I thought it was very sensitive, not sure if still the case. You could get full access to someones wallet and funds when you had his wallet ID. Since then some login, superuser and password functionality has been added, but I m not sure this locks wallets/funds.
Did more basic functional tests of lnbits thanks to nostr:npub18pudjhdhhp2v8gxnkttt00um729nv93tuepjda2jrwn3eua5tf5s80a699 pointing me in the right direction to some test instances
I'm curious.. what is the relevance of the wallet id? is it considered sensitive? or is that just exposed for clarity as to which wallet is being acted on?
#asknostr
Discussion
No replies yet.