| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | security: drop the admin endpoint surface and land pending hardening | Adam Soltys | 2026-09-13 | 1 | -1/+0 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Removes the admin-gated endpoints and the account flags they set, plus a batch of hardening that had accumulated uncommitted in the tree. These were deployed and verified together, so they land as one change. admin surface: - drop POST /hidepay, POST /unlimit and GET /users, their handlers, and the now-unused admin preValidation export - `unlimited` was only ever written, never read; `hidepay` only appeared in output projections. Both flags go, along with their whitelist, public-fields and type entries. request log: - redactBody now recurses. It only masked top-level keys, so a body that nests credentials one level down wrote them to the log in plaintext, and pin fields were not on the list at all. payments: - sendOnchain/build gate `aid` through requireAccount, so a caller can only spend from an account it owns - sendOnchain signs only a tx we composed, matched against a short-lived per-account build receipt - raise xpay retry_for to 60s; route-finding preferred a drained zero-fee hop and burned the whole budget on it. check()'s reversal window keeps its 2x margin. ecash / invoices / webhooks: - resolve a token's mint through the IP-pinning fetcher instead of plain fetch, closing an unauthenticated SSRF path into the internal network - reject non-positive amounts before the balance write - /sign requires the caller to own the address, rather than signing under any address the hot wallet controls - webhook delivery no longer disables TLS verification; the body carries the merchant's shared secret registration: - refuse a username the v3 registrar holds unless the caller's own nostr key is the holder (lib/names.ts) liquid: - honour the deposit kill switch at invoice generation and at credit elements image: - pin 23.3.4 and verify the release tarball checksum Co-Authored-By: Claude Opus 5 (1M context) <[email protected]> Claude-Session: https://claude.ai/code/session_0112TGi9GGNWqji1XQ5jZRzc | ||||
| * | Let a migrated account hand its address to coinos v3 | Adam Soltys | 2026-08-03 | 1 | -0/+2 |
| | | | | | | | | | | | | | A `migrated` flag on the user, settable through /user and visible on the public user endpoint. It changes exactly one thing: lnurlp for that username defers to the names registrar, so payments to [email protected] arrive in the person's v3 wallet. The account itself is untouched — same username, same history, still usable here — which is why this is a flag and not a rename or a shutdown. Co-Authored-By: Claude Fable 5 <[email protected]> Claude-Session: https://claude.ai/code/session_01Wvj4aoeMZwA7VUGdJP9Swi | ||||
| * | read payments from archive | Adam Soltys | 2026-01-22 | 1 | -5/+5 |
| | | |||||
| * | payment types | Adam Soltys | 2025-02-26 | 1 | -29/+4 |
| | | |||||
| * | nostr work | Adam Soltys | 2025-01-28 | 1 | -1/+0 |
| | | |||||
| * | handle no zaps case | Adam Soltys | 2025-01-17 | 1 | -1/+1 |
| | | |||||
| * | test for user | Adam Soltys | 2025-01-14 | 1 | -1/+1 |
| | | |||||
| * | public fields | Adam Soltys | 2025-01-14 | 1 | -21/+3 |
| | | |||||
| * | use strfry scan | Adam Soltys | 2025-01-14 | 1 | -1/+21 |
| | | |||||
| * | remove salt and cipher | Adam Soltys | 2025-01-07 | 1 | -2/+0 |
| | | |||||
| * | check for user | Adam Soltys | 2024-12-31 | 1 | -2/+2 |
| | | |||||
| * | user picture and about | Adam Soltys | 2024-12-31 | 1 | -1/+20 |
| | | |||||
| * | bip21 message field | Adam Soltys | 2024-12-22 | 1 | -1/+1 |
| | | |||||
| * | lint | Adam Soltys | 2024-10-23 | 1 | -40/+41 |
| | | |||||
| * | subscriptions | Adam Soltys | 2024-10-19 | 1 | -0/+8 |
| | | |||||
| * | use cached event for tagsonly | Adam Soltys | 2024-10-11 | 1 | -4/+5 |
| | | |||||
| * | follow counts | Adam Soltys | 2024-10-10 | 1 | -0/+11 |
| | | |||||
| * | 2s maxwait | Adam Soltys | 2024-10-10 | 1 | -6/+0 |
| | | |||||
| * | nostr revamp wip | Adam Soltys | 2024-10-10 | 1 | -0/+6 |
| | | |||||
| * | wip socket communication | Adam Soltys | 2024-10-10 | 1 | -1/+1 |
| | | |||||
| * | getpayment helper | Adam Soltys | 2024-10-01 | 1 | -1/+7 |
| | | |||||
| * | translations helper | Adam Soltys | 2024-09-23 | 1 | -0/+3 |
| | | |||||
| * | account update and delete | Adam Soltys | 2024-09-18 | 1 | -1/+1 |
| | | |||||
| * | nwc | Adam Soltys | 2024-09-16 | 1 | -1/+3 |
| | | |||||
| * | refactor rpc helper, accounts endpoints | Adam Soltys | 2024-09-08 | 1 | -1/+0 |
| | | |||||
| * | typescript | Adam Soltys | 2024-08-26 | 1 | -0/+160 |
 |
index : coinos-server.git | |
| coinos server — legacy coinos.io backend (Lightning, on-chain, Liquid) | coinos |
| aboutsummaryrefslogtreecommitdiffstats |