aiolabs/lnbits
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

fix: TipJar wallet access bug

Browse source
This commit is contained in:
Stefan Stammberger 2021-11-17 14:33:23 +01:00
parent 4c77d6f11e
commit d8e4237961
No known key found for this signature in database
GPG key ID: 645FA807E935D9D5
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
lnbits/extensions/tipjar/views_api.py
View file

@ -172,7 +172,7 @@ async def api_delete_tip(
raise HTTPException( raise HTTPException(
status_code=HTTPStatus.NOT_FOUND, detail="No tip with this ID!" status_code=HTTPStatus.NOT_FOUND, detail="No tip with this ID!"
) )
if tip.wallet != g.wallet.id: if tip.wallet != wallet.wallet.id:
raise HTTPException( raise HTTPException(
status_code=HTTPStatus.FORBIDDEN, status_code=HTTPStatus.FORBIDDEN,
detail="Not authorized to delete this tip!", detail="Not authorized to delete this tip!",
@ -192,7 +192,7 @@ async def api_delete_tipjar(
raise HTTPException( raise HTTPException(
status_code=HTTPStatus.NOT_FOUND, detail="No tipjar with this ID!" status_code=HTTPStatus.NOT_FOUND, detail="No tipjar with this ID!"
) )
if tipjar.wallet != g.wallet.id: if tipjar.wallet != wallet.wallet.id:
raise HTTPException( raise HTTPException(
status_code=HTTPStatus.FORBIDDEN, status_code=HTTPStatus.FORBIDDEN,