From 12349761c03e769e1d54e878746a10d0a464b38d Mon Sep 17 00:00:00 2001 From: Adam Soltys Date: Tue, 13 Oct 2026 16:23:37 -0700 Subject: users: let a password unlock the encrypted nostr key for any session /me only reports hasnsec now, so sessions that didn't start with a password login had no way to reveal or sign with their key. POST /nsec returns it after re-checking the password, under the login per-IP failure limit. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01UjHzoBmW1iPpEe5qC2LDYB --- index.ts | 1 + 1 file changed, 1 insertion(+) (limited to 'index.ts') diff --git a/index.ts b/index.ts index 22854661..17f776ec 100644 --- a/index.ts +++ b/index.ts @@ -183,6 +183,7 @@ app.get("/subscriptions", auth, users.subscriptions); app.post("/subscription", auth, users.subscription); app.post("/subscription/delete", auth, users.deleteSubscription); app.post("/password", auth, users.password); +app.post("/nsec", auth, users.nsec); app.post("/pin", auth, users.pin); app.post("/otpsecret", auth, users.otpsecret); app.get("/contacts/:limit?", auth, users.contacts); -- cgit v1.2.3