@spirobel/monero-wallet-api 0.3.12 → 0.3.13

package/dist/tools/monero-tools.d.ts

@@ -1,3 +1,4 @@
+import type { ScanSettingOpened } from "../api";
 export declare const TOOL_MAGIC_STRING = "monerochan";
 export declare function parseToolLink(link: string): MoneroTool | null;
 export type ToolInvocationValidity = "valid" | "invalid" | "unverified";
@@ -63,4 +64,4 @@ export type ShareViewkey002Pruned = {
     wallet_slot: number;
 };
 export declare function potentialSuccessRedirect002(payload: ShareViewkeyPayload): Promise<void>;
-export declare function handle002ShareRequest(req: Request, parsed_cb: (parsed_body: ShareViewkey002Pruned) => Promise<void>, successUrl?: string): Promise<ShareViewkeyResult>;
+export declare function handle002ShareRequest(req: Request, wallets: ScanSettingOpened[], parsed_cb: (parsed_body: ShareViewkey002Pruned) => Promise<void>, successUrl?: string): Promise<ShareViewkeyResult>;

package/dist/tools/monero-tools.js

@@ -223,7 +223,7 @@ export async function potentialSuccessRedirect002(payload) {
     }
 }
 // backend response
-export async function handle002ShareRequest(req, parsed_cb, successUrl) {
+export async function handle002ShareRequest(req, wallets, parsed_cb, successUrl) {
     try {
         const json_body = await req.json();
         const { viewkey, primary_address, wallet_slot } = json_body;
@@ -234,6 +234,15 @@ export async function handle002ShareRequest(req, parsed_cb, successUrl) {
             typeof wallet_slot !== "number") {
             return { ok: false, successUrl: null };
         }
+        const foundSlot = wallets.find((wallet) => wallet.wallet_slot === wallet_slot);
+        if (foundSlot) {
+            if (foundSlot.primary_address !== primary_address) {
+                return { ok: false, successUrl: null };
+            }
+            if (foundSlot.secret_view_key !== viewkey) {
+                return { ok: false, successUrl: null };
+            }
+        }
         await parsed_cb({ viewkey, primary_address, wallet_slot });
         return {
             ok: true,

package/package.json

@@ -40,7 +40,7 @@
     "clean": "rm -rf ./dist"
   },
   "files": ["dist"],
-  "version": "0.3.12",
+  "version": "0.3.13",
   "devDependencies": {
     "@types/bun": "latest"
   },