require pin on certain endpoints

1 files changed, 6 insertions, 1 deletions

diff --git a/lib/sockets.js b/lib/sockets.js
index 22072dd0..87cf7116 100644
--- a/lib/sockets.js
+++ b/lib/sockets.js
@@ -116,6 +116,8 @@ app.register(async function(app) {
 
             let user = await getUser(username);
 
+            let { haspin } = user;
+
             if (user.locked) throw new Error("Account is locked");
             let payments = await user.getPayments({
               where: {
@@ -142,9 +144,12 @@ app.register(async function(app) {
             user.accounts = accounts;
             user.keys = keys;
             user.payments = payments;
+            user.haspin = haspin;
 
             ws.user = user;
-            ws.send(JSON.stringify({ type: "login", data: user }));
+            ws.send(
+              JSON.stringify({ type: "login", data: pick(user, ...whitelist) })
+            );
             ws.send(
               JSON.stringify({ type: "version", data: config.clientVersion })
             );