Set NWC URI in data-nwc

* if a request has no session cookie, a new user, session and wallet is created and session cookie is set
* if a request has a session cookie and session exists in db, we will fetch user and wallet from db
* this means that we have a user and wallet during each render without any login required

.env.sample

@@ -0,0 +1,7 @@
+PORT=4321
+DATABASE_URL=postgres://magicwallet:magicwallet@localhost:5432/magicwallet?sslmode=disable
+LND_ADDRESS=localhost:10001
+LND_CERT=
+LND_MACAROON=
+LND_NETWORK=regtest
+

Makefile

@@ -6,13 +6,13 @@ SOURCE := $(shell find fonts lib pages server -type f) main.go
 build: magicwallet
 magicwallet: $(SOURCE)
 	tailwindcss -i public/css/base.css -o public/css/tailwind.css
-	templ generate -path pages
+	TEMPL_EXPERIMENT=rawgo templ generate -path pages
 	go build -o magicwallet .
 
 # run code for development (no watch mode yet)
 run:
 	tailwindcss -i public/css/base.css -o public/css/tailwind.css
-	templ generate -path pages
+	TEMPL_EXPERIMENT=rawgo templ generate -path pages
 	go run .
 
 dev:

db/db.go

@@ -17,14 +17,8 @@ func New(dbUrl string) (*DB, error) {
 		return nil, err
 	}
 
-	// test connection
-	_, err = db_.Exec("SELECT 1")
-	if err != nil {
-		return nil, err
-	}
-
 	// TODO: run migrations
 	db := &DB{DB: db_}
 
-	return db, nil
+	return db, db_.Ping()
 }

db/models/user.go

@@ -0,0 +1,11 @@
+package models
+
+import "time"
+
+type User struct {
+	Id          int
+	Name        string
+	CreatedAt   time.Time
+	LnPubkey    string
+	NostrPubkey string
+}

db/models/wallet.go

@@ -0,0 +1,9 @@
+package models
+
+type Wallet struct {
+	Id           int
+	WalletPubkey string
+	Secret       string
+	Msats        int
+	UserId       int
+}

