Replace deprecated request/request-promise with axios
request has been deprecated since 2020 with an unfixed SSRF advisory and
pins vulnerable copies of form-data (critical), qs, tough-cookie and
uuid - 8 of the 13 remaining production audit findings, none fixable by
version bumps (issue #1634, item 1).
All 36 backend files that imported request-promise now use a small
compatibility wrapper (server/utils/request.ts) backed by axios, which
is already a production dependency. The wrapper accepts the existing
options shape (qs, form - object or pre-encoded string, body,
baseUrl/uri, rejectUnauthorized, json), resolves with the response body
directly, and rejects with a plain object mirroring request-promise's
StatusCodeError/RequestError shape, so CommonService.handleError works
unchanged (ECONNREFUSED -> 503, Eclair StatusCodeError -> 500, nested
error body extraction). Auth headers are excluded from rejected errors
so they cannot leak into logs. Callers without json: true (block
explorer, currency rates) still get raw text bodies, and LND's
line-delimited /v2/router/send stream still surfaces as a string for
the existing parser.
Only behavioral code change: CLN verifyMessage used request-promise's
callback style and was ported to the same promise style as signMessage;
four Eclair handlers gained explicit returns to satisfy
noImplicitReturns once the import became typed.
Production npm audit drops from 13 findings (2 critical) to 6 low, all
in the crypto-browserify/elliptic chain tracked in #1634.
Verified against the docker regtest fixture with 43 API checks across
LND, Core Lightning and Eclair: reads, invoice creation, a routed LND
payment over the streaming endpoint, cross-implementation payments from
CLN and Eclair, message sign/verify, channel backup to disk, and
bad-invoice/node-unreachable error mapping. Lint and both production
builds are clean.
2026-07-19 12:08:05 -07:00
|
|
|
import request from '../../utils/request.js';
|
2021-12-29 18:08:41 -05:00
|
|
|
import { Logger, LoggerService } from '../../utils/logger.js';
|
|
|
|
|
import { Common, CommonService } from '../../utils/common.js';
|
|
|
|
|
let options = null;
|
|
|
|
|
const logger: LoggerService = Logger;
|
|
|
|
|
const common: CommonService = Common;
|
|
|
|
|
|
|
|
|
|
export const arrangeBalances = (body) => {
|
|
|
|
|
if (!body.confirmed) { body.confirmed = 0; }
|
|
|
|
|
if (!body.unconfirmed) { body.unconfirmed = 0; }
|
|
|
|
|
body.total = +body.confirmed + +body.unconfirmed;
|
|
|
|
|
body.btc_total = +body.btc_confirmed + +body.btc_unconfirmed;
|
|
|
|
|
return body;
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
export const getNewAddress = (req, res, next) => {
|
|
|
|
|
logger.log({ selectedNode: req.session.selectedNode, level: 'INFO', fileName: 'OnChain', msg: 'Generating New Address..' });
|
|
|
|
|
options = common.getOptions(req);
|
|
|
|
|
if (options.error) { return res.status(options.statusCode).json({ message: options.message, error: options.error }); }
|
2024-06-10 12:40:37 -07:00
|
|
|
options.url = req.session.selectedNode.settings.lnServerUrl + '/getnewaddress';
|
2021-12-29 18:08:41 -05:00
|
|
|
options.form = {};
|
|
|
|
|
request.post(options).then((body) => {
|
2022-01-16 15:55:50 -05:00
|
|
|
logger.log({ selectedNode: req.session.selectedNode, level: 'INFO', fileName: 'OnChain', msg: 'New Address Generated', data: body });
|
2021-12-29 18:08:41 -05:00
|
|
|
res.status(200).json(body);
|
|
|
|
|
}).catch((errRes) => {
|
|
|
|
|
const err = common.handleError(errRes, 'OnChain', 'Get New Address Error', req.session.selectedNode);
|
|
|
|
|
return res.status(err.statusCode).json({ message: err.message, error: err.error });
|
|
|
|
|
});
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
export const getBalance = (req, res, next) => {
|
|
|
|
|
logger.log({ selectedNode: req.session.selectedNode, level: 'INFO', fileName: 'OnChain', msg: 'Getting On Chain Balance..' });
|
|
|
|
|
options = common.getOptions(req);
|
|
|
|
|
if (options.error) { return res.status(options.statusCode).json({ message: options.message, error: options.error }); }
|
2024-06-10 12:40:37 -07:00
|
|
|
options.url = req.session.selectedNode.settings.lnServerUrl + '/onchainbalance';
|
2021-12-29 18:08:41 -05:00
|
|
|
options.form = {};
|
|
|
|
|
if (common.read_dummy_data) {
|
2024-06-10 12:40:37 -07:00
|
|
|
common.getDummyData('OnChainBalance', req.session.selectedNode.lnImplementation).then((data) => { res.status(200).json(arrangeBalances(data)); });
|
2021-12-29 18:08:41 -05:00
|
|
|
} else {
|
|
|
|
|
request.post(options).then((body) => {
|
2022-01-16 15:55:50 -05:00
|
|
|
logger.log({ selectedNode: req.session.selectedNode, level: 'INFO', fileName: 'OnChain', msg: 'On Chain Balance Received', data: body });
|
2021-12-29 18:08:41 -05:00
|
|
|
res.status(200).json(arrangeBalances(body));
|
|
|
|
|
}).
