mirror of
https://github.com/Routstr/routstr-core.git
synced 2026-08-09 19:04:47 +00:00
- Add 'Investigate Logs' button with modal for request ID input
- Implement /admin/logs/{request_id} endpoint for log viewing
- Parse and display JSON log entries with formatting
- Search through last 7 days of log files
- Add modern minimal CSS design system
- Improve typography with system font stack
- Add card layouts, shadows, and rounded corners
- Implement smooth transitions and hover effects
- Add emoji icons for visual interest
- Rename 'User's API Keys' to 'Temporary Balances'
576 lines
25 KiB
Python
576 lines
25 KiB
Python
import json
|
|
import os
|
|
from datetime import datetime, timezone
|
|
from pathlib import Path
|
|
|
|
from fastapi import APIRouter, HTTPException, Request
|
|
from fastapi.responses import HTMLResponse
|
|
from pydantic import BaseModel
|
|
from sqlmodel import select
|
|
|
|
from ..wallet import get_balance, send_token
|
|
from .db import ApiKey, create_session
|
|
from .logging import get_logger
|
|
|
|
logger = get_logger(__name__)
|
|
|
|
admin_router = APIRouter(prefix="/admin", include_in_schema=False)
|
|
|
|
|
|
class WithdrawRequest(BaseModel):
|
|
amount: int
|
|
|
|
|
|
def login_form() -> str:
|
|
return """<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<style>
|
|
* { margin: 0; padding: 0; box-sizing: border-box; }
|
|
body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif; display: flex; justify-content: center; align-items: center; height: 100vh; background: #f5f7fa; }
|
|
.login-card { background: white; padding: 2.5rem; border-radius: 12px; box-shadow: 0 10px 25px rgba(0,0,0,0.1); width: 320px; }
|
|
h2 { margin-bottom: 1.5rem; color: #1a202c; text-align: center; }
|
|
input[type="password"] { width: 100%; padding: 12px; border: 2px solid #e2e8f0; border-radius: 6px; font-size: 16px; transition: border 0.2s; }
|
|
input[type="password"]:focus { outline: none; border-color: #4299e1; }
|
|
button { width: 100%; padding: 12px; margin-top: 1rem; background: #4299e1; color: white; border: none; border-radius: 6px; font-size: 16px; font-weight: 600; cursor: pointer; transition: all 0.2s; }
|
|
button:hover { background: #3182ce; transform: translateY(-1px); box-shadow: 0 4px 6px rgba(0,0,0,0.1); }
|
|
</style>
|
|
<script>
|
|
function handleSubmit(e) {
|
|
e.preventDefault();
|
|
const password = document.getElementById('password').value;
|
|
document.cookie = `admin_password=${password}; path=/; max-age=86400`;
|
|
window.location.reload();
|
|
}
|
|
</script>
|
|
</head>
|
|
<body>
|
|
<div class="login-card">
|
|
<h2>🔐 Admin Login</h2>
|
|
<form onsubmit="handleSubmit(event)">
|
|
<input type="password" id="password" placeholder="Admin Password" required autofocus>
|
|
<button type="submit">Login</button>
|
|
</form>
|
|
</div>
|
|
</body>
|
|
</html>
|
|
"""
|
|
|
|
|
|
def info(content: str) -> str:
|
|
return f"""<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<style>
|
|
* {{ margin: 0; padding: 0; box-sizing: border-box; }}
|
|
body {{ font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif; display: flex; justify-content: center; align-items: center; height: 100vh; background: #f5f7fa; }}
|
|
.info-card {{ background: white; padding: 2.5rem; border-radius: 12px; box-shadow: 0 10px 25px rgba(0,0,0,0.1); max-width: 500px; text-align: center; }}
|
|
.info-card p {{ color: #4a5568; font-size: 1.1rem; }}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<div class="info-card">
|
|
<p>{content}</p>
|
|
</div>
|
|
</body>
|
|
</html>
|
|
"""
|
|
|
|
|
|
def admin_auth() -> str:
|
|
if os.getenv("ADMIN_PASSWORD", "") == "":
|
|
return info("Please set a secure ADMIN_PASSWORD= in your ENV variables.")
