btcpayserver / btcpayserver/app

You need to allow non-admins to use hotwallets for their stores (in /server/policies)

Open
#117 4 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
HTML
Stars
22
Forks
23
PR merge metrics
No merged PRs in 30d

Description

Sending on-chain funds from the app generated wallet requires for some reason hot wallets to be enabled on the server? Is there a reason for this?

![Screenshot 2024-11-28 at 12 22 35](https://github.com/user-attachments/assets/e6a17269-b21e-4c54-9653-97b486415100)

To replicate:

1. Deploy 2 apps and 1 server
2. Register 2 different app accounts `user 1` and `user 2`
3. Enable Cheat mode to fund `user 1 wallet`
4. Keypad pos in `User 2 app`, generate invoice
5. Pay invoice from `user 1 app` to `user 2 keypad`
6. See the error

Contributor guide

No contributing guide indexed for this repository

Research direction

Start in /server/policies and reproduce the two-app, one-server flow described in the issue, using the keypad POS invoice and the funded wallet. Trace the policy check that rejects the non-admin store account. Done means the non-admin account can pay the invoice from its app-generated wallet without requiring server-wide hotwallet access.

Written by the indexing model from the issue text.

Assessment

Tech stack
html
Domain
authorization, backend
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.