db/postgresql.conf

@@ -0,0 +1,820 @@
+# -----------------------------
+# PostgreSQL configuration file
+# -----------------------------
+#
+# This file consists of lines of the form:
+#
+#   name = value
+#
+# (The "=" is optional.)  Whitespace may be used.  Comments are introduced with
+# "#" anywhere on a line.  The complete list of parameter names and allowed
+# values can be found in the PostgreSQL documentation.
+#
+# The commented-out settings shown in this file represent the default values.
+# Re-commenting a setting is NOT sufficient to revert it to the default value;
+# you need to reload the server.
+#
+# This file is read on server startup and when the server receives a SIGHUP
+# signal.  If you edit the file on a running system, you have to SIGHUP the
+# server for the changes to take effect, run "pg_ctl reload", or execute
+# "SELECT pg_reload_conf()".  Some parameters, which are marked below,
+# require a server shutdown and restart to take effect.
+#
+# Any parameter can also be given as a command-line option to the server, e.g.,
+# "postgres -c log_connections=on".  Some parameters can be changed at run time
+# with the "SET" SQL command.
+#
+# Memory units:  B  = bytes            Time units:  us  = microseconds
+#                kB = kilobytes                     ms  = milliseconds
+#                MB = megabytes                     s   = seconds
+#                GB = gigabytes                     min = minutes
+#                TB = terabytes                     h   = hours
+#                                                   d   = days
+
+
+#------------------------------------------------------------------------------
+# FILE LOCATIONS
+#------------------------------------------------------------------------------
+
+# The default values of these variables are driven from the -D command-line
+# option or PGDATA environment variable, represented here as ConfigDir.
+
+#data_directory = 'ConfigDir'		# use data in another directory
+					# (change requires restart)
+#hba_file = 'ConfigDir/pg_hba.conf'	# host-based authentication file
+					# (change requires restart)
+#ident_file = 'ConfigDir/pg_ident.conf'	# ident configuration file
+					# (change requires restart)
+
+# If external_pid_file is not explicitly set, no extra PID file is written.
+#external_pid_file = ''			# write an extra PID file
+					# (change requires restart)
+
+
+#------------------------------------------------------------------------------
+# CONNECTIONS AND AUTHENTICATION
+#------------------------------------------------------------------------------
+
+# - Connection Settings -
+
+listen_addresses = '*'		# what IP address(es) to listen on;
+					# comma-separated list of addresses;
+					# defaults to 'localhost'; use '*' for all
+					# (change requires restart)
+port = 5432				# (change requires restart)
+#max_connections = 100			# (change requires restart)
+#reserved_connections = 0		# (change requires restart)
+#superuser_reserved_connections = 3	# (change requires restart)
+#unix_socket_directories = '/tmp'	# comma-separated list of directories
+					# (change requires restart)
+#unix_socket_group = ''			# (change requires restart)
+#unix_socket_permissions = 0777		# begin with 0 to use octal notation
+					# (change requires restart)
+#bonjour = off				# advertise server via Bonjour
+					# (change requires restart)
+#bonjour_name = ''			# defaults to the computer name
+					# (change requires restart)
+
+# - TCP settings -
+# see "man tcp" for details
+
+#tcp_keepalives_idle = 0		# TCP_KEEPIDLE, in seconds;
+					# 0 selects the system default
+#tcp_keepalives_interval = 0		# TCP_KEEPINTVL, in seconds;
+					# 0 selects the system default
+#tcp_keepalives_count = 0		# TCP_KEEPCNT;
+					# 0 selects the system default
+#tcp_user_timeout = 0			# TCP_USER_TIMEOUT, in milliseconds;
+					# 0 selects the system default
+
+#client_connection_check_interval = 0	# time between checks for client
+					# disconnection while running queries;
+					# 0 for never
+
+# - Authentication -
+
+#authentication_timeout = 1min		# 1s-600s
+#password_encryption = scram-sha-256	# scram-sha-256 or md5
+#scram_iterations = 4096
+#db_user_namespace = off
+
+# GSSAPI using Kerberos
+#krb_server_keyfile = 'FILE:${sysconfdir}/krb5.keytab'
+#krb_caseins_users = off
+#gss_accept_delegation = off
+
+# - SSL -
+
+#ssl = off
+#ssl_ca_file = ''
+#ssl_cert_file = 'server.crt'
+#ssl_crl_file = ''
+#ssl_crl_dir = ''
+#ssl_key_file = 'server.key'
+#ssl_ciphers = 'HIGH:MEDIUM:+3DES:!aNULL' # allowed SSL ciphers
+#ssl_prefer_server_ciphers = on
+#ssl_ecdh_curve = 'prime256v1'
+#ssl_min_protocol_version = 'TLSv1.2'
+#ssl_max_protocol_version = ''
+#ssl_dh_params_file = ''
+#ssl_passphrase_command = ''
+#ssl_passphrase_command_supports_reload = off
+
+
+#------------------------------------------------------------------------------
+# RESOURCE USAGE (except WAL)
+#------------------------------------------------------------------------------
+
+# - Memory -
+
+#shared_buffers = 128MB			# min 128kB
+					# (change requires restart)
+#huge_pages = try			# on, off, or try
+					# (change requires restart)
+#huge_page_size = 0			# zero for system default
+					# (change requires restart)
+#temp_buffers = 8MB			# min 800kB
+#max_prepared_transactions = 0		# zero disables the feature
+					# (change requires restart)
+# Caution: it is not advisable to set max_prepared_transactions nonzero unless
+# you actively intend to use prepared transactions.
+#work_mem = 4MB				# min 64kB
+#hash_mem_multiplier = 2.0		# 1-1000.0 multiplier on hash table work_mem
+#maintenance_work_mem = 64MB		# min 1MB
+#autovacuum_work_mem = -1		# min 1MB, or -1 to use maintenance_work_mem
+#logical_decoding_work_mem = 64MB	# min 64kB
+#max_stack_depth = 2MB			# min 100kB
+#shared_memory_type = mmap		# the default is the first option
+					# supported by the operating system:
+					#   mmap
+					#   sysv
+					#   windows
+					# (change requires restart)
+#dynamic_shared_memory_type = posix	# the default is usually the first option
+					# supported by the operating system:
+					#   posix
+					#   sysv
+					#   windows
+					#   mmap
+					# (change requires restart)
+#min_dynamic_shared_memory = 0MB	# (change requires restart)
+#vacuum_buffer_usage_limit = 256kB	# size of vacuum and analyze buffer access strategy ring;
+					# 0 to disable vacuum buffer access strategy;
+					# range 128kB to 16GB
+
+# - Disk -
+
+#temp_file_limit = -1			# limits per-process temp file space
+					# in kilobytes, or -1 for no limit
+
+# - Kernel Resources -
+
+#max_files_per_process = 1000		# min 64
+					# (change requires restart)
+
+# - Cost-Based Vacuum Delay -
+
+#vacuum_cost_delay = 0			# 0-100 milliseconds (0 disables)
+#vacuum_cost_page_hit = 1		# 0-10000 credits
+#vacuum_cost_page_miss = 2		# 0-10000 credits
+#vacuum_cost_page_dirty = 20		# 0-10000 credits
+#vacuum_cost_limit = 200		# 1-10000 credits
+
+# - Background Writer -
+
+#bgwriter_delay = 200ms			# 10-10000ms between rounds
+#bgwriter_lru_maxpages = 100		# max buffers written/round, 0 disables
+#bgwriter_lru_multiplier = 2.0		# 0-10.0 multiplier on buffers scanned/round
+#bgwriter_flush_after = 0		# measured in pages, 0 disables
+
+# - Asynchronous Behavior -
+
+#backend_flush_after = 0		# measured in pages, 0 disables
+#effective_io_concurrency = 1		# 1-1000; 0 disables prefetching
+#maintenance_io_concurrency = 10	# 1-1000; 0 disables prefetching
+#max_worker_processes = 8		# (change requires restart)
+#max_parallel_workers_per_gather = 2	# taken from max_parallel_workers
+#max_parallel_maintenance_workers = 2	# taken from max_parallel_workers
+#max_parallel_workers = 8		# maximum number of max_worker_processes that
+					# can be used in parallel operations
+#parallel_leader_participation = on
+#old_snapshot_threshold = -1		# 1min-60d; -1 disables; 0 is immediate
+					# (change requires restart)
+
+
+#------------------------------------------------------------------------------
+# WRITE-AHEAD LOG
+#------------------------------------------------------------------------------
+
+# - Settings -
+
+#wal_level = replica			# minimal, replica, or logical
+					# (change requires restart)
+#fsync = on				# flush data to disk for crash safety
+					# (turning this off can cause
+					# unrecoverable data corruption)
+#synchronous_commit = on		# synchronization level;
+					# off, local, remote_write, remote_apply, or on
+#wal_sync_method = fsync		# the default is the first option
+					# supported by the operating system:
+					#   open_datasync
+					#   fdatasync (default on Linux and FreeBSD)
+					#   fsync
+					#   fsync_writethrough
+					#   open_sync
+#full_page_writes = on			# recover from partial page writes
+#wal_log_hints = off			# also do full page writes of non-critical updates
+					# (change requires restart)
+#wal_compression = off			# enables compression of full-page writes;
+					# off, pglz, lz4, zstd, or on
+#wal_init_zero = on			# zero-fill new WAL files
+#wal_recycle = on			# recycle WAL files
+#wal_buffers = -1			# min 32kB, -1 sets based on shared_buffers
+					# (change requires restart)
+#wal_writer_delay = 200ms		# 1-10000 milliseconds
+#wal_writer_flush_after = 1MB		# measured in pages, 0 disables
+#wal_skip_threshold = 2MB
+
+#commit_delay = 0			# range 0-100000, in microseconds
+#commit_siblings = 5			# range 1-1000
+
+# - Checkpoints -
+
+#checkpoint_timeout = 5min		# range 30s-1d
+#checkpoint_completion_target = 0.9	# checkpoint target duration, 0.0 - 1.0
+#checkpoint_flush_after = 0		# measured in pages, 0 disables
+#checkpoint_warning = 30s		# 0 disables
+#max_wal_size = 1GB
+#min_wal_size = 80MB
+
+# - Prefetching during recovery -
+
+#recovery_prefetch = try		# prefetch pages referenced in the WAL?
+#wal_decode_buffer_size = 512kB		# lookahead window used for prefetching
+					# (change requires restart)
+
+# - Archiving -
+
+#archive_mode = off		# enables archiving; off, on, or always
+				# (change requires restart)
+#archive_library = ''		# library to use to archive a WAL file
+				# (empty string indicates archive_command should
+				# be used)
