feat(admin): replace password login with NIP-98 HTTP auth - #671

Open

Justxd22 wants to merge 1 commit into

cameri:mainfrom

Justxd22:feat/nip98-admin-auth

GitHub Advanced Security / CodeQL failed Jul 8, 2026 in 1s

2 new alerts including 2 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

2 high

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 28 in src/routes/admin/index.ts

Code scanning / CodeQL

Missing rate limiting High

This route handler performs

, but is not rate-limited.

Check failure on line 40 in src/utils/nip98.ts

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This

that depends on

may run slow on strings starting with 'nostr ' and with many repetitions of ' '.