diff options
| author | Adam Soltys <[email protected]> | 2024-02-09 22:56:17 -0800 |
|---|---|---|
| committer | Adam Soltys <[email protected]> | 2024-02-09 22:56:17 -0800 |
| commit | fa78755b4357a09c61107405580c36c9cc2e2fbb (patch) | |
| tree | a7b9493ed86b672653be010ba53273654b217ff8 /routes | |
| parent | a85fc8e2c57dc4b6f04b1b7e462eafdbc1cfc2a5 (diff) | |
| download | coinos-server-fa78755b4357a09c61107405580c36c9cc2e2fbb.tar.gz coinos-server-fa78755b4357a09c61107405580c36c9cc2e2fbb.zip | |
whitelist nsec
Diffstat (limited to 'routes')
| -rw-r--r-- | routes/users.js | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/routes/users.js b/routes/users.js index 8e2a0d14..97a0c9a7 100644 --- a/routes/users.js +++ b/routes/users.js @@ -195,6 +195,7 @@ export default { password, pin, newpin, + pubkey, username, shopifyToken, shopifyStore, @@ -220,6 +221,13 @@ export default { user.username = username; } + if (pubkey) exists = await getUser(pubkey); + if (username !== exists.username) { + warn("key in use", pubkey, exists.username); + if (exists.anon) await db.del(`user:${pubkey}`); + else fail("Key in use by another account"); + } + let attributes = [ "address", "autowithdraw", @@ -235,6 +243,7 @@ export default { "locktime", "nip5", "notify", + "nsec", "prompt", "profile", "pubkey", |