+#archive_command = ''		# command to use to archive a WAL file
+				# placeholders: %p = path of file to archive
+				#               %f = file name only
+				# e.g. 'test ! -f /mnt/server/archivedir/%f && cp %p /mnt/server/archivedir/%f'
+#archive_timeout = 0		# force a WAL file switch after this
+				# number of seconds; 0 disables
+
+# - Archive Recovery -
+
+# These are only used in recovery mode.
+
+#restore_command = ''		# command to use to restore an archived WAL file
+				# placeholders: %p = path of file to restore
+				#               %f = file name only
+				# e.g. 'cp /mnt/server/archivedir/%f %p'
+#archive_cleanup_command = ''	# command to execute at every restartpoint
+#recovery_end_command = ''	# command to execute at completion of recovery
+
+# - Recovery Target -
+
+# Set these only when performing a targeted recovery.
+
+#recovery_target = ''		# 'immediate' to end recovery as soon as a
+                                # consistent state is reached
+				# (change requires restart)
+#recovery_target_name = ''	# the named restore point to which recovery will proceed
+				# (change requires restart)
+#recovery_target_time = ''	# the time stamp up to which recovery will proceed
+				# (change requires restart)
+#recovery_target_xid = ''	# the transaction ID up to which recovery will proceed
+				# (change requires restart)
+#recovery_target_lsn = ''	# the WAL LSN up to which recovery will proceed
+				# (change requires restart)
+#recovery_target_inclusive = on # Specifies whether to stop:
+				# just after the specified recovery target (on)
+				# just before the recovery target (off)
+				# (change requires restart)
+#recovery_target_timeline = 'latest'	# 'current', 'latest', or timeline ID
+				# (change requires restart)
+#recovery_target_action = 'pause'	# 'pause', 'promote', 'shutdown'
+				# (change requires restart)
+
+
+#------------------------------------------------------------------------------
+# REPLICATION
+#------------------------------------------------------------------------------
+
+# - Sending Servers -
+
+# Set these on the primary and on any standby that will send replication data.
+
+#max_wal_senders = 10		# max number of walsender processes
+				# (change requires restart)
+#max_replication_slots = 10	# max number of replication slots
+				# (change requires restart)
+#wal_keep_size = 0		# in megabytes; 0 disables
+#max_slot_wal_keep_size = -1	# in megabytes; -1 disables
+#wal_sender_timeout = 60s	# in milliseconds; 0 disables
+#track_commit_timestamp = off	# collect timestamp of transaction commit
+				# (change requires restart)
+
+# - Primary Server -
+
+# These settings are ignored on a standby server.
+
+#synchronous_standby_names = ''	# standby servers that provide sync rep
+				# method to choose sync standbys, number of sync standbys,
+				# and comma-separated list of application_name
+				# from standby(s); '*' = all
+
+# - Standby Servers -
+
+# These settings are ignored on a primary server.
+
+#primary_conninfo = ''			# connection string to sending server
+#primary_slot_name = ''			# replication slot on sending server
+#hot_standby = on			# "off" disallows queries during recovery
+					# (change requires restart)
+#max_standby_archive_delay = 30s	# max delay before canceling queries
+					# when reading WAL from archive;
+					# -1 allows indefinite delay
+#max_standby_streaming_delay = 30s	# max delay before canceling queries
+					# when reading streaming WAL;
+					# -1 allows indefinite delay
+#wal_receiver_create_temp_slot = off	# create temp slot if primary_slot_name
+					# is not set
+#wal_receiver_status_interval = 10s	# send replies at least this often
+					# 0 disables
+#hot_standby_feedback = off		# send info from standby to prevent
+					# query conflicts
+#wal_receiver_timeout = 60s		# time that receiver waits for
+					# communication from primary
+					# in milliseconds; 0 disables
+#wal_retrieve_retry_interval = 5s	# time to wait before retrying to
+					# retrieve WAL after a failed attempt
+#recovery_min_apply_delay = 0		# minimum delay for applying changes during recovery
+
+# - Subscribers -
+
+# These settings are ignored on a publisher.
+
+#max_logical_replication_workers = 4	# taken from max_worker_processes
+					# (change requires restart)
+#max_sync_workers_per_subscription = 2	# taken from max_logical_replication_workers
+#max_parallel_apply_workers_per_subscription = 2	# taken from max_logical_replication_workers
+
+
+#------------------------------------------------------------------------------
+# QUERY TUNING
+#------------------------------------------------------------------------------
+
+# - Planner Method Configuration -
+
+#enable_async_append = on
+#enable_bitmapscan = on
+#enable_gathermerge = on
+#enable_hashagg = on
+#enable_hashjoin = on
+#enable_incremental_sort = on
+#enable_indexscan = on
+#enable_indexonlyscan = on
+#enable_material = on
+#enable_memoize = on
+#enable_mergejoin = on
+#enable_nestloop = on
+#enable_parallel_append = on
+#enable_parallel_hash = on
+#enable_partition_pruning = on
+#enable_partitionwise_join = off
+#enable_partitionwise_aggregate = off
+#enable_presorted_aggregate = on
+#enable_seqscan = on
+#enable_sort = on
+#enable_tidscan = on
+
+# - Planner Cost Constants -
+
+#seq_page_cost = 1.0			# measured on an arbitrary scale
+#random_page_cost = 4.0			# same scale as above
+#cpu_tuple_cost = 0.01			# same scale as above
+#cpu_index_tuple_cost = 0.005		# same scale as above
+#cpu_operator_cost = 0.0025		# same scale as above
+#parallel_setup_cost = 1000.0	# same scale as above
+#parallel_tuple_cost = 0.1		# same scale as above
+#min_parallel_table_scan_size = 8MB
+#min_parallel_index_scan_size = 512kB
+#effective_cache_size = 4GB
+
+#jit_above_cost = 100000		# perform JIT compilation if available
+					# and query more expensive than this;
+					# -1 disables
+#jit_inline_above_cost = 500000		# inline small functions if query is
+					# more expensive than this; -1 disables
+#jit_optimize_above_cost = 500000	# use expensive JIT optimizations if
+					# query is more expensive than this;
+					# -1 disables
+
+# - Genetic Query Optimizer -
+
+#geqo = on
+#geqo_threshold = 12
+#geqo_effort = 5			# range 1-10
+#geqo_pool_size = 0			# selects default based on effort
+#geqo_generations = 0			# selects default based on effort
+#geqo_selection_bias = 2.0		# range 1.5-2.0
+#geqo_seed = 0.0			# range 0.0-1.0
+
+# - Other Planner Options -
+
+#default_statistics_target = 100	# range 1-10000
+#constraint_exclusion = partition	# on, off, or partition
+#cursor_tuple_fraction = 0.1		# range 0.0-1.0
+#from_collapse_limit = 8
+#jit = on				# allow JIT compilation
+#join_collapse_limit = 8		# 1 disables collapsing of explicit
+					# JOIN clauses
+#plan_cache_mode = auto			# auto, force_generic_plan or
+					# force_custom_plan
+#recursive_worktable_factor = 10.0	# range 0.001-1000000
+
+
+#------------------------------------------------------------------------------
+# REPORTING AND LOGGING
+#------------------------------------------------------------------------------
+
+# - Where to Log -
+
+#log_destination = 'stderr'		# Valid values are combinations of
+					# stderr, csvlog, jsonlog, syslog, and
+					# eventlog, depending on platform.
+					# csvlog and jsonlog require
+					# logging_collector to be on.
+
+# This is used when logging to stderr:
+#logging_collector = off		# Enable capturing of stderr, jsonlog,
+					# and csvlog into log files. Required
+					# to be on for csvlogs and jsonlogs.
+					# (change requires restart)
+
+# These are only used if logging_collector is on:
+#log_directory = 'log'			# directory where log files are written,
+					# can be absolute or relative to PGDATA
+#log_filename = 'postgresql-%Y-%m-%d_%H%M%S.log'	# log file name pattern,
+					# can include strftime() escapes
+#log_file_mode = 0600			# creation mode for log files,
+					# begin with 0 to use octal notation
+#log_rotation_age = 1d			# Automatic rotation of logfiles will
+					# happen after that time.  0 disables.
+#log_rotation_size = 10MB		# Automatic rotation of logfiles will
+					# happen after that much log output.
+					# 0 disables.
+#log_truncate_on_rotation = off		# If on, an existing log file with the
+					# same name as the new log file will be
+					# truncated rather than appended to.
+					# But such truncation only occurs on
+					# time-driven rotation, not on restarts
+					# or size-driven rotation.  Default is
+					# off, meaning append to existing files
+					# in all cases.
+
+# These are relevant when logging to syslog:
+#syslog_facility = 'LOCAL0'
+#syslog_ident = 'postgres'
+#syslog_sequence_numbers = on
+#syslog_split_messages = on
+
+# This is only relevant when logging to eventlog (Windows):
+# (change requires restart)
+#event_source = 'PostgreSQL'
+
+# - When to Log -
+
+#log_min_messages = warning		# values in order of decreasing detail:
+					#   debug5
+					#   debug4
+					#   debug3
+					#   debug2
+					#   debug1
+					#   info
+					#   notice
+					#   warning
+					#   error
+					#   log
+					#   fatal
+					#   panic
+
+#log_min_error_statement = error	# values in order of decreasing detail:
+					#   debug5
+					#   debug4
+					#   debug3
+					#   debug2
+					#   debug1
+					#   info
+					#   notice
+					#   warning
+					#   error
+					#   log
+					#   fatal
+					#   panic (effectively off)
+
+log_min_duration_statement = 0 # -1 is disabled, 0 logs all statements
+					# and their durations, > 0 logs only
+					# statements running at least this number
+					# of milliseconds
+
+#log_min_duration_sample = -1		# -1 is disabled, 0 logs a sample of statements
+					# and their durations, > 0 logs only a sample of
+					# statements running at least this number
+					# of milliseconds;
+					# sample fraction is determined by log_statement_sample_rate
+
+#log_statement_sample_rate = 1.0	# fraction of logged statements exceeding
+					# log_min_duration_sample to be logged;
+					# 1.0 logs all such statements, 0.0 never logs
+
+
+#log_transaction_sample_rate = 0.0	# fraction of transactions whose statements
