mirror of
https://github.com/lnbits/lnbits-legend.git
synced 2024-11-19 18:11:30 +01:00
c9093715b7
no more superuser url! delete cookie on logout add usr login feature fix node management * Cleaned up login form * CreateUser * information leak * cleaner parsing usr from url * rename decorators * login secret * fix: add back `superuser` command * chore: remove `fastapi_login` * fix: extract `token` from cookie * chore: prepare to extract user * feat: check user * chore: code clean-up * feat: happy flow working * fix: usr only login * fix: user already logged in * feat: check user in URL * fix: verify password at DB level * fix: do not show `Login` controls if user already logged in * fix: separate login endpoints * fix: remove `usr` param * chore: update error message * refactor: register method * feat: logout * chore: move comments * fix: remove user auth check from API * fix: user check unnecessary * fix: redirect after logout * chore: remove garbage files * refactor: simplify constructor call * fix: hide user icon if not authorized * refactor: rename auth env vars * chore: code clean-up * fix: add types for `python-jose` * fix: add types for `passlib` * fix: return type * feat: set default value for `auth_secret_key` to hash of super user * fix: default value * feat: rework login page * feat: ui polishing * feat: google auth * feat: add google auth * chore: remove `authlib` dependency * refactor: extract `_handle_sso_login` method * refactor: convert methods to `properties` * refactor: rename: `user_api` to `auth_api` * feat: store user info from SSO * chore: re-arange the buttons * feat: conditional rendering of login options * feat: correctly render buttons * fix: re-add `Claim Bitcoin` from the main page * fix: create wallet must send new user * fix: no `username-password` auth method * refactor: rename auth method * fix: do not force API level UUID4 validation * feat: add validation for username * feat: add account page * feat: update account * feat: add `has_password` for user * fix: email not editable * feat: validate email for existing account * fix: register check * feat: reset password * chore: code clean-up * feat: handle token expired * fix: only redirect if `text/html` * refactor: remove `OAuth2PasswordRequestForm` * chore: remove `python-multipart` dependency * fix: handle no headers for exception * feat: add back button on error screen * feat: show user profile image * fix: check account creation permissions * fix: auth for internal api call * chore: add some docs * chore: code clean-up * fix: rebase stuff * fix: default value types * refactor: customize error messages * fix: move types libs to dev dependencies * doc: specify the `Authorization callback URL` * fix: pass missing superuser id in node ui test * fix: keep usr param on wallet redirect removing usr param causes an issue if the browser doesnt yet have an access token. * fix: do not redirect if `wal` query param not present * fix: add nativeBuildInputs and buildInputs overrides to flake.nix * bump fastapi-sso to 0.9.0 which fixes some security issues * refactor: move the `lnbits_admin_extensions` to decorators * chore: bring package config from `dev` * chore: re-add dependencies * chore: re-add cev dependencies * chore: re-add mypy ignores * feat: i18n * refactor: move admin ext check to decorator (fix after rebase) * fix: label mapping * fix: re-fetch user after first wallet was created * fix: unlikely case that `user` is not found * refactor translations (move '*' to code) * reorganize deps in pyproject.toml, add comment * update flake.lock and simplify flake.nix after upstreaming overrides for fastapi-sso, types-passlib, types-pyasn1, types-python-jose were upstreamed in https://github.com/nix-community/poetry2nix/pull/1463 * fix: more relaxed email verification (by @prusnak) * fix: remove `\b` (boundaries) since we re using `fullmatch` * chore: `make bundle` --------- Co-authored-by: dni ⚡ <office@dnilabs.com> Co-authored-by: Arc <ben@arc.wales> Co-authored-by: jackstar12 <jkranawetter05@gmail.com> Co-authored-by: Pavol Rusnak <pavol@rusnak.io>
197 lines
6.8 KiB
Python
197 lines
6.8 KiB
Python
import asyncio
|
|
from typing import Dict
|
|
|
|
import httpx
|
|
from loguru import logger
|
|
|
|
from lnbits.core.crud import (
|
|
get_balance_notify,
|
|
get_wallet,
|
|
get_webpush_subscriptions_for_user,
|
|
)
|
|
from lnbits.core.db import db
|
|
from lnbits.core.models import Payment
|
|
from lnbits.core.services import (
|
|
get_balance_delta,
|
|
send_payment_notification,
|
|
switch_to_voidwallet,
|
|
)
|
|
from lnbits.settings import get_wallet_class, settings
|
|
from lnbits.tasks import (
|
|
SseListenersDict,
|
|
create_permanent_task,
|
|
create_task,
|
|
register_invoice_listener,
|
|
send_push_notification,
|
|
)
|
|
|
|
api_invoice_listeners: Dict[str, asyncio.Queue] = SseListenersDict(
|
|
"api_invoice_listeners"
|
|
)
|
|
|
|
|
|
def register_killswitch():
|
|
"""
|
|
Registers a killswitch which will check lnbits-status repository for a signal from
|
|
LNbits and will switch to VoidWallet if the killswitch is triggered.
