aiolabs/lnbits
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Added unique hash check to lnurlw

Browse source
This commit is contained in:
benarc 2020-11-30 22:27:53 +00:00
parent ccb9d107d5
commit 52956a62a2
1 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

9
lnbits/extensions/withdraw/lnurl.py
View file

@ -38,6 +38,15 @@ async def api_lnurl_multi_response(unique_hash, id_unique_hash):
if link.is_spent: if link.is_spent:
return jsonify({"status": "ERROR", "reason": "Withdraw is spent."}), HTTPStatus.OK return jsonify({"status": "ERROR", "reason": "Withdraw is spent."}), HTTPStatus.OK
useslist = link.usescsv.split(",")
found = False
for x in useslist:
tohash = link.id + link.unique_hash + str(x)
if id_unique_hash == shortuuid.uuid(name=tohash):
found = True
if not found:
return jsonify({"status": "ERROR", "reason": "LNURL-withdraw not found."}), HTTPStatus.OK
return jsonify(link.lnurl_response.dict()), HTTPStatus.OK return jsonify(link.lnurl_response.dict()), HTTPStatus.OK