+					# are logged regardless of their duration; 1.0 logs all
+					# statements from all transactions, 0.0 never logs
+
+#log_startup_progress_interval = 10s	# Time between progress updates for
+					# long-running startup operations.
+					# 0 disables the feature, > 0 indicates
+					# the interval in milliseconds.
+
+# - What to Log -
+
+#debug_print_parse = off
+#debug_print_rewritten = off
+#debug_print_plan = off
+#debug_pretty_print = on
+#log_autovacuum_min_duration = 10min	# log autovacuum activity;
+					# -1 disables, 0 logs all actions and
+					# their durations, > 0 logs only
+					# actions running at least this number
+					# of milliseconds.
+#log_checkpoints = on
+#log_connections = off
+#log_disconnections = off
+#log_duration = off
+#log_error_verbosity = default		# terse, default, or verbose messages
+#log_hostname = off
+#log_line_prefix = '%m [%p] '		# special values:
+					#   %a = application name
+					#   %u = user name
+					#   %d = database name
+					#   %r = remote host and port
+					#   %h = remote host
+					#   %b = backend type
+					#   %p = process ID
+					#   %P = process ID of parallel group leader
+					#   %t = timestamp without milliseconds
+					#   %m = timestamp with milliseconds
+					#   %n = timestamp with milliseconds (as a Unix epoch)
+					#   %Q = query ID (0 if none or not computed)
+					#   %i = command tag
+					#   %e = SQL state
+					#   %c = session ID
+					#   %l = session line number
+					#   %s = session start timestamp
+					#   %v = virtual transaction ID
+					#   %x = transaction ID (0 if none)
+					#   %q = stop here in non-session
+					#        processes
+					#   %% = '%'
+					# e.g. '<%u%%%d> '
+#log_lock_waits = off			# log lock waits >= deadlock_timeout
+#log_recovery_conflict_waits = off	# log standby recovery conflict waits
+					# >= deadlock_timeout
+#log_parameter_max_length = -1		# when logging statements, limit logged
+					# bind-parameter values to N bytes;
+					# -1 means print in full, 0 disables
+#log_parameter_max_length_on_error = 0	# when logging an error, limit logged
+					# bind-parameter values to N bytes;
+					# -1 means print in full, 0 disables
+#log_statement = 'none'			# none, ddl, mod, all
+#log_replication_commands = off
+#log_temp_files = -1			# log temporary files equal or larger
+					# than the specified size in kilobytes;
+					# -1 disables, 0 logs all temp files
+#log_timezone = 'GMT'
+
+# - Process Title -
+
+#cluster_name = ''			# added to process titles if nonempty
+					# (change requires restart)
+#update_process_title = on
+
+
+#------------------------------------------------------------------------------
+# STATISTICS
+#------------------------------------------------------------------------------
+
+# - Cumulative Query and Index Statistics -
+
+#track_activities = on
+#track_activity_query_size = 1024	# (change requires restart)
+#track_counts = on
+#track_io_timing = off
+#track_wal_io_timing = off
+#track_functions = none			# none, pl, all
+#stats_fetch_consistency = cache	# cache, none, snapshot
+
+
+# - Monitoring -
+
+#compute_query_id = auto
+#log_statement_stats = off
+#log_parser_stats = off
+#log_planner_stats = off
+#log_executor_stats = off
+
+
+#------------------------------------------------------------------------------
+# AUTOVACUUM
+#------------------------------------------------------------------------------
+
+#autovacuum = on			# Enable autovacuum subprocess?  'on'
+					# requires track_counts to also be on.
+#autovacuum_max_workers = 3		# max number of autovacuum subprocesses
+					# (change requires restart)
+#autovacuum_naptime = 1min		# time between autovacuum runs
+#autovacuum_vacuum_threshold = 50	# min number of row updates before
+					# vacuum
+#autovacuum_vacuum_insert_threshold = 1000	# min number of row inserts
+					# before vacuum; -1 disables insert
+					# vacuums
+#autovacuum_analyze_threshold = 50	# min number of row updates before
+					# analyze
+#autovacuum_vacuum_scale_factor = 0.2	# fraction of table size before vacuum
+#autovacuum_vacuum_insert_scale_factor = 0.2	# fraction of inserts over table
+					# size before insert vacuum
+#autovacuum_analyze_scale_factor = 0.1	# fraction of table size before analyze
+#autovacuum_freeze_max_age = 200000000	# maximum XID age before forced vacuum
+					# (change requires restart)
+#autovacuum_multixact_freeze_max_age = 400000000	# maximum multixact age
+					# before forced vacuum
+					# (change requires restart)
+#autovacuum_vacuum_cost_delay = 2ms	# default vacuum cost delay for
+					# autovacuum, in milliseconds;
+					# -1 means use vacuum_cost_delay
+#autovacuum_vacuum_cost_limit = -1	# default vacuum cost limit for
+					# autovacuum, -1 means use
+					# vacuum_cost_limit
+
+
+#------------------------------------------------------------------------------
+# CLIENT CONNECTION DEFAULTS
+#------------------------------------------------------------------------------
+
+# - Statement Behavior -
+
+#client_min_messages = notice		# values in order of decreasing detail:
+					#   debug5
+					#   debug4
+					#   debug3
+					#   debug2
+					#   debug1
+					#   log
+					#   notice
+					#   warning
+					#   error
+#search_path = '"$user", public'	# schema names
+#row_security = on
+#default_table_access_method = 'heap'
+#default_tablespace = ''		# a tablespace name, '' uses the default
+#default_toast_compression = 'pglz'	# 'pglz' or 'lz4'
+#temp_tablespaces = ''			# a list of tablespace names, '' uses
+					# only default tablespace
+#check_function_bodies = on
+#default_transaction_isolation = 'read committed'
+#default_transaction_read_only = off
+#default_transaction_deferrable = off
+#session_replication_role = 'origin'
+#statement_timeout = 0			# in milliseconds, 0 is disabled
+#lock_timeout = 0			# in milliseconds, 0 is disabled
+#idle_in_transaction_session_timeout = 0	# in milliseconds, 0 is disabled
+#idle_session_timeout = 0		# in milliseconds, 0 is disabled
+#vacuum_freeze_table_age = 150000000
+#vacuum_freeze_min_age = 50000000
+#vacuum_failsafe_age = 1600000000
+#vacuum_multixact_freeze_table_age = 150000000
+#vacuum_multixact_freeze_min_age = 5000000
+#vacuum_multixact_failsafe_age = 1600000000
+#bytea_output = 'hex'			# hex, escape
+#xmlbinary = 'base64'
+#xmloption = 'content'
+#gin_pending_list_limit = 4MB
+#createrole_self_grant = ''		# set and/or inherit
+
+# - Locale and Formatting -
+
+#datestyle = 'iso, mdy'
+#intervalstyle = 'postgres'
+#timezone = 'GMT'
+#timezone_abbreviations = 'Default'     # Select the set of available time zone
+					# abbreviations.  Currently, there are
+					#   Default
+					#   Australia (historical usage)
+					#   India
+					# You can create your own file in
+					# share/timezonesets/.
+#extra_float_digits = 1			# min -15, max 3; any value >0 actually
+					# selects precise output mode
+#client_encoding = sql_ascii		# actually, defaults to database
+					# encoding
+
+# These settings are initialized by initdb, but they can be changed.
+#lc_messages = 'C'			# locale for system error message
+					# strings
+#lc_monetary = 'C'			# locale for monetary formatting
+#lc_numeric = 'C'			# locale for number formatting
+#lc_time = 'C'				# locale for time formatting
+
+#icu_validation_level = warning		# report ICU locale validation
+					# errors at the given level
+
+# default configuration for text search
+#default_text_search_config = 'pg_catalog.simple'
+
+# - Shared Library Preloading -
+
+#local_preload_libraries = ''
+#session_preload_libraries = ''
+#shared_preload_libraries = ''	# (change requires restart)
+#jit_provider = 'llvmjit'		# JIT library to use
+
+# - Other Defaults -
+
+#dynamic_library_path = '$libdir'
+#gin_fuzzy_search_limit = 0
+
+
+#------------------------------------------------------------------------------
+# LOCK MANAGEMENT
+#------------------------------------------------------------------------------
+
+#deadlock_timeout = 1s
+#max_locks_per_transaction = 64		# min 10
+					# (change requires restart)
+#max_pred_locks_per_transaction = 64	# min 10
+					# (change requires restart)
+#max_pred_locks_per_relation = -2	# negative values mean
+					# (max_pred_locks_per_transaction
+					#  / -max_pred_locks_per_relation) - 1
+#max_pred_locks_per_page = 2            # min 0
+
+
+#------------------------------------------------------------------------------
+# VERSION AND PLATFORM COMPATIBILITY
+#------------------------------------------------------------------------------
+
+# - Previous PostgreSQL Versions -
+
+#array_nulls = on
+#backslash_quote = safe_encoding	# on, off, or safe_encoding
+#escape_string_warning = on
+#lo_compat_privileges = off
+#quote_all_identifiers = off
+#standard_conforming_strings = on
+#synchronize_seqscans = on
+
+# - Other Platforms and Clients -
+
+#transform_null_equals = off
+
+
+#------------------------------------------------------------------------------
+# ERROR HANDLING
+#------------------------------------------------------------------------------
+
+#exit_on_error = off			# terminate session on any error?
+#restart_after_crash = on		# reinitialize after backend crash?
+#data_sync_retry = off			# retry or panic on failure to fsync
+					# data?
+					# (change requires restart)
+#recovery_init_sync_method = fsync	# fsync, syncfs (Linux 5.8+)
+
+
+#------------------------------------------------------------------------------
+# CONFIG FILE INCLUDES
+#------------------------------------------------------------------------------
+
+# These options allow settings to be loaded from files other than the
+# default postgresql.conf.  Note that these are directives, not variable
+# assignments, so they can usefully be given more than once.
+
+#include_dir = '...'			# include files ending in '.conf' from
+					# a directory, e.g., 'conf.d'
+#include_if_exists = '...'		# include file only if it exists
+#include = '...'			# include file
+
+
+#------------------------------------------------------------------------------
+# CUSTOMIZED OPTIONS
+#------------------------------------------------------------------------------
+
+# Add settings for extensions here

