From 92aaa674ddc7d52d590fb365b2e5ec20486cd7f4 Mon Sep 17 00:00:00 2001
From: Adam Soltys <asoltys@gmail.com>
Date: Tue, 23 Jun 2020 15:30:07 -0700
Subject: use secret as session key

---
 routes/lnurl.js | 2 +-
 routes/users.js | 3 +--
 2 files changed, 2 insertions(+), 3 deletions(-)

diff --git a/routes/lnurl.js b/routes/lnurl.js
index e9c1f930..b89f52a2 100644
--- a/routes/lnurl.js
+++ b/routes/lnurl.js
@@ -65,7 +65,7 @@ lnurlServer.bindToHook("login", async params => {
     if (user && user.username) {
       const payload = { username: user.username };
       const token = jwt.sign(payload, config.jwt);
-      const ws = sessions[key];
+      const ws = sessions[k1];
       if (ws && ws.send)
         ws.send(JSON.stringify({ type: "token", data: token }));
     }
diff --git a/routes/users.js b/routes/users.js
index 13837bd6..e11a1b9d 100644
--- a/routes/users.js
+++ b/routes/users.js
@@ -270,8 +270,7 @@ app.post("/login", async (req, res) => {
   } = req.body;
 
   if (sig) {
-    const { callback, k1 } = params;
-    sessions[key] = sessions[k1];
+    const { callback } = params;
 
     try {
       const url = `${callback}&sig=${sig}&key=${key}`;
-- 
cgit v1.2.3