Greenfield: Add separate permission for viewing LN invoices (#4529)

Based on the diff by @ArttuPakarinen provided in #4523. Closes #4523.
This commit is contained in:
d11n
2023-01-16 13:42:54 +01:00
committed by GitHub
parent 068b717a75
commit 798553e96a
7 changed files with 18 additions and 9 deletions

View File

@@ -103,7 +103,7 @@ namespace BTCPayServer.Controllers.Greenfield
return base.PayInvoice(cryptoCode, lightningInvoice, cancellationToken);
}
[Authorize(Policy = Policies.CanUseLightningNodeInStore,
[Authorize(Policy = Policies.CanViewLightningInvoiceInStore,
AuthenticationSchemes = AuthenticationSchemes.Greenfield)]
[HttpGet("~/api/v1/stores/{storeId}/lightning/{cryptoCode}/invoices/{id}")]
public override Task<IActionResult> GetInvoice(string cryptoCode, string id, CancellationToken cancellationToken = default)
@@ -111,7 +111,7 @@ namespace BTCPayServer.Controllers.Greenfield
return base.GetInvoice(cryptoCode, id, cancellationToken);
}
[Authorize(Policy = Policies.CanUseLightningNodeInStore,
[Authorize(Policy = Policies.CanViewLightningInvoiceInStore,
AuthenticationSchemes = AuthenticationSchemes.Greenfield)]
[HttpGet("~/api/v1/stores/{storeId}/lightning/{cryptoCode}/invoices")]
public override Task<IActionResult> GetInvoices(string cryptoCode, [FromQuery] bool? pendingOnly, [FromQuery] long? offsetIndex, CancellationToken cancellationToken = default)