tpayserver: do not allow create_invoice by default - electrum - Electrum Bitcoin wallet HTML git clone https://git.parazyd.org/electrum DIR Log DIR Files DIR Refs DIR Submodules --- DIR commit 87facaa7818f6fa78c9d5c69742fd6cd225bff5a DIR parent 11aaa0b66fc2f67fdd6c67099b3d6660450a160d HTML Author: ThomasV <thomasv@electrum.org> Date: Sun, 10 May 2020 17:07:19 +0200 payserver: do not allow create_invoice by default Diffstat: M electrum/daemon.py | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) --- DIR diff --git a/electrum/daemon.py b/electrum/daemon.py t@@ -200,11 +200,12 @@ class PayServer(Logger): async def run(self): root = self.config.get('payserver_root', '/r') app = web.Application() - app.add_routes([web.post('/api/create_invoice', self.create_request)]) app.add_routes([web.get('/api/get_invoice', self.get_request)]) app.add_routes([web.get('/api/get_status', self.get_status)]) app.add_routes([web.get('/bip70/{key}.bip70', self.get_bip70_request)]) app.add_routes([web.static(root, os.path.join(os.path.dirname(__file__), 'www'))]) + if self.config.get('payserver_allow_create_invoice'): + app.add_routes([web.post('/api/create_invoice', self.create_request)]) runner = web.AppRunner(app) await runner.setup() site = web.TCPSite(runner, host=str(self.addr.host), port=self.addr.port, ssl_context=self.config.get_ssl_context()) t@@ -217,9 +218,10 @@ class PayServer(Logger): raise web.HTTPUnsupportedMediaType() amount = int(params['amount_sat']) message = params['message'] or "donation" - payment_hash = wallet.lnworker.add_request(amount_sat=amount, - message=message, - expiry=3600) + payment_hash = wallet.lnworker.add_request( + amount_sat=amount, + message=message, + expiry=3600) key = payment_hash.hex() raise web.HTTPFound(self.root + '/pay?id=' + key)