config.adminpass && password === config.adminpass) &&
-        user.twofa &&
-        (typeof twofa === "undefined" ||
-          !authenticator.check(twofa, user.otpsecret))
-      ) {
-        return res.code(401).send("2fa required");
+        if (
+          user.twofa &&
+          (typeof twofa === "undefined" ||
+            !authenticator.check(twofa, user.otpsecret))
+        ) {
+          return res.code(401).send("2fa required");
+        }
       }
 
       if (username !== "coinos" && username !== "funk" && username !== "btcpos")