Withdraw links
:props="props" v-text="col.label" > -
type="text"
label="Link title *"
>
+
+
+
label="Webhook custom data (optional)"
hint="Custom data as JSON string, will get posted along with webhook 'body' field."
>
+
+
+
+
+
+ Enable public/shareable URL.
+ This will create a shareable URL that anyone can use to
+ withdraw from this link.
+
+
+
@@ -267,18 +297,17 @@
+ Use static withdraw QR codes
Use unique withdraw QR codes to reduce `assmilking`
+ >If enabled, the same withdraw QR code will be used for every
+ withdrawal with `wait_time` in between withdrawals. This makes
+ it prone for attackers to `assmilk` your withdraw link.
- This is recommended if you are sharing the links on social
- media or print QR codes.
@@ -398,49 +427,35 @@
-
+
- ID:
- Unique:
-
-
+
+ ID:
+ Static:
+
+
(QR code will change after each withdrawal)
- Max. withdrawable:
+ Max. withdrawable:
sat
- Wait time:
+ Wait time:
seconds
- Withdraws:
- /
-
+ Withdraws:
+ /
+
Copy LNURL
- Write to NFC
- {% for page in link %}
-
+
- {% for threes in page %}
-
- {% for one in threes %}
-
+
+
- {% endfor %}
- {% endfor %}
- {% endfor %}
{% endblock %} {% block styles %}
@@ -58,12 +51,38 @@
el: '#vue',
data() {
return {
- theurl: location.protocol + '//' + location.host,
- printDialog: {
- show: true,
- data: null
+ pages: [],
+ columns: 3,
+ rows: 4,
+ url: window.location.origin,
+ links: {{ links | tojson | safe }},
+ }
+ },
+ methods: {
+ preparePages() {
+ let tempPage = []
+ let tempRow = []
+ this.links.forEach((link, index) => {
+ tempRow.push(link)
+ if ((index + 1) % this.columns === 0) {
+ tempPage.push(tempRow)
+ tempRow = []
+ }
+ if ((index + 1) % (this.columns * this.rows) === 0) {
+ this.pages.push(tempPage)
+ tempPage = []
+ }
+ })
+ if (tempRow.length > 0) {
+ tempPage.push(tempRow)
+ }
+ if (tempPage.length > 0) {
+ this.pages.push(tempPage)
}
}
+ },
+ created() {
+ this.preparePages()
}
})
diff --git a/templates/withdraw/print_qr_custom.html b/templates/withdraw/print_qr_custom.html
deleted file mode 100644
index 8e34097..0000000
--- a/templates/withdraw/print_qr_custom.html
+++ /dev/null
@@ -1,111 +0,0 @@
-{% extends "print.html" %} {% block page %}
-
-
-
- {% for page in link %}
-
- {% for one in page %}
-
- 
- {{ amt }} sats
-
-
- {% endfor %}
-
-
-{% endblock %} {% block styles %}
-
-{% endblock %} {% block scripts %}
-
-{% endblock %}
diff --git a/views.py b/views.py
index ba48a5d..8879779 100644
--- a/views.py
+++ b/views.py
@@ -1,4 +1,5 @@
import io
+from datetime import datetime, timezone
from http import HTTPStatus
from fastapi import APIRouter, Depends, HTTPException, Request
@@ -6,9 +7,10 @@
from lnbits.core.models import User
from lnbits.decorators import check_user_exists
from lnbits.helpers import template_renderer
+from lnurl import Lnurl
+from pydantic import parse_obj_as
-from .crud import chunks, get_withdraw_link
-from .helpers import create_lnurl
+from .crud import get_withdraw_link
withdraw_ext_generic = APIRouter()
@@ -17,112 +19,99 @@ def withdraw_renderer():
return template_renderer(["withdraw/templates"])
-@withdraw_ext_generic.get("/", response_class=HTMLResponse)
-async def index(request: Request, user: User = Depends(check_user_exists)):
+@withdraw_ext_generic.get("/")
+async def index(
+ request: Request, user: User = Depends(check_user_exists)
+) -> HTMLResponse:
return withdraw_renderer().TemplateResponse(
"withdraw/index.html", {"request": request, "user": user.json()}
)
-@withdraw_ext_generic.get("/{link_id}", response_class=HTMLResponse)
-async def display(request: Request, link_id):
- link = await get_withdraw_link(link_id, 0)
+@withdraw_ext_generic.get("/{link_id}")
+async def display(request: Request, link_id: str) -> HTMLResponse:
+ link = await get_withdraw_link(link_id)
if not link:
raise HTTPException(
status_code=HTTPStatus.NOT_FOUND, detail="Withdraw link does not exist."