|
|
else:
|
|
return login_form()
|
|
|
|
|
|
async def dashboard(request: Request) -> str:
|
|
# fetch cashu / api-key data from database
|
|
async with create_session() as session:
|
|
result = await session.exec(select(ApiKey))
|
|
api_keys = result.all()
|
|
|
|
api_keys_table_rows = []
|
|
for key in api_keys:
|
|
expiry_time_utc = (
|
|
datetime.fromtimestamp(key.key_expiry_time, tz=timezone.utc)
|
|
if key.key_expiry_time is not None
|
|
else None
|
|
)
|
|
expiry_time_human_readable = (
|
|
expiry_time_utc.strftime("%Y-%m-%d %H:%M:%S") if expiry_time_utc else ""
|
|
)
|
|
|
|
api_keys_table_rows.append(
|
|
f"<tr><td>{key.hashed_key}</td><td>{key.balance}</td><td>{key.total_spent}</td><td>{key.total_requests}</td><td>{key.refund_address}</td><td>{'{} ({} UTC)'.format(key.key_expiry_time, expiry_time_human_readable) if key.key_expiry_time else key.key_expiry_time}</td></tr>"
|
|
)
|
|
|
|
# Calculate the total balance of all API keys using integer arithmetic to
|
|
# avoid rounding issues.
|
|
total_user_balance = sum(key.balance for key in api_keys) // 1000
|
|
# Fetch balance from cashu
|
|
current_balance = await get_balance("sat")
|
|
owner_balance = current_balance - total_user_balance
|
|
|
|
return f"""<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<style>
|
|
* {{ margin: 0; padding: 0; box-sizing: border-box; }}
|
|
body {{ font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif; background: #f5f7fa; color: #2c3e50; line-height: 1.6; padding: 2rem; }}
|
|
h1, h2 {{ margin-bottom: 1rem; color: #1a202c; }}
|
|
h1 {{ font-size: 2rem; }}
|
|
h2 {{ font-size: 1.5rem; margin-top: 2rem; }}
|
|
p {{ margin-bottom: 0.5rem; color: #4a5568; }}
|
|
table {{ width: 100%; border-collapse: collapse; background: white; border-radius: 8px; overflow: hidden; box-shadow: 0 1px 3px rgba(0,0,0,0.1); margin-top: 1rem; }}
|
|
th {{ background: #4a5568; color: white; font-weight: 600; padding: 12px; text-align: left; }}
|
|
td {{ padding: 12px; border-bottom: 1px solid #e2e8f0; }}
|
|
tr:hover {{ background: #f7fafc; }}
|
|
button {{ padding: 10px 20px; cursor: pointer; background: #4299e1; color: white; border: none; border-radius: 6px; font-weight: 600; margin-right: 10px; transition: all 0.2s; }}
|
|
button:hover {{ background: #3182ce; transform: translateY(-1px); box-shadow: 0 2px 4px rgba(0,0,0,0.1); }}
|
|
button:disabled {{ background: #a0aec0; cursor: not-allowed; transform: none; }}
|
|
.refresh-btn {{ background: #48bb78; }}
|
|
.refresh-btn:hover {{ background: #38a169; }}
|
|
.investigate-btn {{ background: #4299e1; }}
|
|
.balance-card {{ background: white; padding: 2rem; border-radius: 8px; box-shadow: 0 1px 3px rgba(0,0,0,0.1); margin-bottom: 2rem; }}
|
|
.balance-item {{ display: flex; justify-content: space-between; margin-bottom: 1rem; }}
|
|
.balance-label {{ color: #718096; }}
|
|
.balance-value {{ font-size: 1.5rem; font-weight: 700; color: #2d3748; }}
|
|
.balance-primary {{ color: #48bb78; }}
|
|
#token-result {{ margin-top: 20px; padding: 20px; background: #e6fffa; border: 1px solid #38b2ac; border-radius: 8px; display: none; }}
|
|
#token-text {{ font-family: 'Monaco', monospace; font-size: 13px; background: #2d3748; color: #68d391; padding: 15px; border-radius: 6px; margin: 10px 0; word-break: break-all; }}
