aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* nwc: reply UNAUTHORIZED on unknown connection instead of returning silentlyAdam Soltys2026-08-171-2/+13
* mintdemux: forward client IP for per-IP rate limiting + partner whitelist + /...Adam Soltys2026-08-171-14/+86
* deps: patch @asoltys/clightning-client to fix cl reconnectAdam Soltys2026-08-164-0/+98
* ln: tear down dead cl clients fully + recover invoice listener on socket deathAdam Soltys2026-08-152-10/+74
* payments: prevent same-invoice retry from orphaning an unreconciled debitAdam Soltys2026-08-081-1/+21
* mintdemux: fix old-ecash recovery meltsAdam Soltys2026-08-071-5/+38
* test: regtest regression suite for the security-disclosure fixesAdam Soltys2026-08-072-0/+242
* deps: refresh bun.lockb with sharp 0.35.3 (S7/S19)Adam Soltys2026-08-071-0/+0
* ecash: serialize the shared cash-key read-modify-write (S13)Adam Soltys2026-08-071-11/+36
* users: sum sub-account balances in the deleteSelf guard (S12)Adam Soltys2026-08-071-4/+13
* payments: never lose a settled deposit to an oversized memo (S9/S10)Adam Soltys2026-08-072-2/+12
* nwc: budget keysend, atomic dedup, serialize spends (S4/S6/S8)Adam Soltys2026-08-071-12/+66
* upload: require auth on /upload/:type; bump sharp past libvips CVEs (S7)Adam Soltys2026-08-072-2/+2
* logging: redact auth headers; set cookie flags on session token (S5)Adam Soltys2026-08-072-3/+26
* auth: fail closed on adminpass, scrub sample secrets (S3)Adam Soltys2026-08-074-8/+22
* auth: hash passwords at bcrypt cost 12 with transparent upgrade (S2)Adam Soltys2026-08-072-3/+18
* sockets: verify JWT signatures on the websocket auth path (S1)Adam Soltys2026-08-072-6/+18
* lnurl: defer to the v3 registrar for names it has claimedAdam Soltys2026-08-041-15/+53
* lnurl: serve local accounts directly instead of deferring to v3 registrarAdam Soltys2026-08-041-19/+9
* nwc: republish 13194 info events unconditionally every 2 minutesAdam Soltys2026-08-041-53/+18
* Let a migrated account hand its address to coinos v3Adam Soltys2026-08-034-4/+8
* payments: guard tip credit and self-referential autowithdrawAdam Soltys2026-08-031-1/+20
* LNURL: fall back to the v3 names registrar for unknown usersAdam Soltys2026-08-021-1/+21
* sendKeysend: verify a thrown keysend by label, not the caller's hash (COINOS-1)Adam Soltys2026-07-311-14/+55
* confirm: guard the first-seen deposit credit atomically (COINOS-2)Adam Soltys2026-07-311-0/+8
* take: claim single-use authorizations atomically (COINOS-3)Adam Soltys2026-07-311-17/+38
* nwc: conform pay/receive to the BIP-321 methods spec (nwc#2)Adam Soltys2026-07-311-15/+116
* mintdemux: present old (recovery) keysets as inactiveAdam Soltys2026-07-311-1/+7
* mintdemux: transparent two-mint proxy for mint.coinos.ioAdam Soltys2026-07-311-63/+118
* zaps: stop spurious "failed to handle zap" warnings on non-zap invoicesAdam Soltys2026-07-301-10/+21
* nwc: guard missing app record in the notification loopAdam Soltys2026-07-301-2/+7
* mint-recovery: add meltguard + mintdemux proxies; ignore local *.bakAdam Soltys2026-07-303-0/+179
* mint/lightning: refuse caller-supplied invoices, tiered fees, log hygieneAdam Soltys2026-07-305-44/+158
* bolt12 payer proofs: disclose zap fields, lightningd v26.06.2 in sampleAdam Soltys2026-07-302-12/+19
* bolt12 zaps: pay offers, NWC pay/receive, per-user offers, NIP-44Adam Soltys2026-07-309-106/+500
* preimages: support fiat prices, converted at invoice-creation timeAdam Soltys2026-07-142-14/+49
* preimages: enforce a merchant-set price per preimage batchAdam Soltys2026-07-133-19/+56
* Merge remote-tracking branch 'origin/master'Adam Soltys2026-07-114-2/+131
|\
| * invoices: sell merchant-supplied preimages via a usePreimage queueAdam Soltys2026-07-104-2/+131
* | rates: source Iranian IRR/IRT from Wallex, decoupled from the tick loopAdam Soltys2026-07-101-19/+44
* | invoices: reject sub-300-sat on-chain invoice amountsAdam Soltys2026-07-101-0/+12
* | invoices: rate-limit invoice create and update per IPAdam Soltys2026-07-101-2/+2
* | logging: redact password fields from the request logAdam Soltys2026-07-101-1/+12
* | payments: use the debited tip when crediting internal transfersAdam Soltys2026-07-103-7/+25
|/
* lightningd: upgrade Core Lightning to v26.06.2Adam Soltys2026-07-041-1/+1
* rates: fix Iranian IRR/IRT feed after nobitex API host moveAdam Soltys2026-07-041-6/+19
* nwc: confirm 13194 info-event publish so it cannot be silently droppedAdam Soltys2026-06-281-3/+47
* auth: log evicted-account auth attempts with source IPAdam Soltys2026-06-281-1/+7
* auth: hard-evict banned accounts at the JWT layerAdam Soltys2026-06-271-0/+14
* users: return generic 404 from /reset for non-adminsAdam Soltys2026-06-271-1/+10
generated by cgit v1.2.3 (git 2.51.0) at 2026-10-15 11:04:48 +0000