)
+ if link.is_public is False:
+ raise HTTPException(
+ status_code=HTTPStatus.FORBIDDEN, detail="Withdraw link is not public."
+ )
+
+ if (
+ not link.is_static
+ and link.open_time
+ and link.open_time > datetime.now(timezone.utc).timestamp()
+ ):
+ raise HTTPException(
+ status_code=HTTPStatus.FORBIDDEN,
+ detail="Withdraw link is not yet active.",
+ )
+
+ secret = link.secrets.next_secret
+ if not secret:
+ raise HTTPException(
+ status_code=HTTPStatus.BAD_REQUEST,
+ detail="Withdraw link is out of withdraws.",
+ )
+
return withdraw_renderer().TemplateResponse(
"withdraw/display.html",
{
"request": request,
- "spent": link.is_spent,
- "unique_hash": link.unique_hash,
+ "spent": link.secrets.is_spent or secret.used,
+ "id_or_k1": link.id if link.is_static else secret.k1,
},
)
-@withdraw_ext_generic.get("/print/{link_id}", response_class=HTMLResponse)
-async def print_qr(request: Request, link_id):
+@withdraw_ext_generic.get("/print/{link_id}")
+async def print_qr(
+ request: Request, link_id: str, user: User = Depends(check_user_exists)
+) -> HTMLResponse:
link = await get_withdraw_link(link_id)
if not link:
raise HTTPException(
status_code=HTTPStatus.NOT_FOUND, detail="Withdraw link does not exist."
)
-
- if link.uses == 0:
-
- return withdraw_renderer().TemplateResponse(
- "withdraw/print_qr.html",
- {"request": request, "link": link.json(), "unique": False},
+ if link.wallet not in user.wallet_ids:
+ raise HTTPException(
+ status_code=HTTPStatus.FORBIDDEN, detail="This is not your withdraw link."
)
links = []
- count = 0
-
- for _ in link.usescsv.split(","):
- linkk = await get_withdraw_link(link_id, count)
- if not linkk:
- raise HTTPException(
- status_code=HTTPStatus.NOT_FOUND, detail="Withdraw link does not exist."
- )
- try:
- lnurl = create_lnurl(linkk, request)
- except ValueError as exc:
- raise HTTPException(
- status_code=HTTPStatus.INTERNAL_SERVER_ERROR,
- detail=str(exc),
- ) from exc
+ for secret in link.secrets.items:
+ url = request.url_for("withdraw.lnurl", id_or_k1=secret.k1)
+ lnurl = parse_obj_as(Lnurl, str(url))
links.append(str(lnurl.bech32))
- count = count + 1
- page_link = list(chunks(links, 2))
- linked = list(chunks(page_link, 5))
-
- if link.custom_url:
- return withdraw_renderer().TemplateResponse(
- "withdraw/print_qr_custom.html",
- {
- "request": request,
- "link": page_link,
- "unique": True,
- "custom_url": link.custom_url,
- "amt": link.max_withdrawable,
- },
- )
return withdraw_renderer().TemplateResponse(
- "withdraw/print_qr.html", {"request": request, "link": linked, "unique": True}
+ "withdraw/print_qr.html", {"request": request, "links": links}
)
-@withdraw_ext_generic.get("/csv/{link_id}", response_class=HTMLResponse)
-async def csv(request: Request, link_id):
+@withdraw_ext_generic.get("/csv/{link_id}")
+async def csv(
+ req: Request, link_id: str, user: User = Depends(check_user_exists)
+) -> StreamingResponse:
link = await get_withdraw_link(link_id)
if not link:
raise HTTPException(
status_code=HTTPStatus.NOT_FOUND, detail="Withdraw link does not exist."
)
-
- if link.uses == 0:
+ if link.wallet not in user.wallet_ids:
raise HTTPException(
- status_code=HTTPStatus.BAD_REQUEST, detail="Withdraw is spent."
+ status_code=HTTPStatus.FORBIDDEN, detail="This is not your withdraw link."
)
buffer = io.StringIO()
count = 0
- for _ in link.usescsv.split(","):
- linkk = await get_withdraw_link(link_id, count)
- if not linkk:
- raise HTTPException(
- status_code=HTTPStatus.NOT_FOUND, detail="Withdraw link does not exist."