db/schema.sql

@@ -0,0 +1,21 @@
+CREATE TABLE users(
+    id SERIAL PRIMARY KEY,
+    name TEXT UNIQUE NOT NULL DEFAULT LEFT(md5(random()::text), 8),
+    created_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    ln_pubkey TEXT UNIQUE,
+    nostr_pubkey TEXT UNIQUE
+);
+
+CREATE TABLE sessions(
+    id VARCHAR(48) PRIMARY KEY DEFAULT encode(gen_random_uuid()::text::bytea, 'base64'),
+    user_id INTEGER NOT NULL REFERENCES users(id),
+    created_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE TABLE wallets(
+    id SERIAL PRIMARY KEY,
+    wallet_pubkey CHAR(66) NOT NULL,
+    secret CHAR(66) NOT NULL,
+    msats BIGINT NOT NULL DEFAULT 0,
+    user_id SERIAL REFERENCES users(id)
+);

docker-compose.yml

@@ -0,0 +1,20 @@
+services:
+  db:
+    image: postgres:14
+    container_name: magicwallet-db
+    environment:
+      POSTGRES_PASSWORD: magicwallet
+      POSTGRES_USER: magicwallet
+      POSTGRES_DB: magicwallet
+      PORT: 5432
+      # POSTGRES_HOST_AUTH_METHOD: trust
+    ports:
+      - 127.0.0.1:5432:5432
+    volumes:
+      - magicwallet:/var/lib/postgresql/data
+      - ./db/postgresql.conf:/etc/postgresql.conf
+      - ./db/schema.sql:/docker-entrypoint-initdb.d/schema.sql
+    command: postgres -c config_file=/etc/postgresql.conf
+
+volumes:
+  magicwallet:

go.mod

@@ -6,6 +6,7 @@ toolchain go1.22.8
 
 require (
 	github.com/a-h/templ v0.2.778
+	github.com/decred/dcrd/dcrec/secp256k1 v1.0.4
 	github.com/joho/godotenv v1.5.1
 	github.com/labstack/echo/v4 v4.12.0
 	github.com/lib/pq v1.10.9
@@ -41,6 +42,7 @@ require (
 	github.com/coreos/go-systemd/v22 v22.3.2 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
 	github.com/decred/dcrd/crypto/blake256 v1.0.0 // indirect
+	github.com/decred/dcrd/dcrec/secp256k1/v2 v2.0.0 // indirect
 	github.com/decred/dcrd/dcrec/secp256k1/v4 v4.0.1 // indirect
 	github.com/decred/dcrd/lru v1.0.0 // indirect
 	github.com/dsnet/compress v0.0.1 // indirect

