aboutsummaryrefslogtreecommitdiffstats
path: root/routes
Commit message (Expand)AuthorAgeFilesLines
* users: let a password unlock the encrypted nostr key for any sessionHEADmasterAdam Soltys28 hours1-0/+33
* login: drop the unused per-username failure counterAdam Soltys37 hours1-7/+0
* users: keep the encrypted nostr key and 2FA seed away from bearer tokensAdam Soltys6 days1-3/+14
* me: stop reporting archived balance as locked for frozen accountsAdam Soltys6 days1-16/+1
* email: escape support form HTML and enforce recaptcha v3 scoreAdam Soltys8 days1-37/+56
* payments: lowercase payreq before looking up our own invoicesAdam Soltys8 days1-0/+5
* Evicted accounts can't receive or log in; limit errors say what's happeningAdam Soltys10 days2-2/+11
* lnurl: budget unauthenticated invoice generation per recipientAdam Soltys2026-09-291-5/+34
* logging: throttle log lines that clients can trigger at willAdam Soltys2026-09-291-4/+11
* invoices: don't let a supplied id overwrite another user's invoiceAdam Soltys2026-09-291-0/+10
* ecash: drop anonymous token storage in favour of a stateless status lookupAdam Soltys2026-09-271-6/+8
* lightning: don't wedge the listener on an already-credited preimageAdam Soltys2026-09-231-0/+7
* parse: cache node aliases as a small map with a working timestampAdam Soltys2026-09-211-9/+13
* lightning: log quote outcomesAdam Soltys2026-09-211-0/+2
* funds: close deposits, withdrawals and authorizationsAdam Soltys2026-09-211-17/+16
* users: reserve service names on registration and renameAdam Soltys2026-09-211-2/+2
* lightning: quote the routing fee up front and add a max-send quote endpointAdam Soltys2026-09-211-0/+128
* lnurl: expire payRequest callback ids after seven daysAdam Soltys2026-09-161-3/+8
* ecash: redeem tokens by melting to the user's own invoiceAdam Soltys2026-09-163-128/+21
* printer: publish receipts at QoS 1 and clean LNURL metadata memosAdam Soltys2026-09-141-0/+1
* ecash: make claims work against the v1 keyset mintAdam Soltys2026-09-141-6/+3
* security: drop the admin endpoint surface and land pending hardeningAdam Soltys2026-09-134-60/+94
* flash: build each config image in its own temp dirAdam Soltys2026-09-041-6/+16
* flash: create printer dir and return errors instead of unhandled 500Adam Soltys2026-09-041-7/+13
* fund: authenticated recovery of a rotated fund's old linkAdam Soltys2026-08-281-4/+29
* login: fail-open recaptcha verify on infrastructure errorsAdam Soltys2026-08-251-2/+17
* take/authorize: kill-switch + validate fund-claim amountsAdam Soltys2026-08-251-4/+37
* nwc: 404 missing connections + require key rotation to revive retired onesAdam Soltys2026-08-221-2/+31
* nwc: enforce per-connection spend budgets + flag-gated incident containmentAdam Soltys2026-08-221-2/+30
* confirm: never re-credit receive outputs on wallet-funded txsAdam Soltys2026-08-221-0/+20
* nostr: resolve NIP-05 via the v3 registrar first; empty (not 500) on unknown ...Adam Soltys2026-08-171-1/+15
* users: sum sub-account balances in the deleteSelf guard (S12)Adam Soltys2026-08-071-4/+13
* payments: never lose a settled deposit to an oversized memo (S9/S10)Adam Soltys2026-08-071-1/+4
* logging: redact auth headers; set cookie flags on session token (S5)Adam Soltys2026-08-071-2/+14
* auth: fail closed on adminpass, scrub sample secrets (S3)Adam Soltys2026-08-073-4/+9
* auth: hash passwords at bcrypt cost 12 with transparent upgrade (S2)Adam Soltys2026-08-071-2/+17
* sockets: verify JWT signatures on the websocket auth path (S1)Adam Soltys2026-08-071-4/+4
* lnurl: defer to the v3 registrar for names it has claimedAdam Soltys2026-08-041-15/+53
* lnurl: serve local accounts directly instead of deferring to v3 registrarAdam Soltys2026-08-041-19/+9
* Let a migrated account hand its address to coinos v3Adam Soltys2026-08-032-4/+5
* LNURL: fall back to the v3 names registrar for unknown usersAdam Soltys2026-08-021-1/+21
* confirm: guard the first-seen deposit credit atomically (COINOS-2)Adam Soltys2026-07-311-0/+8
* take: claim single-use authorizations atomically (COINOS-3)Adam Soltys2026-07-311-17/+38
* mint/lightning: refuse caller-supplied invoices, tiered fees, log hygieneAdam Soltys2026-07-301-3/+11
* bolt12 zaps: pay offers, NWC pay/receive, per-user offers, NIP-44Adam Soltys2026-07-302-35/+74
* preimages: support fiat prices, converted at invoice-creation timeAdam Soltys2026-07-141-8/+25
* preimages: enforce a merchant-set price per preimage batchAdam Soltys2026-07-131-11/+24
* Merge remote-tracking branch 'origin/master'Adam Soltys2026-07-111-0/+76
|\
| * invoices: sell merchant-supplied preimages via a usePreimage queueAdam Soltys2026-07-101-0/+76
* | payments: use the debited tip when crediting internal transfersAdam Soltys2026-07-102-4/+15
|/
generated by cgit v1.2.3 (git 2.51.0) at 2026-10-15 03:24:42 +0000