- )
- try:
- lnurl = create_lnurl(linkk, request)
- except ValueError as exc:
- raise HTTPException(
- status_code=HTTPStatus.INTERNAL_SERVER_ERROR,
- detail=str(exc),
- ) from exc
+ for secret in link.secrets.items:
+ url = req.url_for("withdraw.lnurl", id_or_k1=secret.k1)
+ lnurl = parse_obj_as(Lnurl, str(url))
buffer.write(f"{lnurl.bech32!s}\n")
count += 1
diff --git a/views_api.py b/views_api.py
index f93d8f1..82b9f9c 100644
--- a/views_api.py
+++ b/views_api.py
@@ -1,27 +1,25 @@
-import json
from http import HTTPStatus
from fastapi import APIRouter, Depends, HTTPException, Query
from lnbits.core.crud import get_user
from lnbits.core.models import SimpleStatus, WalletTypeInfo
-from lnbits.decorators import require_admin_key, require_invoice_key
+from lnbits.decorators import require_admin_key
from .crud import (
create_withdraw_link,
delete_withdraw_link,
- get_hash_check,
get_withdraw_link,
get_withdraw_links,
update_withdraw_link,
)
-from .models import CreateWithdrawData, HashCheck, PaginatedWithdraws, WithdrawLink
+from .models import CreateWithdrawData, PaginatedWithdraws, WithdrawLink
withdraw_ext_api = APIRouter(prefix="/api/v1")
-@withdraw_ext_api.get("/links", status_code=HTTPStatus.OK)
+@withdraw_ext_api.get("/links")
async def api_links(
- key_info: WalletTypeInfo = Depends(require_invoice_key),
+ key_info: WalletTypeInfo = Depends(require_admin_key),
all_wallets: bool = Query(False),
offset: int = Query(0),
limit: int = Query(0),
@@ -35,11 +33,11 @@ async def api_links(
return await get_withdraw_links(wallet_ids, limit, offset)
-@withdraw_ext_api.get("/links/{link_id}", status_code=HTTPStatus.OK)
+@withdraw_ext_api.get("/links/{link_id}")
async def api_link_retrieve(
- link_id: str, key_info: WalletTypeInfo = Depends(require_invoice_key)
+ link_id: str, key_info: WalletTypeInfo = Depends(require_admin_key)
) -> WithdrawLink:
- link = await get_withdraw_link(link_id, 0)
+ link = await get_withdraw_link(link_id)
if not link:
raise HTTPException(
@@ -54,85 +52,36 @@ async def api_link_retrieve(
@withdraw_ext_api.post("/links", status_code=HTTPStatus.CREATED)
-@withdraw_ext_api.put("/links/{link_id}")
-async def api_link_create_or_update(
+async def api_link_create(
data: CreateWithdrawData,
- link_id: str | None = None,
key_info: WalletTypeInfo = Depends(require_admin_key),
) -> WithdrawLink:
- if data.uses > 250:
- raise HTTPException(detail="250 uses max.", status_code=HTTPStatus.BAD_REQUEST)
+ link = await create_withdraw_link(data, key_info.wallet.id)
+ return link
- if data.min_withdrawable < 1:
+
+@withdraw_ext_api.put("/links/{link_id}")
+async def api_link_update(
+ link_id: str,
+ data: CreateWithdrawData,
+ key_info: WalletTypeInfo = Depends(require_admin_key),
+) -> WithdrawLink:
+ link = await get_withdraw_link(link_id)
+ if not link:
raise HTTPException(
- detail="Min must be more than 1.", status_code=HTTPStatus.BAD_REQUEST
+ detail="Withdraw link does not exist.", status_code=HTTPStatus.NOT_FOUND
)
-
- if data.max_withdrawable < data.min_withdrawable:
+ if link.wallet != key_info.wallet.id:
raise HTTPException(
- detail="`max_withdrawable` needs to be at least `min_withdrawable`.",
- status_code=HTTPStatus.BAD_REQUEST,
+ detail="Not your withdraw link.", status_code=HTTPStatus.FORBIDDEN
)
- if data.webhook_body:
- try:
- json.loads(data.webhook_body)
- except Exception as exc:
- raise HTTPException(
- detail="`webhook_body` can not parse JSON.",
- status_code=HTTPStatus.BAD_REQUEST,
- ) from exc
-