go.sum

@@ -146,8 +146,14 @@ github.com/davecgh/go-spew v0.0.0-20171005155431-ecdeabc65495/go.mod h1:J7Y8YcW2
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/decred/dcrd/chaincfg/chainhash v1.0.2 h1:rt5Vlq/jM3ZawwiacWjPa+smINyLRN07EO0cNBV6DGU=
+github.com/decred/dcrd/chaincfg/chainhash v1.0.2/go.mod h1:BpbrGgrPTr3YJYRN3Bm+D9NuaFd+zGyNeIKgrhCXK60=
 github.com/decred/dcrd/crypto/blake256 v1.0.0 h1:/8DMNYp9SGi5f0w7uCm6d6M4OU2rGFK09Y2A4Xv7EE0=
 github.com/decred/dcrd/crypto/blake256 v1.0.0/go.mod h1:sQl2p6Y26YV+ZOcSTP6thNdn47hh8kt6rqSlvmrXFAc=
+github.com/decred/dcrd/dcrec/secp256k1 v1.0.4 h1:0XErmfJBiVbl0NvyclGn4jr+1hIylDf5beFi9W0o7Fc=
+github.com/decred/dcrd/dcrec/secp256k1 v1.0.4/go.mod h1:00z7mJdugt+GBAzPN1QrDRGCXxyKUiexEHu6ukxEw3k=
+github.com/decred/dcrd/dcrec/secp256k1/v2 v2.0.0 h1:3GIJYXQDAKpLEFriGFN8SbSffak10UXHGdIcFaMPykY=
+github.com/decred/dcrd/dcrec/secp256k1/v2 v2.0.0/go.mod h1:3s92l0paYkZoIHuj4X93Teg/HB7eGM9x/zokGw+u4mY=
 github.com/decred/dcrd/dcrec/secp256k1/v4 v4.0.1 h1:YLtO71vCjJRCBcrPMtQ9nqBsqpA1m5sE92cU+pd5Mcc=
 github.com/decred/dcrd/dcrec/secp256k1/v4 v4.0.1/go.mod h1:hyedUtir6IdtD/7lIxGeCxkaw7y45JueMRL4DIyJDKs=
 github.com/decred/dcrd/lru v1.0.0 h1:Kbsb1SFDsIlaupWPwsPp+dkxiBY1frcS07PCPgotKz8=

main.go

@@ -2,7 +2,6 @@ package main
 
 import (
 	"encoding/hex"
-	"flag"
 	"fmt"
 	"log"
 	"net/http"
@@ -12,6 +11,7 @@ import (
 	"github.com/ekzyis/magicwallet/lightning"
 	"github.com/ekzyis/magicwallet/server"
 	"github.com/lightninglabs/lndclient"
+	"github.com/namsral/flag"
 )
 
 func banner() {
@@ -39,20 +39,24 @@ func main() {
 	if err := env.Load(); err != nil {
 		log.Fatal(err)
 	}
-	flag.StringVar(&dbUrl, "DATABASE_URL", "", "Public URL of website")
+	flag.StringVar(&dbUrl, "DATABASE_URL", "", "Database connection")
 	flag.StringVar(&lndAddress, "LND_ADDRESS", "localhost:10001", "LND gRPC server address")
 	flag.StringVar(&lndCert, "LND_CERT", "", "LND TLS certificate in hex")
 	flag.StringVar(&lndMacaroon, "LND_MACAROON", "", "LND macaroon in hex")
 	flag.StringVar(&lndNetwork, "LND_NETWORK", "regtest", "LND network")
 	env.Parse()
 
-	log.Printf("Commit:      %s", env.CommitShortSha)
+	fmt.Printf("Commit:      %s\n", env.CommitShortSha)
-	log.Printf("Environment: %s", env.Env)
+	fmt.Printf("Environment: %s\n", env.Env)
 
 	// database
 	db_, err := db.New(dbUrl)
 	if err != nil {
-		log.Printf("❌ failed to connect to db: %v\n", err)
+		// database is required for every route
+		log.Fatalf("❌ failed to connect to db: %v\n", err)
+	} else {
+		// TODO: don't print db password
+		fmt.Printf("✅ connected to %s\n", dbUrl)
 	}
 
 	// lightning
@@ -69,9 +73,10 @@ func main() {
 	})
 	if err != nil {
 		log.Printf("❌ failed to connect to LND: %v\n", err)
+		// lnd is not required for every route
 		lnd_ = nil
 	} else {
-		log.Printf("✅ connected to %s LND v%s\n", lndAddress, lnd_.Version.Version)
+		fmt.Printf("✅ connected to %s LND v%s\n", lndAddress, lnd_.Version.Version)
 	}
 
 	// server

nostr/keys.go

@@ -0,0 +1,28 @@
+package nostr
+
+import (
+	"github.com/decred/dcrd/dcrec/secp256k1"
+)
+
+// nostr uses schnorr signatures over secp256k1 as defined by BIP-340
+// https://github.com/nostr-protocol/nips/blob/master/01.md
+// https://bips.xyz/340
+type PrivateKey = *secp256k1.PrivateKey
+type PublicKey = *secp256k1.PublicKey
+
+func GeneratePrivateKey() (*secp256k1.PrivateKey, error) {
+	return secp256k1.GeneratePrivateKey()
+}
+
+func GetPublicKey(sk *secp256k1.PrivateKey) *secp256k1.PublicKey {
+	pk := (secp256k1.PublicKey)(sk.PublicKey)
+	return &pk
+}
+
+func GenerateKeyPair() (*secp256k1.PrivateKey, *secp256k1.PublicKey, error) {
+	sk, err := GeneratePrivateKey()
+	if err != nil {
+		return nil, nil, err
+	}
+	return sk, GetPublicKey(sk), nil
+}

nostr/nwc/nwc.go

@@ -0,0 +1,66 @@
+package nwc
+
+import (
+	"encoding/hex"
+	"fmt"
+	"log"
+	"net/url"
+	"strings"
+
+	"github.com/ekzyis/magicwallet/nostr"
+)
+
+type NwcConnection struct {
+	WalletPubkey nostr.PublicKey
+	Relays       []*url.URL
+	Secret       nostr.PrivateKey
+}
+
+func (nwc *NwcConnection) Serialize() string {
+	var relays []string
+	for _, r := range nwc.Relays {
+		relays = append(relays, fmt.Sprintf("relay=%s", r.String()))
+	}
+
+	return fmt.Sprintf(
+		"nostr+walletconnect://%s?%s&secret=%s",
+		hex.EncodeToString(nwc.WalletPubkey.Serialize()),
+		strings.Join(relays, "&"),
+		hex.EncodeToString(nwc.Secret.Serialize()),
+	)
+}
+
+func NewConnection() (*NwcConnection, error) {
+	// https://github.com/nostr-protocol/nips/blob/master/47.md
+
+	error := func(err error) error {
+		return fmt.Errorf("failed to create nwc connection: %v\n", err)
+	}
+
+	// wallet keypair
+	_, walletPubkey, err := nostr.GenerateKeyPair()
+	if err != nil {
+		return nil, error(err)
+	}
+
+	// connection secret
+	secret, err := nostr.GeneratePrivateKey()
+	if err != nil {
+		return nil, error(err)
+	}
+
+	return &NwcConnection{
+		WalletPubkey: walletPubkey,
+		Relays:       Relays(),
+		Secret:       secret,
+	}, nil
+}
+
+func Relays() []*url.URL {
+	// relays on which we will listen for requests
+	u, err := url.Parse("wss://relay.primal.net")
+	if err != nil {
+		log.Fatalf("failed to parse URL: %v", err)
+	}
+	return []*url.URL{u}
+}