|
|
.copy-btn {{ background: #38a169; padding: 6px 12px; font-size: 14px; }}
|
|
.copy-btn:hover {{ background: #2f855a; }}
|
|
.modal {{ display: none; position: fixed; z-index: 1000; left: 0; top: 0; width: 100%; height: 100%; background: rgba(0,0,0,0.5); backdrop-filter: blur(4px); }}
|
|
.modal-content {{ background: white; margin: 10% auto; padding: 2rem; width: 90%; max-width: 400px; border-radius: 12px; box-shadow: 0 20px 25px -5px rgba(0,0,0,0.1); animation: slideIn 0.3s ease; }}
|
|
@keyframes slideIn {{ from {{ transform: translateY(-20px); opacity: 0; }} to {{ transform: translateY(0); opacity: 1; }} }}
|
|
.close {{ color: #a0aec0; float: right; font-size: 28px; font-weight: bold; cursor: pointer; margin: -10px -10px 0 0; }}
|
|
.close:hover {{ color: #2d3748; }}
|
|
input[type="number"], input[type="text"] {{ width: 100%; padding: 10px; margin: 10px 0; border: 2px solid #e2e8f0; border-radius: 6px; font-size: 16px; transition: border 0.2s; }}
|
|
input[type="number"]:focus, input[type="text"]:focus {{ outline: none; border-color: #4299e1; }}
|
|
.warning {{ color: #e53e3e; font-weight: 600; margin: 10px 0; padding: 10px; background: #fff5f5; border-radius: 6px; }}
|
|
</style>
|
|
<script>
|
|
function openWithdrawModal() {{
|
|
const modal = document.getElementById('withdraw-modal');
|
|
const amountInput = document.getElementById('withdraw-amount');
|
|
amountInput.value = {owner_balance};
|
|
modal.style.display = 'block';
|
|
}}
|
|
|
|
function closeWithdrawModal() {{
|
|
const modal = document.getElementById('withdraw-modal');
|
|
modal.style.display = 'none';
|
|
}}
|
|
|
|
function checkAmount() {{
|
|
const amount = parseInt(document.getElementById('withdraw-amount').value);
|
|
const warning = document.getElementById('withdraw-warning');
|
|
const ownerBalance = {owner_balance};
|
|
|
|
if (amount > ownerBalance && amount <= {current_balance}) {{
|
|
warning.style.display = 'block';
|
|
}} else {{
|
|
warning.style.display = 'none';
|
|
}}
|
|
}}
|
|
|
|
async function performWithdraw() {{
|
|
const amount = parseInt(document.getElementById('withdraw-amount').value);
|
|
const button = document.getElementById('confirm-withdraw-btn');
|
|
const tokenResult = document.getElementById('token-result');
|
|
|
|
if (!amount || amount <= 0) {{
|
|
alert('Please enter a valid amount');
|
|
return;
|
|
}}
|
|
|
|
if (amount > {current_balance}) {{
|
|
alert('Amount exceeds wallet balance');
|
|
return;
|
|
}}
|
|
|
|
button.disabled = true;
|
|
button.textContent = 'Withdrawing...';
|
|
|
|
try {{
|
|
const response = await fetch('/admin/withdraw', {{
|
|
method: 'POST',
|
|
headers: {{
|
|
'Content-Type': 'application/json',
|
|
}},
|
|
credentials: 'same-origin',
|
|
body: JSON.stringify({{ amount: amount }})
|
|
}});
|
|
|
|
if (response.ok) {{
|
|
const data = await response.json();
|
|
document.getElementById('token-text').textContent = data.token;
|
|
tokenResult.style.display = 'block';
|
|
closeWithdrawModal();
|
|
}} else {{
|
|
const errorData = await response.json();
|
|
alert('Failed to withdraw balance: ' + (errorData.detail || 'Unknown error'));
|
|
}}
|
|
}} catch (error) {{
|
|
