highperfocused/lnbits
1
0
Fork 0
mirror of https://github.com/lnbits/lnbits.git synced 2025-09-27 20:36:16 +02:00
Code Issues Packages Projects Releases Wiki Activity

Added unique hash check to lnurlw

Browse Source
This commit is contained in:
benarc
2020-11-30 22:27:53 +00:00
parent ccb9d107d5
commit 52956a62a2
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
lnbits/extensions/withdraw/lnurl.py
View File

@@ -38,6 +38,15 @@ async def api_lnurl_multi_response(unique_hash, id_unique_hash):
if link.is_spent:
return jsonify({"status": "ERROR", "reason": "Withdraw is spent."}), HTTPStatus.OK
useslist = link.usescsv.split(",")
found = False
for x in useslist:
tohash = link.id + link.unique_hash + str(x)
if id_unique_hash == shortuuid.uuid(name=tohash):
found = True
if not found:
return jsonify({"status": "ERROR", "reason": "LNURL-withdraw not found."}), HTTPStatus.OK
return jsonify(link.lnurl_response.dict()), HTTPStatus.OK