authorize additional linking keys

2 files changed, 18 insertions, 4 deletions

diff --git a/routes/lnurl.js b/routes/lnurl.js
index b89f52a2..7cd1a19e 100644
--- a/routes/lnurl.js
+++ b/routes/lnurl.js
@@ -6,13 +6,19 @@ logins = {};
 
 lnurlServer = lnurl.createServer(config.lnurl);
 
-app.get("/loginUrl", async (req, res) => {
+var optionalAuth = function(req, res, next) {
+  passport.authenticate('jwt', { session: false }, function(err, user, info) {
+    req.user = user;
+    next();
+  })(req, res, next);
+};
+
+app.get("/loginUrl", optionalAuth, async (req, res) => {
   try {
     const result = await lnurlServer.generateNewUrl("login");
-    const { username } = req.query;
 
-    if (username !== "undefined") {
-      logins[result.secret] = username;
+    if (req.user) {
+      logins[result.secret] = req.user.username;
     }
 
     res.send(result);
diff --git a/routes/users.js b/routes/users.js
index 522d2e6a..5a708d00 100644
--- a/routes/users.js
+++ b/routes/users.js
@@ -262,6 +262,14 @@ app.post("/keys", auth, async (req, res) => {
   emit(req.user.username, "key", key);
 });
 
+app.post("/keys/delete", auth, async (req, res) => {
+  const { hex } = req.body;
+  (await db.Key.findOne({ where: {
+    user_id: req.user.id,
+    hex
+  }})).destroy();
+});
+
 app.post("/login", async (req, res) => {
   const {
     params,