fix: use core LNURL-pay validation

Bitkit.xcodeproj/project.pbxproj

@@ -1201,7 +1201,7 @@
 			repositoryURL = "https://github.com/synonymdev/bitkit-core";
 			requirement = {
 				kind = exactVersion;
-				version = 0.1.64;
+				version = 0.1.74;
 			};
 		};
 		96E20CD22CB6D91A00C24149 /* XCRemoteSwiftPackageReference "CodeScanner" */ = {

Bitkit/Utilities/Lnurl.swift

@@ -1,13 +1,14 @@
 import BitkitCore
 import Foundation
 
-// MARK: - Response Models
-
-private struct LnurlPayResponse: Codable {
-    let pr: String
-    let routes: [String]
+struct LnurlPayInvoiceMismatchError: LocalizedError {
+    var errorDescription: String? {
+        return "The invoice did not match the requested payment. Payment cancelled."
+    }
 }
 
+// MARK: - Response Models
+
 private struct LnurlWithdrawResponse: Codable {
     let status: String
     let reason: String?
@@ -116,37 +117,42 @@ private extension LnurlHelper {
             throw NSError(domain: "LNURL", code: -1, userInfo: [NSLocalizedDescriptionKey: errorMessage])
         }
     }
+
+    static func mapLnurlPayInvoiceError(_ error: Error) -> Error {
+        if let lnurlError = error as? LnurlError {
+            switch lnurlError {
+            case .InvalidAmount, .AmountMismatch, .MetadataMismatch:
+                return LnurlPayInvoiceMismatchError()
+            default:
+                break
+            }
+        }
+
+        return error
+    }
 }
 
 @MainActor
 struct LnurlHelper {
-    /// Fetches a Lightning invoice from an LNURL pay callback
+    /// Fetches a Lightning invoice for an LNURL pay request
     /// - Parameters:
-    ///   - callbackUrl: The LNURL callback URL
+    ///   - data: The LNURL pay data
     ///   - amountMsats: The amount in millisatoshis to pay
     ///   - comment: Optional comment to include with the payment
     /// - Returns: The bolt11 invoice string
     /// - Throws: Network or parsing errors
     static func fetchLnurlInvoice(
-        callbackUrl: String,
+        data: LnurlPayData,
         amountMsats: UInt64,
         comment: String? = nil
     ) async throws -> String {
-        var queryItems = [
-            URLQueryItem(name: "amount", value: String(amountMsats)),
-        ]
-
-        // Add comment if provided
-        if let comment, !comment.isEmpty {
-            queryItems.append(URLQueryItem(name: "comment", value: comment))
+        do {
+            let invoice = try await getLnurlInvoiceForPayData(data: data, amountMsats: amountMsats, comment: comment)
+            Logger.debug("Fetched LNURL pay invoice")
+            return invoice
+        } catch {
+            throw mapLnurlPayInvoiceError(error)
         }
-
-        let callbackURL = try buildUrl(baseUrl: callbackUrl, queryItems: queryItems)
-        let responseString = try await makeHttpGetRequest(url: callbackURL)
-        let lnurlResponse = try parseJsonResponse(responseString, as: LnurlPayResponse.self)
-
-        Logger.debug("Extracted bolt11 invoice: \(lnurlResponse.pr)")
-        return lnurlResponse.pr
     }
 
     /// Handles LNURL Withdraw Requests

Bitkit/ViewModels/Trezor/TrezorViewModel.swift

@@ -951,6 +951,8 @@ class TrezorViewModel {
                 return "Invalid transaction ID: \(errorDetails)"
             case let .TransactionNotFound(errorDetails):
                 return "Transaction not found: \(errorDetails)"
+            case let .WatcherError(errorDetails):
+                return "Watcher error: \(errorDetails)"
             }
         }
         if let appError = error as? AppError,

Bitkit/Views/Wallets/Send/LnurlPayConfirm.swift

@@ -194,7 +194,7 @@ struct LnurlPayConfirm: View {
 
         // Fetch the Lightning invoice from LNURL
         let bolt11 = try await LnurlHelper.fetchLnurlInvoice(
-            callbackUrl: lnurlPayData.callback,
+            data: lnurlPayData,
             amountMsats: amountMsats,
             comment: comment.isEmpty ? nil : comment
         )

Bitkit/Views/Wallets/Send/SendQuickpay.swift

@@ -48,7 +48,7 @@ struct SendQuickpay: View {
             wallet.sendAmountSats = lnurlPayData.minSendableSat
 
             bolt11Invoice = try await LnurlHelper.fetchLnurlInvoice(
-                callbackUrl: lnurlPayData.callback,
+                data: lnurlPayData,
                 amountMsats: lnurlPayData.callbackAmountMsats()
             )
         } else if let scannedInvoice = app.scannedLightningInvoice {

changelog.d/hotfix/607.fixed.md

@@ -0,0 +1 @@
+Improved LNURL-pay invoice validation.