From 96dff083b35748e65d728c4958d5426e8e13f6c8 Mon Sep 17 00:00:00 2001
From: Adam Soltys <asoltys@gmail.com>
Date: Thu, 25 Jun 2020 20:29:14 -0700
Subject: authorize additional linking keys

---
 routes/lnurl.js | 14 ++++++++++----
 routes/users.js |  8 ++++++++
 2 files changed, 18 insertions(+), 4 deletions(-)

(limited to 'routes')

diff --git a/routes/lnurl.js b/routes/lnurl.js
index b89f52a2..7cd1a19e 100644
--- a/routes/lnurl.js
+++ b/routes/lnurl.js
@@ -6,13 +6,19 @@ logins = {};
 
 lnurlServer = lnurl.createServer(config.lnurl);
 
-app.get("/loginUrl", async (req, res) => {
+var optionalAuth = function(req, res, next) {
+  passport.authenticate('jwt', { session: false }, function(err, user, info) {
+    req.user = user;
+    next();
+  })(req, res, next);
+};
+
+app.get("/loginUrl", optionalAuth, async (req, res) => {
   try {
     const result = await lnurlServer.generateNewUrl("login");
-    const { username } = req.query;
 
-    if (username !== "undefined") {
-      logins[result.secret] = username;
+    if (req.user) {
+      logins[result.secret] = req.user.username;
     }
 
     res.send(result);
diff --git a/routes/users.js b/routes/users.js
index 522d2e6a..5a708d00 100644
--- a/routes/users.js
+++ b/routes/users.js
@@ -262,6 +262,14 @@ app.post("/keys", auth, async (req, res) => {
   emit(req.user.username, "key", key);
 });
 
+app.post("/keys/delete", auth, async (req, res) => {
+  const { hex } = req.body;
+  (await db.Key.findOne({ where: {
+    user_id: req.user.id,
+    hex
+  }})).destroy();
+});
+
 app.post("/login", async (req, res) => {
   const {
     params,
-- 
cgit v1.2.3