nostr/nwc/types.go

@@ -0,0 +1,61 @@
+package nwc
+
+// https://github.com/getAlby/hub/blob/373965a7648dd8a3bab16c593dbbd35ee3609e68/nip47/models/models.go
+
+import (
+	"encoding/json"
+)
+
+const (
+	INFO_EVENT_KIND   = 13194
+	REQUEST_KIND      = 23194
+	RESPONSE_KIND     = 23195
+	NOTIFICATION_KIND = 23196
+
+	// request methods
+	PAY_INVOICE_METHOD       = "pay_invoice"
+	GET_BALANCE_METHOD       = "get_balance"
+	GET_INFO_METHOD          = "get_info"
+	MAKE_INVOICE_METHOD      = "make_invoice"
+	LOOKUP_INVOICE_METHOD    = "lookup_invoice"
+	LIST_TRANSACTIONS_METHOD = "list_transactions"
+	PAY_KEYSEND_METHOD       = "pay_keysend"
+	MULTI_PAY_INVOICE_METHOD = "multi_pay_invoice"
+	MULTI_PAY_KEYSEND_METHOD = "multi_pay_keysend"
+	SIGN_MESSAGE_METHOD      = "sign_message"
+)
+
+type Transaction struct {
+	Type            string      `json:"type"`
+	Invoice         string      `json:"invoice"`
+	Description     string      `json:"description"`
+	DescriptionHash string      `json:"description_hash"`
+	Preimage        string      `json:"preimage"`
+	PaymentHash     string      `json:"payment_hash"`
+	Amount          int64       `json:"amount"`
+	FeesPaid        int64       `json:"fees_paid"`
+	CreatedAt       int64       `json:"created_at"`
+	ExpiresAt       *int64      `json:"expires_at"`
+	SettledAt       *int64      `json:"settled_at"`
+	Metadata        interface{} `json:"metadata,omitempty"`
+}
+
+type PayRequest struct {
+	Invoice string `json:"invoice"`
+}
+
+type Request struct {
+	Method string          `json:"method"`
+	Params json.RawMessage `json:"params"`
+}
+
+type Response struct {
+	Error      *Error      `json:"error,omitempty"`
+	Result     interface{} `json:"result,omitempty"`
+	ResultType string      `json:"result_type"`
+}
+
+type Error struct {
+	Code    string `json:"code,omitempty"`
+	Message string `json:"message,omitempty"`
+}

pages/components/head.templ

@@ -27,5 +27,6 @@ templ Head() {
 			<script defer src="/js/hotreload.js"></script>
 		}
 		<script src="/js/lib.js"></script>
+		<script defer src="/js/index.js"></script>
 	</head>
 }

pages/index.templ

@@ -1,17 +1,29 @@
 package pages
 
-import "github.com/ekzyis/magicwallet/pages/components"
+import (
+	"fmt"
+
+	"github.com/ekzyis/magicwallet/pages/components"
+	"github.com/ekzyis/magicwallet/db/models"
+	"github.com/ekzyis/magicwallet/nostr/nwc"
+)
 
 templ Index() {
+	{{ u := ctx.Value("user").(models.User)}}
+	{{ w := ctx.Value("wallet").(models.Wallet) }}
+	{{ nwc := ctx.Value("nwc").(*nwc.NwcConnection).Serialize() }}
 	<html>
 		@components.Head()
 		<body
 			class="container"
 			data-commit={ templ.JSONString(ctx.Value("commit")) }
+			data-user={ templ.JSONString(u) }
+			data-wallet={ templ.JSONString(w) }
+			data-nwc={ templ.JSONString(nwc) }
 		>
 			<div id="content" class="grid mt-3">
 				<div class="grid gap-10 self-center justify-self-center">
-					<h1 class="text-center text-5xl font-bold">0 sats</h1>
+					<h1 class="text-center text-5xl font-bold">{ fmt.Sprintf("%d sats", w.Msats) }</h1>
 					<div class="flex justify-self-center">
 						<button class="flex items-center justify-center text-xl mx-3 w-[120px]">
 							<img src="/svg/arrow-left-down-line.svg" width="24px" height="24px"/>

public/js/index.js

@@ -0,0 +1,6 @@
+const user = $$("user")
+const wallet = $$("wallet")
+const nwc = $$("nwc")
+console.log(`logged in as ${user.Name} with id ${user.Id}`)
+console.log(`you have ${wallet.Msats} msats`)
+console.log(nwc)

server/router/context/context.go

@@ -0,0 +1,28 @@
+package context
+
+import (
+	"context"
+
+	"github.com/ekzyis/magicwallet/db"
+	"github.com/ekzyis/magicwallet/lightning"
+	"github.com/labstack/echo/v4"
+)
+
+type Context struct {
+	context.Context
+	Environment    string
+	CommitShortSha string
+	Db             *db.DB
+	Lnd            *lightning.LNDClient
+}
+
+func (hc *Context) WithContext(ec echo.Context) context.Context {
+	ctx := ec.Request().Context()
+	ctx = context.WithValue(ctx, "env", hc.Environment)
+	ctx = context.WithValue(ctx, "commit", hc.CommitShortSha)
+	ctx = context.WithValue(ctx, "path", ec.Request().URL.Path)
+	ctx = context.WithValue(ctx, "user", ec.Get("user"))
+	ctx = context.WithValue(ctx, "wallet", ec.Get("wallet"))
+	ctx = context.WithValue(ctx, "nwc", ec.Get("nwc"))
+	return ctx
+}

server/router/index.go

@@ -1,16 +0,0 @@
-package router
-
-import (
-	"github.com/ekzyis/magicwallet/pages"
-	"github.com/labstack/echo/v4"
-)
-
-func Init(e *echo.Echo, hc Context) {
-	e.GET("/", HandleIndex(hc))
-}
-
-func HandleIndex(hc Context) echo.HandlerFunc {
-	return func(ec echo.Context) error {
-		return pages.Index().Render(hc.WithContext(ec), ec.Response().Writer)
-	}
-}

server/router/middleware/db.go

@@ -0,0 +1,19 @@
+package middleware
+
+import (
+	"net/http"
+
+	"github.com/ekzyis/magicwallet/server/router/context"
+	"github.com/labstack/echo/v4"
+)
+
+func DbGuard(hc context.Context) echo.MiddlewareFunc {
+	return func(next echo.HandlerFunc) echo.HandlerFunc {
+		return func(ec echo.Context) error {
+			if hc.Db != nil {
+				return next(ec)
+			}
+			return echo.NewHTTPError(http.StatusNotImplemented)
+		}
+	}
+}

server/router/middleware/lnd.go

@@ -3,11 +3,11 @@ package middleware
 import (
 	"net/http"
 
-	"github.com/ekzyis/magicwallet/server/router"
+	"github.com/ekzyis/magicwallet/server/router/context"
 	"github.com/labstack/echo/v4"
 )
 
-func LndGuard(hc router.Context) echo.MiddlewareFunc {
+func LndGuard(hc context.Context) echo.MiddlewareFunc {
 	return func(next echo.HandlerFunc) echo.HandlerFunc {
 		return func(ec echo.Context) error {
 			if hc.Lnd != nil {
@@ -17,14 +17,3 @@ func LndGuard(hc router.Context) echo.MiddlewareFunc {
 		}
 	}
 }
-
-func DbGuard(hc router.Context) echo.MiddlewareFunc {
-	return func(next echo.HandlerFunc) echo.HandlerFunc {
-		return func(ec echo.Context) error {
-			if hc.Db != nil {
-				return next(ec)
-			}
-			return echo.NewHTTPError(http.StatusNotImplemented)
-		}
-	}
-}

