From df471202a97f8469725c825868677251ed0c34f5 Mon Sep 17 00:00:00 2001
From: Adam Soltys <adam@coinos.io>
Date: Wed, 1 Oct 2025 07:21:14 -0700
Subject: login challenge

---
 index.ts        |  1 +
 routes/users.ts | 11 +++++++++++
 2 files changed, 12 insertions(+)

diff --git a/index.ts b/index.ts
index 4efc0e55..f155fcab 100644
--- a/index.ts
+++ b/index.ts
@@ -144,6 +144,7 @@ app.post(
 );
 app.post("/flash", users.flash);
 app.get("/challenge", users.challenge);
+app.post("/challenge/verify", users.challengeVerify);
 app.post("/nostrAuth", users.nostrAuth);
 app.get("/app/:pubkey", auth, users.app);
 app.get("/apps", auth, users.apps);
diff --git a/routes/users.ts b/routes/users.ts
index e3810d70..bca6e009 100644
--- a/routes/users.ts
+++ b/routes/users.ts
@@ -373,6 +373,17 @@ export default {
     res.send({ challenge: id });
   },
 
+  async challengeVerify(req, res) {
+    try {
+      const { challenge: id } = req.body;
+      const verified = await db.exists(`challenge:${id}`);
+      if (!verified) fail("Challenge not found");
+      res.send(verified);
+    } catch (e) {
+      bail(res, e.message);
+    }
+  },
+
   async nostrAuth(req, res) {
     try {
       const { event, challenge, twofa } = req.body;
-- 
cgit v1.2.3