- if data.webhook_headers:
- try:
- json.loads(data.webhook_headers)
- except Exception as exc:
- raise HTTPException(
- detail="`webhook_headers` can not parse JSON.",
- status_code=HTTPStatus.BAD_REQUEST,
- ) from exc
-
- if link_id:
- link = await get_withdraw_link(link_id, 0)
- if not link:
- raise HTTPException(
- detail="Withdraw link does not exist.", status_code=HTTPStatus.NOT_FOUND
- )
- if link.wallet != key_info.wallet.id:
- raise HTTPException(
- detail="Not your withdraw link.", status_code=HTTPStatus.FORBIDDEN
- )
-
- if link.uses > data.uses:
- if data.uses - link.used <= 0:
- raise HTTPException(
- detail="Cannot reduce uses below current used.",
- status_code=HTTPStatus.BAD_REQUEST,
- )
- numbers = link.usescsv.split(",")
- link.usescsv = ",".join(numbers[: data.uses - link.used])
-
- if link.uses < data.uses:
- numbers = link.usescsv.split(",")
- if numbers[-1] == "":
- current_number = int(link.uses)
- numbers[-1] = str(link.uses)
- else:
- current_number = int(numbers[-1])
- while len(numbers) < (data.uses - link.used):
- current_number += 1
- numbers.append(str(current_number))
- link.usescsv = ",".join(numbers)
-
- for k, v in data.dict().items():
- if v is not None:
- setattr(link, k, v)
-
- link = await update_withdraw_link(link)
- else:
- link = await create_withdraw_link(wallet_id=key_info.wallet.id, data=data)
+ for k, v in data.dict().items():
+ if k == "uses":
+ continue
+ setattr(link, k, v)
- return link
+ return await update_withdraw_link(link)
@withdraw_ext_api.delete("/links/{link_id}")
@@ -153,13 +102,3 @@ async def api_link_delete(
await delete_withdraw_link(link_id)
return SimpleStatus(success=True, message="Withdraw link deleted.")
-
-
-@withdraw_ext_api.get(
- "/links/{the_hash}/{lnurl_id}",
- status_code=HTTPStatus.OK,
- dependencies=[Depends(require_invoice_key)],
-)
-async def api_hash_retrieve(the_hash, lnurl_id) -> HashCheck:
- hash_check = await get_hash_check(the_hash, lnurl_id)
- return hash_check
diff --git a/views_lnurl.py b/views_lnurl.py
index d62b21d..95afb92 100644
--- a/views_lnurl.py
+++ b/views_lnurl.py
@@ -2,14 +2,14 @@
from datetime import datetime
import httpx
-import shortuuid
from fastapi import APIRouter, Request
-from fastapi.responses import JSONResponse
from lnbits.core.crud import update_payment
from lnbits.core.models import Payment
from lnbits.core.services import pay_invoice
+from lnbits.exceptions import PaymentError
from lnurl import (
CallbackUrl,
+ InvalidLnurl,
LnurlErrorResponse,
LnurlSuccessResponse,
LnurlWithdrawResponse,
@@ -18,140 +18,104 @@
from loguru import logger
from pydantic import parse_obj_as
-from .crud import (
- create_hash_check,
- delete_hash_check,
- get_withdraw_link_by_hash,
- increment_withdraw_link,
- remove_unique_withdraw_link,
-)
+from .crud import get_withdraw_link, get_withdraw_link_by_k1, update_withdraw_link
from .models import WithdrawLink
withdraw_ext_lnurl = APIRouter(prefix="/api/v1/lnurl")
-@withdraw_ext_lnurl.get(
- "/{unique_hash}",
- response_class=JSONResponse,
- name="withdraw.api_lnurl_response",
-)
-async def api_lnurl_response(
- request: Request, unique_hash: str
-) -> LnurlWithdrawResponse | LnurlErrorResponse:
- link = await get_withdraw_link_by_hash(unique_hash)
-
- if not link:
- return LnurlErrorResponse(reason="Withdraw link does not exist.")
-
- if link.is_spent:
- return LnurlErrorResponse(reason="Withdraw is spent.")
-
- if link.is_unique:
- return LnurlErrorResponse(reason="This link requires an id_unique_hash.")
