blackcoffeexbt
0e3246e6c0
Merge commit from fork
...
The public payment status endpoint returned the stored preimage in the
pending-payment fall-through, leaking valid preimages of unpaid invoices
to unauthenticated callers on funding sources that generate the preimage
at invoice creation (FakeWallet, CoreLightning, CLNRest, LndRest,
LndGrpc, Eclair).
Only expose the preimage once the payment is actually successful and
scrub it from details in the exception branch. Adds a regression test
covering unauthenticated, invalid-key, non-owning-key, expired-invoice
and paid-control cases.
2026-08-20 10:21:24 +03:00
Vlad Stan
51e585c78c
fix: direct fiat payments ( #4116 )
...
Co-authored-by: Arc <33088785+arcbtc@users.noreply.github.com>
2026-07-31 16:22:55 +03:00
blackcoffeexbt
e6a61fafbb
Add lightning addresses for wallets in core ( #4035 )
...
Co-authored-by: Vlad Stan <stan.v.vlad@gmail.com>
2026-07-31 09:35:18 +03:00
Vlad Stan
2b5a513693
fix: check extension type when installing ( #4101 )
2026-07-27 14:53:12 +03:00
Vlad Stan
84da727282
feat: custom wasm install dir ( #4100 )
2026-07-27 12:27:29 +03:00
Vlad Stan
8723d327fe
feat: add wasm manifest ( #4089 )
...
codeql / analyze (push) Has been cancelled
LNbits CI / nix / nix (push) Has been cancelled
Co-authored-by: Arc <ben@arc.wales>
2026-07-24 15:35:30 +03:00
Vlad Stan
eee372bb3c
fix: sso missing user id ( #4082 )
2026-07-22 11:54:23 +03:00
Arc
f3f5c89113
feat: payments breakdown wallet ui + api ( #4027 )
...
Co-authored-by: Vlad Stan <stan.v.vlad@gmail.com>
2026-07-21 18:26:00 +03:00
volrabp
368d0f548f
fix: auto-create new labels in user account via payments API ( #4003 )
2026-07-21 17:29:55 +03:00
Tiago Vasconcelos
20115b42aa
feat: display expiration for ACL tokens ( #4033 )
...
Co-authored-by: Vlad Stan <stan.v.vlad@gmail.com>
2026-07-21 15:09:54 +03:00
Vlad Stan
f5989201d9
feat: advanced wasm extension features ( #4059 )
2026-07-20 14:50:25 +03:00
Vlad Stan
61ed636df0
feat: Extensions for all ( #4021 )
...
Co-authored-by: alan <alan@lnbits.com>
Co-authored-by: Tiago Vasconcelos <talvasconcelos@gmail.com>
2026-07-15 13:50:19 +03:00
dni ⚡
fd9009f760
feat: create TaskManager singleton class ( #3775 )
...
Co-authored-by: dadofsambonzuki <dadofsambonzuki@users.noreply.github.com>
2026-07-08 14:07:38 +02:00
Arc
7eb9965205
feat: keep funding source on default reset, force seed backup ( #4040 )
...
Co-authored-by: alan <alan@lnbits.com>
2026-07-08 13:54:11 +02:00
Vlad Stan
564edfc447
fix: do not hit sso provider on user missmatch ( #3995 )
2026-06-03 14:29:54 +03:00
dni ⚡
b98515df14
chore: update pyright to latest and fix new issues ( #3978 )
2026-06-03 11:46:53 +02:00
Arc
5de4239f3c
fix: revolut subscriptions ( #3994 )
...
Co-authored-by: Vlad Stan <stan.v.vlad@gmail.com>
2026-06-03 11:21:44 +03:00
Tiago Vasconcelos
52304e0730
feat: allow extra appending ( #3974 )
...