server/router/middleware/session.go

@@ -0,0 +1,150 @@
+package middleware
+
+import (
+	"encoding/hex"
+	"fmt"
+	"net/http"
+	"time"
+
+	"github.com/decred/dcrd/dcrec/secp256k1"
+	"github.com/ekzyis/magicwallet/db/models"
+	"github.com/ekzyis/magicwallet/nostr/nwc"
+	"github.com/ekzyis/magicwallet/server/router/context"
+	"github.com/labstack/echo/v4"
+)
+
+func Session(hc context.Context) echo.MiddlewareFunc {
+	return func(next echo.HandlerFunc) echo.HandlerFunc {
+		return func(ec echo.Context) error {
+			cookie, err := ec.Cookie("session")
+			if err != nil {
+				err = newSession(hc, ec)
+				if err != nil {
+					return echo.NewHTTPError(http.StatusInternalServerError, err)
+				}
+				return next(ec)
+			}
+
+			err = findSession(hc, ec, cookie.Value)
+			if err != nil {
+				return echo.NewHTTPError(http.StatusNotFound, err)
+			}
+
+			return next(ec)
+
+		}
+	}
+}
+
+func newSession(hc context.Context, ec echo.Context) error {
+	var (
+		db      = hc.Db
+		ctx     = ec.Request().Context()
+		session string
+		u       models.User
+		w       models.Wallet
+		err     error
+	)
+	err = db.QueryRowContext(ctx, ""+
+		"INSERT INTO users DEFAULT VALUES "+
+		"RETURNING id, name, created_at, COALESCE(ln_pubkey, ''), COALESCE(nostr_pubkey, '')").
+		Scan(&u.Id, &u.Name, &u.CreatedAt, &u.LnPubkey, &u.NostrPubkey)
+	if err != nil {
+		return fmt.Errorf("failed to insert new user: %v", err)
+	}
+
+	err = db.QueryRowContext(ctx, ""+
+		"INSERT INTO sessions(user_id) VALUES($1) RETURNING id",
+		u.Id).Scan(&session)
+	if err != nil {
+		return fmt.Errorf("failed to insert new session: %v", err)
+	}
+
+	nwcUri, err := nwc.NewConnection()
+	if err != nil {
+		return fmt.Errorf("failed to create nwc connection uri: %v", err)
+	}
+
+	err = db.QueryRowContext(ctx, ""+
+		"INSERT INTO wallets(wallet_pubkey, secret, user_id) "+
+		"VALUES($1, $2, $3) "+
+		"RETURNING id, wallet_pubkey, secret, msats, user_id",
+		hex.EncodeToString(nwcUri.WalletPubkey.Serialize()),
+		hex.EncodeToString(nwcUri.Secret.Serialize()),
+		u.Id).
+		Scan(&w.Id, &w.WalletPubkey, &w.Secret, &w.Msats, &w.UserId)
+	if err != nil {
+		return fmt.Errorf("failed to insert new wallet: %v", err)
+	}
+
+	ec.SetCookie(&http.Cookie{
+		Name:     "session",
+		HttpOnly: true,
+		Path:     "/",
+		Value:    session,
+		Secure:   true,
+		// TODO: refresh session
+		//   if session expires and user did not register, they will lose access to their wallet
+		Expires: time.Now().Add(60 * 60 * 24 * 30 * time.Second), // 30d
+	})
+	ec.Set("user", u)
+	ec.Set("wallet", w)
+	ec.Set("nwc", nwcUri)
+
+	return nil
+}
+
+func findSession(hc context.Context, ec echo.Context, sid string) error {
+	var (
+		db  = hc.Db
+		ctx = ec.Request().Context()
+		u   models.User
+		w   models.Wallet
+		err error
+	)
+
+	err = db.QueryRowContext(ctx, ""+
+		"SELECT u.id, u.name, u.created_at, COALESCE(u.ln_pubkey, ''), COALESCE(u.nostr_pubkey, '') "+
+		"FROM users u "+
+		"JOIN sessions s ON s.user_id = u.id "+
+		"WHERE s.id = $1", sid).
+		Scan(&u.Id, &u.Name, &u.CreatedAt, &u.LnPubkey, &u.NostrPubkey)
+	if err != nil {
+		return fmt.Errorf("session not found: %v", err)
+	}
+
+	err = db.QueryRowContext(ctx, ""+
+		"SELECT w.id, w.wallet_pubkey, w.secret, w.msats, w.user_id "+
+		"FROM wallets w "+
+		"JOIN users u ON u.id = w.user_id "+
+		"WHERE u.id = $1 "+
+		"LIMIT 1", u.Id).Scan(&w.Id, &w.WalletPubkey, &w.Secret, &w.Msats, &w.UserId)
+	if err != nil {
+		return fmt.Errorf("wallet not found: %v", err)
+	}
+
+	pkBytes, err := hex.DecodeString(w.WalletPubkey)
+	if err != nil {
+		return fmt.Errorf("failed to decode wallet pubkey: %v", err)
+	}
+	pk, err := secp256k1.ParsePubKey(pkBytes)
+	if err != nil {
+		return fmt.Errorf("failed to parse wallet pubkey: %v", err)
+	}
+
+	skBytes, err := hex.DecodeString(w.Secret)
+	if err != nil {
+		return fmt.Errorf("failed to decode wallet secret: %v", err)
+	}
+	sk, _ := secp256k1.PrivKeyFromBytes(skBytes)
+
+	ec.Set("user", u)
+	ec.Set("wallet", w)
+	ec.Set("nwc", &nwc.NwcConnection{
+		WalletPubkey: pk,
+		Relays:       nwc.Relays(),
+		Secret:       sk,
+	})
+
+	return nil
+}

server/router/router.go

@@ -1,26 +1,20 @@
 package router
 
 import (
-	"context"
+	"github.com/ekzyis/magicwallet/pages"
-
+	"github.com/ekzyis/magicwallet/server/router/context"
-	"github.com/ekzyis/magicwallet/db"
+	"github.com/ekzyis/magicwallet/server/router/middleware"
-	"github.com/ekzyis/magicwallet/lightning"
 	"github.com/labstack/echo/v4"
 )
 
-type Context struct {
+type Context = context.Context
-	context.Context
+
-	Environment    string
+func Handle(e *echo.Echo, hc Context) {
-	CommitShortSha string
+	e.GET("/", HandleIndex(hc), middleware.Session(hc))
-	Db             *db.DB
-	Lnd            *lightning.LNDClient
 }
 
-func (hc *Context) WithContext(ec echo.Context) context.Context {
+func HandleIndex(hc Context) echo.HandlerFunc {
-	ctx := ec.Request().Context()
+	return func(ec echo.Context) error {
-	ctx = context.WithValue(ctx, "env", hc.Environment)
+		return pages.Index().Render(hc.WithContext(ec), ec.Response().Writer)
-	ctx = context.WithValue(ctx, "session", ec.Get("session"))
+	}
-	ctx = context.WithValue(ctx, "commit", hc.CommitShortSha)
-	ctx = context.WithValue(ctx, "path", ec.Request().URL.Path)
-	return ctx
 }

server/server.go

@@ -2,6 +2,7 @@ package server
 
 import (
 	"github.com/ekzyis/magicwallet/server/router"
+	"github.com/ekzyis/magicwallet/server/router/context"
 	"github.com/labstack/echo/v4"
 	"github.com/labstack/echo/v4/middleware"
 )
@@ -10,7 +11,7 @@ type Server struct {
 	*echo.Echo
 }
 
-type Context = router.Context
+type Context = context.Context
 
 func New(hc Context) *Server {
 	e := echo.New()
@@ -31,7 +32,7 @@ func New(hc Context) *Server {
 	// TODO: attach error handler
 	// e.HTTPErrorHandler = ...
 
-	router.Init(e, hc)
+	router.Handle(e, hc)
 
 	s := &Server{e}