|
|
"""
|
|
logger.debug("Starting killswitch task")
|
|
create_permanent_task(killswitch_task)
|
|
|
|
|
|
async def killswitch_task():
|
|
while True:
|
|
WALLET = get_wallet_class()
|
|
if settings.lnbits_killswitch and WALLET.__class__.__name__ != "VoidWallet":
|
|
with httpx.Client() as client:
|
|
try:
|
|
r = client.get(settings.lnbits_status_manifest, timeout=4)
|
|
r.raise_for_status()
|
|
if r.status_code == 200:
|
|
ks = r.json().get("killswitch")
|
|
if ks and ks == 1:
|
|
logger.error(
|
|
"Switching to VoidWallet. Killswitch triggered."
|
|
)
|
|
await switch_to_voidwallet()
|
|
except (httpx.ConnectError, httpx.RequestError):
|
|
logger.error(
|
|
"Cannot fetch lnbits status manifest."
|
|
f" {settings.lnbits_status_manifest}"
|
|
)
|
|
await asyncio.sleep(settings.lnbits_killswitch_interval * 60)
|
|
|
|
|
|
async def register_watchdog():
|
|
"""
|
|
Registers a watchdog which will check lnbits balance and nodebalance
|
|
and will switch to VoidWallet if the watchdog delta is reached.
|
|
"""
|
|
# TODO: implement watchdog properly
|
|
# logger.debug("Starting watchdog task")
|
|
# create_permanent_task(watchdog_task)
|
|
|
|
|
|
async def watchdog_task():
|
|
while True:
|
|
WALLET = get_wallet_class()
|
|
if settings.lnbits_watchdog and WALLET.__class__.__name__ != "VoidWallet":
|
|
try:
|
|
delta, *_ = await get_balance_delta()
|
|
logger.debug(f"Running watchdog task. current delta: {delta}")
|
|
if delta + settings.lnbits_watchdog_delta <= 0:
|
|
logger.error(f"Switching to VoidWallet. current delta: {delta}")
|
|
await switch_to_voidwallet()
|
|
except Exception as e:
|
|
logger.error("Error in watchdog task", e)
|
|
await asyncio.sleep(settings.lnbits_watchdog_interval * 60)
|
|
|
|
|
|
def register_task_listeners():
|
|
"""
|
|
Registers an invoice listener queue for the core tasks. Incoming payments in this
|
|
queue will eventually trigger the signals sent to all other extensions
|
|
and fulfill other core tasks such as dispatching webhooks.
|
|
"""
|
|
invoice_paid_queue = asyncio.Queue(5)
|
|
# we register invoice_paid_queue to receive all incoming invoices
|
|
register_invoice_listener(invoice_paid_queue, "core/tasks.py")
|
|
# register a worker that will react to invoices
|
|
create_task(wait_for_paid_invoices(invoice_paid_queue))
|
|
|
|
|
|
async def wait_for_paid_invoices(invoice_paid_queue: asyncio.Queue):
|
|
"""
|
|
This worker dispatches events to all extensions,
|
|
dispatches webhooks and balance notifys.
