aboutsummaryrefslogtreecommitdiffstats
path: root/routes
Commit message (Expand)AuthorAgeFilesLines
* users: sum sub-account balances in the deleteSelf guard (S12)Adam Soltys2026-08-071-4/+13
* payments: never lose a settled deposit to an oversized memo (S9/S10)Adam Soltys2026-08-071-1/+4
* logging: redact auth headers; set cookie flags on session token (S5)Adam Soltys2026-08-071-2/+14
* auth: fail closed on adminpass, scrub sample secrets (S3)Adam Soltys2026-08-073-4/+9
* auth: hash passwords at bcrypt cost 12 with transparent upgrade (S2)Adam Soltys2026-08-071-2/+17
* sockets: verify JWT signatures on the websocket auth path (S1)Adam Soltys2026-08-071-4/+4
* lnurl: defer to the v3 registrar for names it has claimedAdam Soltys2026-08-041-15/+53
* lnurl: serve local accounts directly instead of deferring to v3 registrarAdam Soltys2026-08-041-19/+9
* Let a migrated account hand its address to coinos v3Adam Soltys2026-08-032-4/+5
* LNURL: fall back to the v3 names registrar for unknown usersAdam Soltys2026-08-021-1/+21
* confirm: guard the first-seen deposit credit atomically (COINOS-2)Adam Soltys2026-07-311-0/+8
* take: claim single-use authorizations atomically (COINOS-3)Adam Soltys2026-07-311-17/+38
* mint/lightning: refuse caller-supplied invoices, tiered fees, log hygieneAdam Soltys2026-07-301-3/+11
* bolt12 zaps: pay offers, NWC pay/receive, per-user offers, NIP-44Adam Soltys2026-07-302-35/+74
* preimages: support fiat prices, converted at invoice-creation timeAdam Soltys2026-07-141-8/+25
* preimages: enforce a merchant-set price per preimage batchAdam Soltys2026-07-131-11/+24
* Merge remote-tracking branch 'origin/master'Adam Soltys2026-07-111-0/+76
|\
| * invoices: sell merchant-supplied preimages via a usePreimage queueAdam Soltys2026-07-101-0/+76
* | payments: use the debited tip when crediting internal transfersAdam Soltys2026-07-102-4/+15
|/
* users: return generic 404 from /reset for non-adminsAdam Soltys2026-06-271-1/+10
* lnurl: SSRF-guard user-supplied URL fetches + validate zap eventsAdam Soltys2026-06-151-5/+9
* users: add authenticated self-delete endpointAdam Soltys2026-06-131-0/+103
* nwc: keep notifications opt-in (revert default-on)Adam Soltys2026-06-061-6/+5
* nwc: fix pay_invoice reply reliability, rate-limit drops, notificationsAdam Soltys2026-06-061-1/+6
* mirror payment records to arc + atomic /confirm lock to prevent double-creditsAdam Soltys2026-05-171-3/+27
* remove /gateway endpointAdam Soltys2026-05-171-9/+0
* lnurl proxyAdam Soltys2026-03-271-0/+12
* don't remove missing paymentsAdam Soltys2026-03-241-2/+1
* listener logsAdam Soltys2026-03-181-2/+1
* remove logsAdam Soltys2026-03-176-33/+3
* adjust ln minfeeregtest-dataAdam Soltys2026-03-151-6/+0
* pass bytes for app secretAdam Soltys2026-03-141-1/+2
* use bytes for nostr toolsAdam Soltys2026-03-131-0/+1
* fix pending payment cleanup and login password verificationAdam Soltys2026-03-061-5/+7
* fix login/reset glitchesAdam Soltys2026-03-031-7/+18
* fix lnurl description_hash mismatchAdam Soltys2026-02-251-2/+6
* fix addmanagersAdam Soltys2026-02-101-5/+4
* filter null managersAdam Soltys2026-02-101-2/+2
* check forwarded host headerAdam Soltys2026-02-061-1/+1
* health checkAdam Soltys2026-02-062-45/+13
* whitelist ua'sAdam Soltys2026-02-041-0/+11
* strip email from usernameAdam Soltys2026-02-021-0/+1
* consult archive for older paymentsAdam Soltys2026-01-303-6/+7
* check usernameAdam Soltys2026-01-291-11/+1
* skip captcha for torAdam Soltys2026-01-271-0/+4
* case insensitive usernamesAdam Soltys2026-01-261-1/+4
* captcha bypass whitelistAdam Soltys2026-01-261-10/+13
* read payments from archiveAdam Soltys2026-01-222-11/+24
* fix admin resetsAdam Soltys2026-01-221-7/+3
* api key captcha bypassAdam Soltys2026-01-221-3/+11
generated by cgit v1.2.3 (git 2.51.0) at 2026-10-19 07:55:29 +0000