-
- url = str(
- request.url_for("withdraw.api_lnurl_callback", unique_hash=link.unique_hash)
- )
-
- callback_url = parse_obj_as(CallbackUrl, url)
- return LnurlWithdrawResponse(
- callback=callback_url,
- k1=link.k1,
- minWithdrawable=MilliSatoshi(link.min_withdrawable * 1000),
- maxWithdrawable=MilliSatoshi(link.max_withdrawable * 1000),
- defaultDescription=link.title,
- )
-
-
-@withdraw_ext_lnurl.get(
- "/cb/{unique_hash}",
- name="withdraw.api_lnurl_callback",
- summary="lnurl withdraw callback",
- description="""
- This endpoints allows you to put unique_hash, k1
- and a payment_request to get your payment_request paid.
- """,
- response_class=JSONResponse,
- response_description="JSON with status",
- responses={
- 200: {"description": "status: OK"},
- 400: {"description": "k1 is wrong or link open time or withdraw not working."},
- 404: {"description": "withdraw link not found."},
- 405: {"description": "withdraw link is spent."},
- },
-)
+# note important that this endpoint is defined before the dynamic /{id_or_k1} endpoint
+@withdraw_ext_lnurl.get("/cb", name="withdraw.lnurl_callback")
async def api_lnurl_callback(
- unique_hash: str,
- k1: str,
- pr: str,
- id_unique_hash: str | None = None,
+ k1: str, pr: str
) -> LnurlErrorResponse | LnurlSuccessResponse:
- link = await get_withdraw_link_by_hash(unique_hash)
+ link = await get_withdraw_link_by_k1(k1)
if not link:
- return LnurlErrorResponse(reason="withdraw link not found.")
-
- if link.is_spent:
- return LnurlErrorResponse(reason="withdraw is spent.")
+ return LnurlErrorResponse(reason="Invalid k1.")
- if link.k1 != k1:
- return LnurlErrorResponse(reason="k1 is wrong.")
+ secret = link.secrets.get_secret(k1)
+ if not secret:
+ return LnurlErrorResponse(reason="Invalid k1.")
- now = int(datetime.now().timestamp())
-
- if now < link.open_time:
- return LnurlErrorResponse(
- reason=f"wait link open_time {link.open_time - now} seconds."
- )
-
- if not id_unique_hash and link.is_unique:
- return LnurlErrorResponse(reason="id_unique_hash is required for this link.")
-
- if id_unique_hash:
- if check_unique_link(link, id_unique_hash):
- await remove_unique_withdraw_link(link, id_unique_hash)
- else:
- return LnurlErrorResponse(reason="id_unique_hash not found.")
+ if secret.used:
+ return LnurlErrorResponse(reason="Withdraw is spent.")
- # Create a record with the id_unique_hash or unique_hash, if it already exists,
- # raise an exception thus preventing the same LNURL from being processed twice.
- try:
- await create_hash_check(id_unique_hash or unique_hash, k1)
- except Exception:
- return LnurlErrorResponse(reason="LNURL already being processed.")
+ # IMPORTANT: update the link in the db before paying the invoice
+ # so that concurrent requests can't use the same secret
+ link.open_time = int(datetime.now().timestamp()) + link.wait_time
+ link.secrets.use_secret(k1)
+ await update_withdraw_link(link)
try:
payment = await pay_invoice(
wallet_id=link.wallet,
payment_request=pr,
max_sat=link.max_withdrawable,
- extra={"tag": "withdraw", "withdrawal_link_id": link.id},
+ extra={"tag": "withdraw", "withdraw_id": link.id},
)
- await increment_withdraw_link(link)
- # If the payment succeeds, delete the record with the unique_hash.
- # TODO: we delete this now: "If it has unique_hash, do not delete to prevent
- # the same LNURL from being processed twice."
- await delete_hash_check(id_unique_hash or unique_hash)
-
- if link.webhook_url:
- await dispatch_webhook(link, payment, pr)
- return LnurlSuccessResponse()
- except Exception as exc:
- # If payment fails, delete the hash stored so another attempt can be made.
- await delete_hash_check(id_unique_hash or unique_hash)
- return LnurlErrorResponse(reason=f"withdraw not working. {exc!s}")
-
-
-def check_unique_link(link: WithdrawLink, unique_hash: str) -> bool:
- return any(
- unique_hash == shortuuid.uuid(name=link.id + link.unique_hash + x.strip())
- for x in link.usescsv.split(",")
+ except PaymentError as exc:
+ return LnurlErrorResponse(reason=f"Payment error: {exc.message}")
+
+ if link.webhook_url:
+ await dispatch_webhook(link, payment, pr)
+
+ return LnurlSuccessResponse()
+
+
+@withdraw_ext_lnurl.get("/{id_or_k1}", name="withdraw.lnurl")
+async def api_lnurl_response(
+ request: Request, id_or_k1: str
+) -> LnurlWithdrawResponse | LnurlErrorResponse:
+ link = await get_withdraw_link(id_or_k1)
+
+ # static links are identified by their id
+ if link:
+ if not link.is_static:
+ return LnurlErrorResponse(
+ reason="Withdraw link is not static. Only use 'id' for static links."