|
|
"""
|
|
while True:
|
|
payment = await invoice_paid_queue.get()
|
|
logger.trace("received invoice paid event")
|
|
# send information to sse channel
|
|
await dispatch_api_invoice_listeners(payment)
|
|
wallet = await get_wallet(payment.wallet_id)
|
|
if wallet:
|
|
await send_payment_notification(wallet, payment)
|
|
# dispatch webhook
|
|
if payment.webhook and not payment.webhook_status:
|
|
await dispatch_webhook(payment)
|
|
|
|
# dispatch balance_notify
|
|
url = await get_balance_notify(payment.wallet_id)
|
|
if url:
|
|
headers = {"User-Agent": settings.user_agent}
|
|
async with httpx.AsyncClient(headers=headers) as client:
|
|
try:
|
|
r = await client.post(url, timeout=4)
|
|
await mark_webhook_sent(payment, r.status_code)
|
|
except (httpx.ConnectError, httpx.RequestError):
|
|
pass
|
|
|
|
await send_payment_push_notification(payment)
|
|
|
|
|
|
async def dispatch_api_invoice_listeners(payment: Payment):
|
|
"""
|
|
Emits events to invoice listener subscribed from the API.
|
|
"""
|
|
for chan_name, send_channel in api_invoice_listeners.items():
|
|
try:
|
|
logger.debug(f"sending invoice paid event to {chan_name}")
|
|
send_channel.put_nowait(payment)
|
|
except asyncio.QueueFull:
|
|
logger.error(f"removing sse listener {send_channel}:{chan_name}")
|
|
api_invoice_listeners.pop(chan_name)
|
|
|
|
|
|
async def dispatch_webhook(payment: Payment):
|
|
"""
|
|
Dispatches the webhook to the webhook url.
|
|
"""
|
|
logger.debug("sending webhook", payment.webhook)
|
|
|
|
if not payment.webhook:
|
|
return await mark_webhook_sent(payment, -1)
|
|
|
|
headers = {"User-Agent": settings.user_agent}
|
|
async with httpx.AsyncClient(headers=headers) as client:
|
|
data = payment.dict()
|
|
try:
|
|
r = await client.post(payment.webhook, json=data, timeout=40)
|
|
await mark_webhook_sent(payment, r.status_code)
|
|
except (httpx.ConnectError, httpx.RequestError):
|
|
await mark_webhook_sent(payment, -1)
|
|
|
|
|
|
async def mark_webhook_sent(payment: Payment, status: int) -> None:
|
|
await db.execute(
|
|
"""
|
|
UPDATE apipayments SET webhook_status = ?
|
|
WHERE hash = ?
|
|
""",
|
|
(status, payment.payment_hash),
|
|
)
|
|
|
|
|
|
async def send_payment_push_notification(payment: Payment):
|
|
wallet = await get_wallet(payment.wallet_id)
|
|
|
|
if wallet:
|
|
subscriptions = await get_webpush_subscriptions_for_user(wallet.user)
|
|
|
|
amount = int(payment.amount / 1000)
|
|
|
|
title = f"LNbits: {wallet.name}"
|
|
body = f"You just received {amount} sat{'s'[:amount^1]}!"
|
|
|
|
if payment.memo:
|
|
body += f"\r\n{payment.memo}"
|
|
|
|
for subscription in subscriptions:
|
|
# todo: review permissions when user-id-only not allowed
|
|
# todo: replace all this logic with websockets?
|
|
url = (
|
|
f"https://{subscription.host}/wallet?usr={wallet.user}&wal={wallet.id}"
|
|
)
|
|
await send_push_notification(subscription, title, body, url)
|