|
|
|
|
|
catch((errRes) => {
|
|
|
|
|
const err = common.handleError(errRes, 'OnChain', 'Get Balance Error', req.session.selectedNode);
|
|
|
|
|
return res.status(err.statusCode).json({ message: err.message, error: err.error });
|
|
|
|
|
});
|
|
|
|
|
}
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
export const getTransactions = (req, res, next) => {
|
|
|
|
|
logger.log({ selectedNode: req.session.selectedNode, level: 'INFO', fileName: 'OnChain', msg: 'Getting On Chain Transactions..' });
|
|
|
|
|
options = common.getOptions(req);
|
|
|
|
|
if (options.error) { return res.status(options.statusCode).json({ message: options.message, error: options.error }); }
|
2024-06-10 12:40:37 -07:00
|
|
|
options.url = req.session.selectedNode.settings.lnServerUrl + '/onchaintransactions';
|
2021-12-29 18:08:41 -05:00
|
|
|
options.form = {
|
|
|
|
|
count: req.query.count,
|
|
|
|
|
skip: req.query.skip
|
|
|
|
|
};
|
2022-01-16 15:55:50 -05:00
|
|
|
logger.log({ selectedNode: req.session.selectedNode, level: 'INFO', fileName: 'OnChain', msg: 'Getting On Chain Transactions Options', data: options.form });
|
2021-12-29 18:08:41 -05:00
|
|
|
request.post(options).then((body) => {
|
2022-01-16 15:55:50 -05:00
|
|
|
logger.log({ selectedNode: req.session.selectedNode, level: 'INFO', fileName: 'OnChain', msg: 'On Chain Transactions Received', data: body });
|
2021-12-29 18:08:41 -05:00
|
|
|
res.status(200).json(body);
|
|
|
|
|
}).catch((errRes) => {
|
|
|
|
|
const err = common.handleError(errRes, 'OnChain', 'Get Transactions Error', req.session.selectedNode);
|
|
|
|
|
return res.status(err.statusCode).json({ message: err.message, error: err.error });
|
|
|
|
|
});
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
export const sendFunds = (req, res, next) => {
|
2024-06-10 12:40:37 -07:00
|
|
|
const { address, amount, blocks } = req.body;
|
2021-12-29 18:08:41 -05:00
|
|
|
logger.log({ selectedNode: req.session.selectedNode, level: 'INFO', fileName: 'OnChain', msg: 'Sending On Chain Funds..' });
|
|
|
|
|
options = common.getOptions(req);
|
|
|
|
|
if (options.error) { return res.status(options.statusCode).json({ message: options.message, error: options.error }); }
|
2024-06-10 12:40:37 -07:00
|
|
|
options.url = req.session.selectedNode.settings.lnServerUrl + '/sendonchain';
|
|
|
|
|
options.form = { address: address, amountSatoshis: amount, confirmationTarget: blocks };
|
2021-12-29 18:08:41 -05:00
|
|
|
logger.log({ selectedNode: req.session.selectedNode, level: 'DEBUG', fileName: 'Onchain', msg: 'Send Funds Options', data: options.form });
|
|
|
|
|
request.post(options).then((body) => {
|
2022-01-16 15:55:50 -05:00
|
|
|
logger.log({ selectedNode: req.session.selectedNode, level: 'INFO', fileName: 'Onchain', msg: 'On Chain Funds Sent', data: body });
|
2021-12-29 18:08:41 -05:00
|
|
|
res.status(201).json(body);
|
|
|
|
|
}).catch((errRes) => {
|
|
|
|
|
const err = common.handleError(errRes, 'OnChain', 'Send Funds Error', req.session.selectedNode);
|
|
|
|
|
return res.status(err.statusCode).json({ message: err.message, error: err.error });
|
|
|
|
|
});
|
|
|
|
|
};
|