alert('Error: ' + error.message);
|
|
}} finally {{
|
|
button.disabled = false;
|
|
button.textContent = 'Withdraw';
|
|
}}
|
|
}}
|
|
|
|
function copyToken() {{
|
|
const tokenText = document.getElementById('token-text');
|
|
navigator.clipboard.writeText(tokenText.textContent).then(() => {{
|
|
const copyBtn = document.getElementById('copy-btn');
|
|
const originalText = copyBtn.textContent;
|
|
copyBtn.textContent = 'Copied!';
|
|
setTimeout(() => {{
|
|
copyBtn.textContent = originalText;
|
|
}}, 2000);
|
|
}}).catch(err => {{
|
|
alert('Failed to copy token');
|
|
}});
|
|
}}
|
|
|
|
function refreshPage() {{
|
|
window.location.reload();
|
|
}}
|
|
|
|
function openInvestigateModal() {{
|
|
const modal = document.getElementById('investigate-modal');
|
|
modal.style.display = 'block';
|
|
}}
|
|
|
|
function closeInvestigateModal() {{
|
|
const modal = document.getElementById('investigate-modal');
|
|
modal.style.display = 'none';
|
|
}}
|
|
|
|
function investigateLogs() {{
|
|
const requestId = document.getElementById('request-id').value.trim();
|
|
if (!requestId) {{
|
|
alert('Please enter a Request ID');
|
|
return;
|
|
}}
|
|
window.location.href = `/admin/logs/${{requestId}}`;
|
|
}}
|
|
|
|
window.onclick = function(event) {{
|
|
const withdrawModal = document.getElementById('withdraw-modal');
|
|
const investigateModal = document.getElementById('investigate-modal');
|
|
if (event.target == withdrawModal) {{
|
|
closeWithdrawModal();
|
|
}} else if (event.target == investigateModal) {{
|
|
closeInvestigateModal();
|
|
}}
|
|
}}
|
|
</script>
|
|
</head>
|
|
<body>
|
|
<h1>Admin Dashboard</h1>
|
|
|
|
<div class="balance-card">
|
|
<h2>Cashu Wallet Balance</h2>
|
|
<div class="balance-item">
|
|
<span class="balance-label">Your Balance</span>
|
|
<span class="balance-value balance-primary">{owner_balance} sats</span>
|
|
</div>
|
|
<div class="balance-item">
|
|
<span class="balance-label">Total Wallet</span>
|
|
<span class="balance-value">{current_balance} sats</span>
|
|
</div>
|
|
<div class="balance-item">
|
|
<span class="balance-label">User Balance</span>
|
|
<span class="balance-value">{total_user_balance} sats</span>
|
|
</div>
|
|
<p style="margin-top: 1rem; font-size: 0.9rem; color: #718096;">Your balance = Total wallet - User balance</p>
|
|
</div>
|
|
|
|
<button id="withdraw-btn" onclick="openWithdrawModal()" {"disabled" if current_balance <= 0 else ""}>
|
|
💸 Withdraw Balance
|
|
</button>
|
|
<button class="refresh-btn" onclick="refreshPage()">
|
|
🔄 Refresh
|
|
</button>
|
|
<button class="investigate-btn" onclick="openInvestigateModal()">
|
|
🔍 Investigate Logs
|
|
</button>
|
|
|
|
<div id="withdraw-modal" class="modal">
|
|
<div class="modal-content">
|
|
<span class="close" onclick="closeWithdrawModal()">×</span>
|
|
<h3>Withdraw Balance</h3>
|
|
<p>Enter amount to withdraw (sats):</p>
|
|
<input type="number" id="withdraw-amount" min="1" max="{current_balance}" placeholder="Amount in sats" oninput="checkAmount()">
|
|
<p>Maximum: {current_balance} sats</p>
|
|
<p>Your recommended balance: {owner_balance} sats</p>
|
|
<div id="withdraw-warning" class="warning" style="display: none;">
|
|
⚠️ Warning: Withdrawing more than your balance will use user funds!
