| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | auth: log evicted-account auth attempts with source IP | Adam Soltys | 2026-06-28 | 1 | -1/+7 |
| | | | | | | | | | Emit a greppable EVICTED_AUTH line (username + cf-connecting-ip) when an evicted account's JWT is used, so the real-time auto-banner can block the source IP at the edge immediately rather than waiting for the hourly scan. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]> | ||||
| * | auth: hard-evict banned accounts at the JWT layer | Adam Soltys | 2026-06-27 | 1 | -0/+14 |
| | | | | | | | | | | | Add an `evicted` set check in the JWT strategy: an evicted account fails authentication on every request and every endpoint, regardless of source IP. The existing blacklist only blocks sends, so a compromised/abusive JWT could still authenticate and read/probe; eviction kills it outright. Matches on uid or username so a rename can't evade it. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]> | ||||
| * | support readonly tokens | Adam Soltys | 2025-09-04 | 1 | -3/+11 |
| | | |||||
| * | record lnurl invoice | Adam Soltys | 2025-07-16 | 1 | -2/+2 |
| | | |||||
| * | biome lint | Adam Soltys | 2024-10-31 | 1 | -3/+3 |
| | | |||||
| * | typescript | Adam Soltys | 2024-08-26 | 1 | -0/+51 |
 |
index : coinos-server.git | |
| coinos server — legacy coinos.io backend (Lightning, on-chain, Liquid) | coinos |
| aboutsummaryrefslogtreecommitdiffstats |