aboutsummaryrefslogtreecommitdiffstats
path: root/routes/users.ts
Commit message (Collapse)AuthorAgeFilesLines
* users: add authenticated self-delete endpointAdam Soltys2026-06-171-0/+104
| | | | | | | | | | | | Port of master 2548f757, adapted from Express to this stack's Hono handlers (c.get("user"), c.req.json(), setCookie, bail) and TigerBeetle balances (getBalance/getPending instead of the Redis balance:/pending: keys). POST /delete (auth) wipes every key tied to the calling user: user records, payments/invoices, sub-accounts, NWC apps, nostr follow graph + nip5. Gated by typing the username and refuses while balance+pending > 10k sats so funds can't be destroyed by accident. Co-Authored-By: Claude Opus 4.8 <[email protected]>
* verifyRecaptcha: check x-forwarded-host before host headerAdam Soltys2026-05-171-1/+1
| | | | | | | | | Tor users access via .onion through a forwarding layer that puts the real hostname in x-forwarded-host while the literal host header is the internal target. Without checking the forwarded header first, captcha prompted for .onion visitors who should have been exempt. Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>
* stop republishing external events and add NWC rate limitingAdam Soltys2026-03-181-2/+1
| | | | Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>
* check for server generated keyAdam Soltys2026-03-051-3/+4
|
* auth fixAdam Soltys2026-03-051-8/+16
|
* fix pending payment cleanup and login password verificationAdam Soltys2026-03-051-1/+7
| | | | | | | Skip non-lightning entries in pending payments check and handle malformed password hashes gracefully during login. Co-Authored-By: Claude Opus 4.6 <[email protected]>
* funds routeAdam Soltys2026-03-041-0/+2
|
* vault wallet fixesAdam Soltys2026-03-031-3/+16
|
* sync vaultAdam Soltys2026-03-031-1/+1
|
* bip353Adam Soltys2026-03-031-0/+7
|
* fix login/reset glitchesAdam Soltys2026-03-031-7/+18
|
* request tuningAdam Soltys2026-03-031-23/+43
|
* delete endpointAdam Soltys2026-03-011-0/+37
|
* disable rate limiting in devAdam Soltys2026-02-281-4/+4
|
* fix hono route orderAdam Soltys2026-02-281-8/+20
|
* hash pinsAdam Soltys2026-02-281-1/+1
|
* fix typescript issuesAdam Soltys2026-02-281-23/+19
|
* migrate to honoAdam Soltys2026-02-281-289/+290
|
* encrypted keys fieldAdam Soltys2026-02-271-0/+1
|
* client-side password authAdam Soltys2026-02-261-3/+65
|
* formattingAdam Soltys2026-02-241-74/+27
|
* trigger importAdam Soltys2026-02-161-1/+18
|
* passkey authAdam Soltys2026-02-161-0/+58
|
* Prevent duplicate Ark vault accountsAdam Soltys2026-02-161-16/+15
| | | | Co-Authored-By: Claude Opus 4.6 <[email protected]>
* custodial ark sendsAdam Soltys2026-02-141-2/+2
|
* ark payment notificationsAdam Soltys2026-02-131-4/+4
|
* account level currency and autowithdraw settingsAdam Soltys2026-02-131-2/+8
|
* send pending balanceAdam Soltys2026-02-131-1/+2
|
* missing importAdam Soltys2026-02-121-0/+2
|
* track account indexAdam Soltys2026-02-061-1/+2
|
* upgrade dependenciesAdam Soltys2026-02-061-1/+2
| | | | | | | | | | | | | - Fastify 4→5 with all plugins - @noble/hashes 1→2, @scure/base 1→2, @scure/bip32 1→2 - redis 4→5, pino 8→10, got 13→14, uuid 8→13, ws 7→8 - nostr-tools 2.16→2.23 (fix getPublicKey to pass Uint8Array) - Remove unused deps: date-fns, buffer-crc32, readable-stream-clone - Fix @noble/hashes import paths for v2 (.js extensions) - Fix Fastify maxParamLength deprecation (use routerOptions) - Convert sharp require() to ES import Co-Authored-By: Claude Opus 4.6 <[email protected]>
* cross-protocol forwarding with race condition fixesAdam Soltys2026-02-061-1/+1
| | | | Co-Authored-By: Claude Opus 4.6 <[email protected]>
* tigerbeetleAdam Soltys2026-02-061-22/+17
|
* remove reconcile paymentsAdam Soltys2026-02-061-3/+5
|
* zmq logicAdam Soltys2026-02-061-2/+6
|
* custodial ark paymentsAdam Soltys2026-02-061-1/+1
|
* skip empty vtxosAdam Soltys2026-02-061-0/+1
|
* fix balance calculationAdam Soltys2026-02-061-1/+4
|
* arkAdam Soltys2026-02-061-2/+86
|
* ark addressAdam Soltys2026-02-061-0/+3
|
* health checkAdam Soltys2026-02-061-45/+6
|
* whitelist ua'sAdam Soltys2026-02-041-0/+11
|
* strip email from usernameAdam Soltys2026-02-021-0/+1
|
* check usernameAdam Soltys2026-01-291-11/+1
|
* skip captcha for torAdam Soltys2026-01-271-0/+4
|
* case insensitive usernamesAdam Soltys2026-01-261-1/+4
|
* captcha bypass whitelistAdam Soltys2026-01-261-10/+13
|
* read payments from archiveAdam Soltys2026-01-221-6/+6
|
* fix admin resetsAdam Soltys2026-01-221-7/+3
|
* api key captcha bypassAdam Soltys2026-01-221-3/+11
|
generated by cgit v1.2.3 (git 2.51.0) at 2026-10-19 18:54:33 +0000