| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | ecash: drop anonymous token storage in favour of a stateless status lookup | Adam Soltys | 2026-09-27 | 1 | -6/+8 |
| | | | | | | | | | | POST /cash stored any submitted string under a fresh id with no auth, no validation and no expiry. Replace it with POST /ecash/status, which checks a token the client already holds and returns its total, spent amount and mint. GET /cash/:id/:version stays so previously shared ids keep resolving. Co-Authored-By: Claude Fable 5.1 <[email protected]> | ||||
| * | ecash: redeem tokens by melting to the user's own invoice | Adam Soltys | 2026-09-16 | 1 | -123/+20 |
| | | | | | | | | | | | | Redeeming ecash is now a plain NUT-05 melt into a Lightning invoice owned by the redeeming user, credited by the regular lightning listener. Drop the house proof pool and its lock, the /mint and /melt routes, and the special-casing of a mint account in NWC and payment routing. Tokens are decoded against the mint's keyset list so short v1 ids resolve, and an empty keyset list is never cached. Co-Authored-By: Claude Fable 5.1 <[email protected]> | ||||
| * | security: drop the admin endpoint surface and land pending hardening | Adam Soltys | 2026-09-13 | 1 | -1/+10 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Removes the admin-gated endpoints and the account flags they set, plus a batch of hardening that had accumulated uncommitted in the tree. These were deployed and verified together, so they land as one change. admin surface: - drop POST /hidepay, POST /unlimit and GET /users, their handlers, and the now-unused admin preValidation export - `unlimited` was only ever written, never read; `hidepay` only appeared in output projections. Both flags go, along with their whitelist, public-fields and type entries. request log: - redactBody now recurses. It only masked top-level keys, so a body that nests credentials one level down wrote them to the log in plaintext, and pin fields were not on the list at all. payments: - sendOnchain/build gate `aid` through requireAccount, so a caller can only spend from an account it owns - sendOnchain signs only a tx we composed, matched against a short-lived per-account build receipt - raise xpay retry_for to 60s; route-finding preferred a drained zero-fee hop and burned the whole budget on it. check()'s reversal window keeps its 2x margin. ecash / invoices / webhooks: - resolve a token's mint through the IP-pinning fetcher instead of plain fetch, closing an unauthenticated SSRF path into the internal network - reject non-positive amounts before the balance write - /sign requires the caller to own the address, rather than signing under any address the hot wallet controls - webhook delivery no longer disables TLS verification; the body carries the merchant's shared secret registration: - refuse a username the v3 registrar holds unless the caller's own nostr key is the holder (lib/names.ts) liquid: - honour the deposit kill switch at invoice generation and at credit elements image: - pin 23.3.4 and verify the release tarball checksum Co-Authored-By: Claude Opus 5 (1M context) <[email protected]> Claude-Session: https://claude.ai/code/session_0112TGi9GGNWqji1XQ5jZRzc | ||||
| * | remove logs | Adam Soltys | 2026-03-17 | 1 | -1/+0 |
| | | |||||
| * | disable minting | Adam Soltys | 2025-07-16 | 1 | -0/+1 |
| | | |||||
| * | debit signature | Adam Soltys | 2025-05-12 | 1 | -0/+2 |
| | | |||||
| * | use getInvoice helper | Adam Soltys | 2025-03-05 | 1 | -2/+2 |
| | | |||||
| * | payment types | Adam Soltys | 2025-02-26 | 1 | -3/+5 |
| | | |||||
| * | payload is body | Adam Soltys | 2024-11-27 | 1 | -2/+2 |
| | | |||||
| * | ecash receive | Adam Soltys | 2024-11-22 | 1 | -0/+23 |
| | | |||||
| * | return pidcashreq | Adam Soltys | 2024-11-21 | 1 | -4/+5 |
| | | |||||
| * | migrate to new cashu-ts | Adam Soltys | 2024-11-21 | 1 | -16/+6 |
| | | |||||
| * | ecash requests | Adam Soltys | 2024-11-21 | 1 | -36/+6 |
| | | |||||
| * | wip | Adam Soltys | 2024-11-21 | 1 | -12/+50 |
| | | |||||
| * | save ecash id | Adam Soltys | 2024-10-24 | 1 | -31/+30 |
| | | |||||
| * | rm rpc | Adam Soltys | 2024-09-09 | 1 | -1/+1 |
| | | |||||
| * | refactor rpc helper, accounts endpoints | Adam Soltys | 2024-09-08 | 1 | -1/+1 |
| | | |||||
| * | support multiple token versions | Adam Soltys | 2024-09-03 | 1 | -4/+5 |
| | | |||||
| * | fix some ts issues | Adam Soltys | 2024-08-26 | 1 | -9/+26 |
| | | |||||
| * | typescript | Adam Soltys | 2024-08-26 | 1 | -0/+127 |
 |
index : coinos-server.git | |
| coinos server — legacy coinos.io backend (Lightning, on-chain, Liquid) | coinos |
| aboutsummaryrefslogtreecommitdiffstats |