+ )
+ secret = link.secrets.next_secret
+ if not secret:
+ return LnurlErrorResponse(reason="Withdraw is spent.")
+
+ now = int(datetime.now().timestamp())
+ if now < link.open_time:
+ return LnurlErrorResponse(
+ reason=f"wait link open_time {link.open_time - now} seconds."
+ )
+
+ # non-static links are identified by their k1
+ else:
+ link = await get_withdraw_link_by_k1(id_or_k1)
+ if not link:
+ return LnurlErrorResponse(reason="Withdraw link does not exist.")
+ secret = link.secrets.get_secret(id_or_k1)
+ if not secret:
+ return LnurlErrorResponse(reason="Invalid k1.")
+ if secret.used:
+ return LnurlErrorResponse(reason="Withdraw is spent.")
+
+ url = request.url_for("withdraw.lnurl_callback")
+ try:
+ callback_url = parse_obj_as(CallbackUrl, str(url))
+ except InvalidLnurl:
+ return LnurlErrorResponse(reason=f"Invalid callback URL. {url!s}")
+
+ return LnurlWithdrawResponse(
+ callback=callback_url,
+ k1=secret.k1,
+ minWithdrawable=MilliSatoshi(link.min_withdrawable * 1000),
+ maxWithdrawable=MilliSatoshi(link.max_withdrawable * 1000),
+ defaultDescription=link.title,
)
async def dispatch_webhook(
link: WithdrawLink, payment: Payment, payment_request: str
) -> None:
+ if not link.webhook_url:
+ return
async with httpx.AsyncClient() as client:
try:
r: httpx.Response = await client.post(
@@ -178,35 +142,3 @@ async def dispatch_webhook(
payment.extra["wh_success"] = False
payment.extra["wh_message"] = str(exc)
await update_payment(payment)
-
-
-# FOR LNURLs WHICH ARE UNIQUE
-@withdraw_ext_lnurl.get(
- "/{unique_hash}/{id_unique_hash}",
- response_class=JSONResponse,
- name="withdraw.api_lnurl_multi_response",
-)
-async def api_lnurl_multi_response(
- request: Request, unique_hash: str, id_unique_hash: str
-) -> LnurlWithdrawResponse | LnurlErrorResponse:
- link = await get_withdraw_link_by_hash(unique_hash)
-
- if not link:
- return LnurlErrorResponse(reason="Withdraw link does not exist.")
-
- if link.is_spent:
- return LnurlErrorResponse(reason="Withdraw is spent.")
-
- if not check_unique_link(link, id_unique_hash):
- return LnurlErrorResponse(reason="id_unique_hash not found for this link.")
-
- url = request.url_for("withdraw.api_lnurl_callback", unique_hash=link.unique_hash)
-
- callback_url = parse_obj_as(CallbackUrl, f"{url!s}?id_unique_hash={id_unique_hash}")
- return LnurlWithdrawResponse(
- callback=callback_url,
- k1=link.k1,
- minWithdrawable=MilliSatoshi(link.min_withdrawable * 1000),
- maxWithdrawable=MilliSatoshi(link.max_withdrawable * 1000),
- defaultDescription=link.title,
- )
+ Use static withdraw QR codes
Use unique withdraw QR codes to reduce `assmilking`
+ >If enabled, the same withdraw QR code will be used for every
+ withdrawal with `wait_time` in between withdrawals. This makes
+ it prone for attackers to `assmilk` your withdraw link.
- This is recommended if you are sharing the links on social
- media or print QR codes.
- ID:
+ ID:
- Unique:
-
-
+
+ Static:
+
+
(QR code will change after each withdrawal)
- Max. withdrawable:
+ Max. withdrawable:
sat
- Wait time:
+ Wait time:
seconds
- Withdraws:
- /
-
+ Withdraws:
+ /
+
- {% for threes in page %}
-
- {% for one in threes %}
-
+
+
- {% endfor %}
- {% endfor %}
- {{ amt }} sats
-