@spirobel/monero-wallet-api 0.3.11 → 0.3.13

package/dist/tools/monero-tools.d.ts

@@ -1,3 +1,4 @@
+import type { ScanSettingOpened } from "../api";
 export declare const TOOL_MAGIC_STRING = "monerochan";
 export declare function parseToolLink(link: string): MoneroTool | null;
 export type ToolInvocationValidity = "valid" | "invalid" | "unverified";
@@ -60,7 +61,7 @@ export declare function shareViewKey002(payload: ShareViewkeyPayload): Promise<S
 export type ShareViewkey002Pruned = {
     viewkey: string;
     primary_address: string;
-    wallet_slot: string;
+    wallet_slot: number;
 };
 export declare function potentialSuccessRedirect002(payload: ShareViewkeyPayload): Promise<void>;
-export declare function handle002ShareRequest(req: Request, parsed_cb: (parsed_body: ShareViewkey002Pruned) => Promise<void>, successUrl?: string): Promise<ShareViewkeyResult>;
+export declare function handle002ShareRequest(req: Request, wallets: ScanSettingOpened[], parsed_cb: (parsed_body: ShareViewkey002Pruned) => Promise<void>, successUrl?: string): Promise<ShareViewkeyResult>;

package/dist/tools/monero-tools.js

@@ -223,19 +223,26 @@ export async function potentialSuccessRedirect002(payload) {
     }
 }
 // backend response
-export async function handle002ShareRequest(req, parsed_cb, successUrl) {
+export async function handle002ShareRequest(req, wallets, parsed_cb, successUrl) {
     try {
         const json_body = await req.json();
         const { viewkey, primary_address, wallet_slot } = json_body;
-        if (Number.isNaN(parseInt(wallet_slot))) {
-            return { ok: false, successUrl: null };
-        }
         if (typeof viewkey !== "string" ||
             viewkey.trim().length === 0 ||
             typeof primary_address !== "string" ||
-            primary_address.trim().length === 0) {
+            primary_address.trim().length === 0 ||
+            typeof wallet_slot !== "number") {
             return { ok: false, successUrl: null };
         }
+        const foundSlot = wallets.find((wallet) => wallet.wallet_slot === wallet_slot);
+        if (foundSlot) {
+            if (foundSlot.primary_address !== primary_address) {
+                return { ok: false, successUrl: null };
+            }
+            if (foundSlot.secret_view_key !== viewkey) {
+                return { ok: false, successUrl: null };
+            }
+        }
         await parsed_cb({ viewkey, primary_address, wallet_slot });
         return {
             ok: true,

package/package.json

@@ -40,7 +40,7 @@
     "clean": "rm -rf ./dist"
   },
   "files": ["dist"],
-  "version": "0.3.11",
+  "version": "0.3.13",
   "devDependencies": {
     "@types/bun": "latest"
   },