aboutsummaryrefslogtreecommitdiffstats
path: root/routes
Commit message (Expand)AuthorAgeFilesLines
* printer: publish receipts at QoS 1 and clean LNURL metadata memosAdam Soltys2026-09-141-0/+1
* ecash: make claims work against the v1 keyset mintAdam Soltys2026-09-141-6/+3
* security: drop the admin endpoint surface and land pending hardeningAdam Soltys2026-09-134-60/+94
* flash: build each config image in its own temp dirAdam Soltys2026-09-041-6/+16
* flash: create printer dir and return errors instead of unhandled 500Adam Soltys2026-09-041-7/+13
* fund: authenticated recovery of a rotated fund's old linkAdam Soltys2026-08-281-4/+29
* login: fail-open recaptcha verify on infrastructure errorsAdam Soltys2026-08-251-2/+17
* take/authorize: kill-switch + validate fund-claim amountsAdam Soltys2026-08-251-4/+37
* nwc: 404 missing connections + require key rotation to revive retired onesAdam Soltys2026-08-221-2/+31
* nwc: enforce per-connection spend budgets + flag-gated incident containmentAdam Soltys2026-08-221-2/+30
* confirm: never re-credit receive outputs on wallet-funded txsAdam Soltys2026-08-221-0/+20
* nostr: resolve NIP-05 via the v3 registrar first; empty (not 500) on unknown ...Adam Soltys2026-08-171-1/+15
* users: sum sub-account balances in the deleteSelf guard (S12)Adam Soltys2026-08-071-4/+13
* payments: never lose a settled deposit to an oversized memo (S9/S10)Adam Soltys2026-08-071-1/+4
* logging: redact auth headers; set cookie flags on session token (S5)Adam Soltys2026-08-071-2/+14
* auth: fail closed on adminpass, scrub sample secrets (S3)Adam Soltys2026-08-073-4/+9
* auth: hash passwords at bcrypt cost 12 with transparent upgrade (S2)Adam Soltys2026-08-071-2/+17
* sockets: verify JWT signatures on the websocket auth path (S1)Adam Soltys2026-08-071-4/+4
* lnurl: defer to the v3 registrar for names it has claimedAdam Soltys2026-08-041-15/+53
* lnurl: serve local accounts directly instead of deferring to v3 registrarAdam Soltys2026-08-041-19/+9
* Let a migrated account hand its address to coinos v3Adam Soltys2026-08-032-4/+5
* LNURL: fall back to the v3 names registrar for unknown usersAdam Soltys2026-08-021-1/+21
* confirm: guard the first-seen deposit credit atomically (COINOS-2)Adam Soltys2026-07-311-0/+8
* take: claim single-use authorizations atomically (COINOS-3)Adam Soltys2026-07-311-17/+38
* mint/lightning: refuse caller-supplied invoices, tiered fees, log hygieneAdam Soltys2026-07-301-3/+11
* bolt12 zaps: pay offers, NWC pay/receive, per-user offers, NIP-44Adam Soltys2026-07-302-35/+74
* preimages: support fiat prices, converted at invoice-creation timeAdam Soltys2026-07-141-8/+25
* preimages: enforce a merchant-set price per preimage batchAdam Soltys2026-07-131-11/+24
* Merge remote-tracking branch 'origin/master'Adam Soltys2026-07-111-0/+76
|\
| * invoices: sell merchant-supplied preimages via a usePreimage queueAdam Soltys2026-07-101-0/+76
* | payments: use the debited tip when crediting internal transfersAdam Soltys2026-07-102-4/+15
|/
* users: return generic 404 from /reset for non-adminsAdam Soltys2026-06-271-1/+10
* lnurl: SSRF-guard user-supplied URL fetches + validate zap eventsAdam Soltys2026-06-151-5/+9
* users: add authenticated self-delete endpointAdam Soltys2026-06-131-0/+103
* nwc: keep notifications opt-in (revert default-on)Adam Soltys2026-06-061-6/+5
* nwc: fix pay_invoice reply reliability, rate-limit drops, notificationsAdam Soltys2026-06-061-1/+6
* mirror payment records to arc + atomic /confirm lock to prevent double-creditsAdam Soltys2026-05-171-3/+27
* remove /gateway endpointAdam Soltys2026-05-171-9/+0
* lnurl proxyAdam Soltys2026-03-271-0/+12
* don't remove missing paymentsAdam Soltys2026-03-241-2/+1
* listener logsAdam Soltys2026-03-181-2/+1
* remove logsAdam Soltys2026-03-176-33/+3
* adjust ln minfeeregtest-dataAdam Soltys2026-03-151-6/+0
* pass bytes for app secretAdam Soltys2026-03-141-1/+2
* use bytes for nostr toolsAdam Soltys2026-03-131-0/+1
* fix pending payment cleanup and login password verificationAdam Soltys2026-03-061-5/+7
* fix login/reset glitchesAdam Soltys2026-03-031-7/+18
* fix lnurl description_hash mismatchAdam Soltys2026-02-251-2/+6
* fix addmanagersAdam Soltys2026-02-101-5/+4
* filter null managersAdam Soltys2026-02-101-2/+2