Co-authored-by: Arc <ben@arc.wales>
2026-05-22 14:29:13 +01:00
Vlad Stan
a61807a257
feat: square integration ( #3962 )
2026-05-22 12:37:51 +03:00
Vlad Stan
30e0522419
fix: stricter asset upload ( #3982 )
2026-05-21 12:44:23 +02:00
Arc
385fb4f9bc
fix: first_install for local ( #3927 )
2026-04-14 14:50:20 +01:00
Vlad Stan
183e6e5661
[test] Codex tests ( #3911 )
2026-03-31 09:48:43 +03:00
Vlad Stan
2bdb89b4b9
fix: paypal subscriptions ( #3797 )
2026-02-25 07:54:31 +01:00
Vlad Stan
e286546b63
[feat] User invitation code ( #3761 )
2026-02-25 07:54:07 +01:00
Vlad Stan
7e327b2c6a
[feat] User activation ( #3749 )
2026-02-25 07:54:00 +01:00
Vlad Stan
e72396fe31
[feat] persist user ui customization ( #3743 )
2026-02-25 07:53:52 +01:00
Vlad Stan
9be894da74
[feat] admin impersonate user ( #3741 )
2026-02-25 07:53:47 +01:00
Vlad Stan
67bb86c1ce
fix: better validation error messages ( #3736 )
2026-02-25 07:53:41 +01:00
Vlad Stan
ffad5d79c4
fix: undelete wallet ( #3730 )
2026-01-20 13:51:20 +02:00
Vlad Stan
5b2937672c
fix: delete user with wallets ( #3711 )
2026-01-08 16:39:37 +01:00
dni ⚡
5f86627eae
feat: improve on create wallet frontend and api. (BREAKING CHANGE) ( #3635 )
2025-12-08 11:09:43 +01:00
Vlad Stan
0910687328
[perf] pending payments check ( #3565 )
...
Co-authored-by: dni ⚡ <office@dnilabs.com>
2025-11-25 14:09:57 +02:00
dni ⚡
33e2fc2ea8
feat: move wallet.html to vue component. FINAL DynamicComponent pr ( #3559 )
2025-11-25 11:45:53 +01:00
Vlad Stan
d55e2a0e1f
[fix] user sorting performance ( #3561 )
2025-11-25 09:16:35 +02:00
Vlad Stan
7c7a04da9d
[feat] Payment labels ( #3537 )
2025-11-21 10:33:53 +02:00
Vlad Stan
8755984bd8
[test] admin paths ( #3494 )
2025-11-10 12:00:55 +02:00
dni ⚡
39ca9da870
feat: NWC use coincurve instead of secp ( #3455 )
2025-10-30 08:06:31 +01:00
dni ⚡
2b603bdc48
fix: add dependency-groups get rid of warning ( #3454 )
2025-10-29 15:59:31 +01:00
dni ⚡
672a5b3a4d
fix: pay with nfc endpoint + add perform_withdraw ( #3352 )
2025-09-10 14:52:47 +02:00
Tiago Vasconcelos
ef371e303c
feat: allow creating/update user with nostr npub1 pubkey ( #3298 )
2025-08-21 16:35:23 +02:00
dni ⚡
ae6cf47244
feat: lud11 disposable and storeable payRequests. ( #3317 )
2025-08-19 11:33:57 +02:00
dni ⚡
c24d2f24cf
fix: bump lnurl its not callback_url now, its just url ( #3312 )
2025-08-18 09:18:11 +02:00
dni ⚡
a36ab2d408
feat: update lnurl lib refactor lnurl endpoints ( #3271 )
2025-07-17 17:03:44 +03:00
Vlad Stan
695e9b6471
[feat] Add stripe payments ( #3184 )
2025-07-08 10:17:19 +02:00
Vlad Stan
c7b7832a88
feat: add external id for users ( #3219 )
2025-07-08 10:17:16 +02:00
Vlad Stan
3529f9152f
fix: better differentiation between UNAUTHORIZED and FORBIDDEN ( #3139 )
2025-05-05 10:55:58 +02:00
tlindi
e318f7679e
Update fi.js ( #2963 )
2025-02-14 19:44:08 +02:00
Vlad Stan
bfa23568e3
[fix] callback url validation ( #2959 )
2025-02-13 15:11:46 +02:00
Tiago Vasconcelos
432b3a0fe0
Reset wallet keys ( #2929 )
2025-02-06 15:07:36 +02:00
Tiago Vasconcelos
34a959f0bc
Add a payments page for admin ( #2910 )
2025-02-06 14:48:54 +02:00
