aiolabs/lnbits
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions 1

fix: check invoice amount against blinded message amount

Browse source
This commit is contained in:
Vlad Stan 2022-10-07 20:27:40 +03:00 • committed by dni ⚡
parent e842c3df52
commit f27632eb8e
2 changed files with 12 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
lnbits/extensions/cashu/core/base.py
View file

@ -4,7 +4,7 @@ from typing import List, Union
from pydantic import BaseModel from pydantic import BaseModel
class CashuError(BaseModel): class CashuError(BaseException):
code = "000" code = "000"
error = "CashuError" error = "CashuError"

7
lnbits/extensions/cashu/views_api.py
View file

@ -284,6 +284,13 @@ async def mint_coins(
detail="Tokens already issued for this invoice.", detail="Tokens already issued for this invoice.",
) )
total_requested = sum([bm.amount for bm in data.blinded_messages])
if total_requested > invoice.amount:
# raise CashuError(error = f"Requested amount to high: {total_requested}. Invoice amount: {invoice.amount}")
raise HTTPException(
status_code=HTTPStatus.PAYMENT_REQUIRED, detail=f"Requested amount to high: {total_requested}. Invoice amount: {invoice.amount}"
)
status: PaymentStatus = await check_transaction_status(cashu.wallet, payment_hash) status: PaymentStatus = await check_transaction_status(cashu.wallet, payment_hash)
# todo: revert to: status.paid != True: # todo: revert to: status.paid != True:
if status.paid != True: if status.paid != True: