diff options
| author | Adam Soltys <[email protected]> | 2026-09-19 21:53:30 -0700 |
|---|---|---|
| committer | Adam Soltys <[email protected]> | 2026-09-21 19:23:57 -0700 |
| commit | a2216320de0d6b4eb25cc699456d5d995f267590 (patch) | |
| tree | 2be4dca569139b2155f3a6d7553b36a1118ab10c /index.js.map | |
| parent | 4ac8ff322a71465542162c17072ae6be524aaf6f (diff) | |
| download | coinos-server-a2216320de0d6b4eb25cc699456d5d995f267590.tar.gz coinos-server-a2216320de0d6b4eb25cc699456d5d995f267590.zip | |
ecash: identify our own tokens by keyset, not by the mint url
The mint url in a cashu token is a label the sending wallet writes in, and
tokens of ours turn up carrying stray ports and paths. Fetching it to compare
pubkeys therefore rejected perfectly good tokens, and meant every /cash entry
point made an outbound request to a user-supplied address.
Keyset ids are derived from the mint's public keys, so a token whose proofs
are all on our keysets is ours whatever url it names; a foreign one still
fails, and now with a clear message instead of cashu-ts's short-id mapping
error. A miss refreshes the cached keyset list once, in case of a rotation.
Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
Diffstat (limited to 'index.js.map')
0 files changed, 0 insertions, 0 deletions