diff options
| author | Adam Soltys <[email protected]> | 2022-05-31 10:22:17 -0700 |
|---|---|---|
| committer | Adam Soltys <[email protected]> | 2022-06-10 02:30:33 -0400 |
| commit | 9527f8a68f6a0a329c82dd8350703d10070437d5 (patch) | |
| tree | 690facb43dafd7f4171a385b5a38fa1d837f382b | |
| parent | b43147612face13a481eb01f79e43c753d10b34f (diff) | |
| download | coinos-server-9527f8a68f6a0a329c82dd8350703d10070437d5.tar.gz coinos-server-9527f8a68f6a0a329c82dd8350703d10070437d5.zip | |
create payment record for withdrawal fee
| -rw-r--r-- | routes/users.js | 96 |
1 files changed, 48 insertions, 48 deletions
diff --git a/routes/users.js b/routes/users.js index 78b3adf7..4fe1362b 100644 --- a/routes/users.js +++ b/routes/users.js @@ -303,63 +303,63 @@ app.post( ); let login = ah(async (req, res) => { - try { - const { params, sig, key } = req.body; - - if (sig) { - const { callback } = params; + try { + const { params, sig, key } = req.body; - try { - const url = `${callback}&sig=${sig}&key=${key}`; - const response = await axios.get(url); - res.send(response.data); - } catch (e) { - l.error("problem calling lnurl login", e.message); - res.status(500).send(e.message); - } + if (sig) { + const { callback } = params; - return; + try { + const url = `${callback}&sig=${sig}&key=${key}`; + const response = await axios.get(url); + res.send(response.data); + } catch (e) { + l.error("problem calling lnurl login", e.message); + res.status(500).send(e.message); } - let twofa = req.body.token; + return; + } - let user = await getUser(req.body.username); + let twofa = req.body.token; - if ( - !user || - (user.password && - !(await bcrypt.compare(req.body.password, user.password))) - ) { - l.warn("invalid username or password attempt", req.body.username); - return res.status(401).end(); - } + let user = await getUser(req.body.username); - if ( - user.twofa && - (typeof twofa === "undefined" || - !authenticator.check(twofa, user.otpsecret)) - ) { - return res.status(401).send("2fa required"); - } - - l.info( - "login", - req.body.username, - req.headers["x-forwarded-for"] || req.connection.remoteAddress - ); + if ( + !user || + (user.password && + !(await bcrypt.compare(req.body.password, user.password))) + ) { + l.warn("invalid username or password attempt", req.body.username); + return res.status(401).end(); + } - let payload = { username: user.username }; - let token = jwt.sign(payload, config.jwt); - res.cookie("token", token, { expires: new Date(Date.now() + 432000000) }); - user.accounts = await user.getAccounts(); - user.keys = await user.getKeys(); - user = pick(user, ...whitelist); - res.send({ user, token }); - } catch (e) { - l.error("login error", e.message, req.connection.remoteAddress); - res.status(401).end(); + if ( + user.twofa && + (typeof twofa === "undefined" || + !authenticator.check(twofa, user.otpsecret)) + ) { + return res.status(401).send("2fa required"); } - }) + + l.info( + "login", + req.body.username, + req.headers["x-forwarded-for"] || req.connection.remoteAddress + ); + + let payload = { username: user.username }; + let token = jwt.sign(payload, config.jwt); + res.cookie("token", token, { expires: new Date(Date.now() + 432000000) }); + user.accounts = await user.getAccounts(); + user.keys = await user.getKeys(); + user = pick(user, ...whitelist); + res.send({ user, token }); + } catch (e) { + l.error("login error", e.message, req.connection.remoteAddress); + res.status(401).end(); + } +}); app.post("/login", login); app.post("/taboggan", login); |