|
|
</div>
|
|
<button id="confirm-withdraw-btn" onclick="performWithdraw()">💸 Withdraw</button>
|
|
<button onclick="closeWithdrawModal()" style="background-color: #718096;">Cancel</button>
|
|
</div>
|
|
</div>
|
|
|
|
<div id="investigate-modal" class="modal">
|
|
<div class="modal-content">
|
|
<span class="close" onclick="closeInvestigateModal()">×</span>
|
|
<h3>Investigate Logs</h3>
|
|
<p>Enter Request ID to investigate:</p>
|
|
<input type="text" id="request-id" placeholder="e.g., 123e4567-e89b-12d3-a456-426614174000" style="width: 100%; padding: 8px; margin: 10px 0; border: 1px solid #ddd; border-radius: 4px;">
|
|
<button onclick="investigateLogs()">🔍 Investigate</button>
|
|
<button onclick="closeInvestigateModal()" style="background-color: #718096;">Cancel</button>
|
|
</div>
|
|
</div>
|
|
|
|
<div id="token-result">
|
|
<strong>Withdrawal Token:</strong>
|
|
<div id="token-text"></div>
|
|
<button id="copy-btn" class="copy-btn" onclick="copyToken()">Copy Token</button>
|
|
<p><em>Save this token! It represents your withdrawn balance.</em></p>
|
|
</div>
|
|
|
|
<h2>Temporary Balances</h2>
|
|
<table>
|
|
<tr>
|
|
<th>Hashed Key</th>
|
|
<th>Balance (mSats)</th>
|
|
<th>Total Spent (mSats)</th>
|
|
<th>Total Requests</th>
|
|
<th>Refund Address</th>
|
|
<th>Refund Time</th>
|
|
</tr>
|
|
{"".join(api_keys_table_rows)}
|
|
</table>
|
|
</body>
|
|
</html>
|
|
"""
|
|
|
|
|
|
@admin_router.get("/", response_class=HTMLResponse)
|
|
async def admin(request: Request) -> str:
|
|
admin_cookie = request.cookies.get("admin_password")
|
|
if admin_cookie and admin_cookie == os.getenv("ADMIN_PASSWORD"):
|
|
return await dashboard(request)
|
|
return admin_auth()
|
|
|
|
|
|
@admin_router.get("/logs/{request_id}", response_class=HTMLResponse)
|
|
async def view_logs(request: Request, request_id: str) -> str:
|
|
admin_cookie = request.cookies.get("admin_password")
|
|
if not admin_cookie or admin_cookie != os.getenv("ADMIN_PASSWORD"):
|
|
return admin_auth()
|
|
|
|
logger.info(f"Investigating logs for request_id: {request_id}")
|
|
|
|
# Search for log entries with this request_id
|
|
log_entries = []
|
|
logs_dir = Path("logs")
|
|
|
|
if logs_dir.exists():
|
|
# Get all log files sorted by modification time (most recent first)
|
|
log_files = sorted(
|
|
logs_dir.glob("*.log"), key=lambda x: x.stat().st_mtime, reverse=True
|
|
)
|
|
|
|
for log_file in log_files[:7]: # Check last 7 days of logs
|
|
try:
|
|
with open(log_file, "r") as f:
|
|
for line in f:
|
|
if request_id in line:
|
|
try:
|
|
# Parse JSON log entry
|
|
log_data = json.loads(line.strip())
|
|
log_entries.append(log_data)
|
|
except json.JSONDecodeError:
|
|
# If not JSON, include raw line
|
|
log_entries.append({"raw": line.strip()})
|
|
except Exception as e:
|
|
logger.error(f"Error reading log file {log_file}: {e}")
|
|
|
|
# Sort entries by timestamp if available
|
|
log_entries.sort(key=lambda x: x.get("asctime", ""), reverse=False)
|
|
|
|
# Format log entries for display
|
|
formatted_logs = []
|
|
for entry in log_entries:
|
|
if "raw" in entry:
|
|
formatted_logs.append(f'<div class="log-entry">{entry["raw"]}</div>')
|
|
else:
|
|
# Format JSON log entry
|
|
timestamp = entry.get("asctime", "Unknown time")
|
|
level = entry.get("levelname", "INFO")
|
|
message = entry.get("message", "")
|
|
pathname = entry.get("pathname", "")
|
|
lineno = entry.get("lineno", "")
|
|
|
|
# Extract additional fields
|
|
extra_fields = {
|
|
k: v
|
|
for k, v in entry.items()
|
|
if k
|
|
not in [
|
|
"asctime",
|
|
"levelname",
|
|
"message",
|
|
"pathname",
|
|
"lineno",
|
|
"name",
|
|
"version",
|
|
"request_id",
|
|
]
|
|
}
|
|
|
|
level_class = level.lower()
|
|
formatted_entry = f"""
|
|
<div class="log-entry log-{level_class}">
|
|
