sveltekit 1.0

2 files changed, 17 insertions, 7 deletions

diff --git a/src/routes/(app)/send/bitcoin/[address]/[...amount]/+page.server.js b/src/routes/(app)/send/bitcoin/[address]/[...amount]/+page.server.js
index 901d90a8..59e9326d 100644
--- a/src/routes/(app)/send/bitcoin/[address]/[...amount]/+page.server.js
+++ b/src/routes/(app)/send/bitcoin/[address]/[...amount]/+page.server.js
@@ -1,11 +1,17 @@
-import { invalid, redirect } from '@sveltejs/kit';
+import { fail, redirect } from '@sveltejs/kit';
 import { auth, post } from '$lib/utils';
 
+let seen = {};
 export const actions = {
 	default: async ({ cookies, request }) => {
 		try {
 			let feeRate, subtract;
-			let { address, amount, pin } = Object.fromEntries(await request.formData());
+			let { address, amount, pin, ts } = Object.fromEntries(await request.formData());
+
+			if (seen[ts]) return fail(400, { message: 'Duplicate form submission' });
+			seen[ts] = 1;
+			setTimeout(() => delete seen[ts], 30000);
+
 			let { tx } = await post(
 				'/bitcoin/fee',
 				{ address, amount, feeRate, subtract },
@@ -13,7 +19,7 @@ export const actions = {
 			);
 			await post('/bitcoin/send', { pin, tx }, auth(cookies));
 		} catch (e) {
-			return invalid(400, { message: e.message });
+			return fail(400, { message: e.message });
 		}
 
 		throw redirect(307, '/sent');
diff --git a/src/routes/(app)/send/bitcoin/[address]/[...amount]/+page.svelte b/src/routes/(app)/send/bitcoin/[address]/[...amount]/+page.svelte
index 2165e896..0da8ea10 100644
--- a/src/routes/(app)/send/bitcoin/[address]/[...amount]/+page.svelte
+++ b/src/routes/(app)/send/bitcoin/[address]/[...amount]/+page.svelte
@@ -11,9 +11,10 @@
 
 	let { address, amount } = $page.params;
 	let { currency } = data.user;
-	let loading;
+	let loading, submit;
+
+	let toggle = () => (loading = true);
 
-	let submit = () => (loading = true);
 	$: update(form);
 	let update = () => {
 		if (form?.message.includes('pin')) $pin = undefined;
@@ -36,17 +37,20 @@
 		<h1 class="text-3xl md:text-4xl font-semibold mb-2">{$t('payments.sendTo')}</h1>
 		<p class="text-lg text-secondary">{address}</p>
 	</div>
-	<Numpad bind:amount {currency} />
+	<Numpad bind:amount {currency} {submit} />
 
-	<form method="POST" use:enhance on:submit={submit}>
+	<form method="POST" use:enhance on:submit={toggle}>
+    <input name="ts" value={Date.now()} type="hidden" />
 		<input name="address" value={address} type="hidden" />
 		<input name="amount" value={amount} type="hidden" />
 		<input name="pin" value={$pin} type="hidden" />
 
 		<div class="flex w-full">
 			<button
+				bind:this={submit}
 				type="submit"
 				class="opacity-100 hover:opacity-80'} rounded-2xl border py-3 font-bold mx-auto mt-2 bg-black text-white px-4 w-24"
+				disabled={loading}
 			>
 				{#if loading}
 					<Spinner />