From af0f19c261e06f165cb6a24f1a6247e971649d88 Mon Sep 17 00:00:00 2001
From: Adam Soltys <adam@coinos.io>
Date: Sat, 20 Sep 2025 18:18:31 -0700
Subject: fix invoice user

---
 bun.lockb          | Bin 230714 -> 230690 bytes
 package.json       |   2 +-
 routes/invoices.ts |   4 ++--
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/bun.lockb b/bun.lockb
index 2a0d915a..4ff2d8a6 100755
Binary files a/bun.lockb and b/bun.lockb differ
diff --git a/package.json b/package.json
index 24fdc2af..71ce64f7 100644
--- a/package.json
+++ b/package.json
@@ -10,7 +10,7 @@
   "dependencies": {
     "@asoltys/clightning-client": "^0.1.10",
     "@aws-sdk/client-ses": "^3.886.0",
-    "@cashu/cashu-ts": "^2.7.1",
+    "@cashu/cashu-ts": "^2.7.2",
     "@coinos/rpc": "^0.0.6",
     "@fastify/cors": "^8.5.0",
     "@fastify/http-proxy": "^9.5.0",
diff --git a/routes/invoices.ts b/routes/invoices.ts
index 3cc6bab0..fb7e319d 100644
--- a/routes/invoices.ts
+++ b/routes/invoices.ts
@@ -58,12 +58,12 @@ export default {
       if (tip < 0) fail("Invalid tip");
 
       let invoice = await g(`invoice:${id}`);
-      const user = req.user || (await g(`user:${invoice.uid}`));
+      const user = await g(`user:${invoice.uid}`);
 
       if (typeof tip !== "undefined") invoice.tip = tip;
 
       if (webhook && secret) {
-        if (invoice.uid !== user?.id) fail("Unauthorized");
+        if (invoice.uid !== req.user?.id) fail("Unauthorized");
         invoice.webhook = webhook;
         invoice.secret = secret;
       }
-- 
cgit v1.2.3