<div class="log-header">
|
|
<span class="log-timestamp">{timestamp}</span>
|
|
<span class="log-level">[{level}]</span>
|
|
<span class="log-location">{pathname}:{lineno}</span>
|
|
</div>
|
|
<div class="log-message">{message}</div>
|
|
"""
|
|
|
|
if extra_fields:
|
|
formatted_entry += '<div class="log-extra">'
|
|
for key, value in extra_fields.items():
|
|
formatted_entry += f'<div class="log-field"><strong>{key}:</strong> {json.dumps(value) if isinstance(value, (dict, list)) else value}</div>'
|
|
formatted_entry += "</div>"
|
|
|
|
formatted_entry += "</div>"
|
|
formatted_logs.append(formatted_entry)
|
|
|
|
return f"""<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<style>
|
|
body {{
|
|
font-family: Arial, sans-serif;
|
|
margin: 20px;
|
|
background-color: #f5f5f5;
|
|
}}
|
|
h1 {{
|
|
color: #333;
|
|
}}
|
|
.back-btn {{
|
|
padding: 8px 16px;
|
|
background-color: #007bff;
|
|
color: white;
|
|
border: none;
|
|
border-radius: 4px;
|
|
cursor: pointer;
|
|
text-decoration: none;
|
|
display: inline-block;
|
|
margin-bottom: 20px;
|
|
}}
|
|
.back-btn:hover {{
|
|
background-color: #0056b3;
|
|
}}
|
|
.log-container {{
|
|
background-color: white;
|
|
border: 1px solid #ddd;
|
|
border-radius: 8px;
|
|
padding: 20px;
|
|
max-height: 80vh;
|
|
overflow-y: auto;
|
|
}}
|
|
.log-entry {{
|
|
margin-bottom: 15px;
|
|
padding: 10px;
|
|
border: 1px solid #e0e0e0;
|
|
border-radius: 4px;
|
|
font-family: 'Courier New', monospace;
|
|
font-size: 12px;
|
|
background-color: #f9f9f9;
|
|
}}
|
|
.log-entry.log-error {{
|
|
background-color: #fee;
|
|
border-color: #fcc;
|
|
}}
|
|
.log-entry.log-warning {{
|
|
background-color: #ffc;
|
|
border-color: #ff9;
|
|
}}
|
|
.log-entry.log-debug, .log-entry.log-trace {{
|
|
background-color: #f0f0f0;
|
|
border-color: #ccc;
|
|
}}
|
|
.log-header {{
|
|
margin-bottom: 5px;
|
|
color: #666;
|
|
}}
|
|
.log-timestamp {{
|
|
color: #0066cc;
|
|
}}
|
|
.log-level {{
|
|
font-weight: bold;
|
|
}}
|
|
.log-message {{
|
|
margin: 5px 0;
|
|
color: #333;
|
|
}}
|
|
.log-extra {{
|
|
margin-top: 5px;
|
|
padding-top: 5px;
|
|
border-top: 1px solid #e0e0e0;
|
|
}}
|
|
.log-field {{
|
|
margin: 2px 0;
|
|
color: #666;
|
|
word-break: break-all;
|
|
}}
|
|
.no-logs {{
|
|
text-align: center;
|
|
color: #666;
|
|
padding: 40px;
|
|
}}
|
|
.request-id-display {{
|
|
background-color: #e9ecef;
|
|
padding: 10px;
|
|
border-radius: 4px;
|
|
margin-bottom: 20px;
|
|
font-family: monospace;
|
|
}}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<a href="/admin" class="back-btn">← Back to Dashboard</a>
|
|
<h1>Log Investigation</h1>
|
|
<div class="request-id-display">
|
|
<strong>Request ID:</strong> {request_id}
|
|
</div>
|
|
<div class="log-container">
|
|
{"".join(formatted_logs) if formatted_logs else '<div class="no-logs">No log entries found for this Request ID</div>'}
|
|
</div>
|
|
<p style="color: #666; margin-top: 20px;">
|
|
Found {len(log_entries)} log entries • Searched last 7 days of logs
|
|
</p>
|
|
</body>
|
|
</html>
|
|
"""
|
|
|
|
|
|
@admin_router.post("/withdraw")
|
|
async def withdraw(
|
|
request: Request, withdraw_request: WithdrawRequest
|
|
) -> dict[str, str]:
|
|
admin_cookie = request.cookies.get("admin_password")
|
|
if not admin_cookie or admin_cookie != os.getenv("ADMIN_PASSWORD"):
|
|
raise HTTPException(status_code=403, detail="Unauthorized")
|
|
|
|
current_balance = await get_balance("sat")
|
|
|
|
if withdraw_request.amount <= 0:
|
|
raise HTTPException(
|
|
status_code=400, detail="Withdrawal amount must be positive"
|
|
)
|
|
|
|
if withdraw_request.amount > current_balance:
|
|
raise HTTPException(status_code=400, detail="Insufficient wallet balance")
|
|
|
|
token = await send_token(withdraw_request.amount, "sat")
|
|
return {"token": token}
|