highperfocused/lnbits
1
0
Fork 0
mirror of https://github.com/lnbits/lnbits.git synced 2025-09-29 05:12:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Hidden api keys to prevent over shoulder attacks

Browse Source
This commit is contained in:
Ben Arc
2021-04-13 11:10:21 +01:00
parent 9f7a97f58e
commit aa2e09bbeb
2 changed files with 13 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
lnbits/core/templates/core/_api_docs.html
View File

@@ -4,6 +4,11 @@
label="API info" label="API info"
:content-inset-level="0.5" :content-inset-level="0.5"
> >
<q-card-section>
<strong>Wallet ID: </strong><em>{{ wallet.id }}</em><br />
<strong>Admin key: </strong><em>{{ wallet.adminkey }}</em><br />
<strong>Invoice/read key: </strong><em>{{ wallet.inkey }}</em>
</q-card-section>
<q-expansion-item <q-expansion-item
group="api" group="api"
dense dense

14
lnbits/core/templates/core/wallet.html
View File

@@ -220,14 +220,13 @@
<div class="col-12 col-md-5 q-gutter-y-md"> <div class="col-12 col-md-5 q-gutter-y-md">
<q-card> <q-card>
<q-card-section> <q-card-section>
<h6 class="text-subtitle1 q-mt-none q-mb-sm">LNbits wallet</h6> <h6 class="text-subtitle1 q-mt-none q-mb-sm">
<strong>Wallet name: </strong><em>{{ wallet.name }}</em><br /> LNbits wallet: <strong><em>{{ wallet.name }}</em></strong>
<strong>Wallet ID: </strong><em>{{ wallet.id }}</em><br /> </h6>
<strong>Admin key: </strong><em>{{ wallet.adminkey }}</em><br />
<strong>Invoice/read key: </strong><em>{{ wallet.inkey }}</em>
</q-card-section> </q-card-section>
<q-card-section class="q-pa-none"> <q-card-section class="q-pa-none">
<q-separator></q-separator> <q-separator></q-separator>
<q-list> <q-list>
{% include "core/_api_docs.html" %} {% include "core/_api_docs.html" %}
<q-separator></q-separator> <q-separator></q-separator>
@@ -238,7 +237,10 @@
> >
<q-card> <q-card>
<q-card-section> <q-card-section>
<p>This QR code contains your wallet URL with full access. You can scan it from your phone to open your wallet from there.</p> <p>
This QR code contains your wallet URL with full access. You
can scan it from your phone to open your wallet from there.
</p>
<qrcode <qrcode
:value="'{{request.url_root}}'+'wallet?usr={{user.id}}&wal={{wallet.id}}'" :value="'{{request.url_root}}'+'wallet?usr={{user.id}}&wal={{wallet.id}}'"
:options="{width:240}" :options="{width:240}"