Verify invoice amount in lightning address withdrawal (#501)

* Verify invoice amount in lightning address withdrawal

* Add benthecarman to contributors.txt

api/resolvers/wallet.js

@@ -336,6 +336,9 @@ export default {
         throw new Error('description hash does not match')
       }
 
+      if (!decoded.mtokens || BigInt(decoded.mtokens) !== BigInt(milliamount)) {
+        throw new Error('invoice has incorrect amount')
+      }
       // take pr and createWithdrawl
       return await createWithdrawal(parent, { invoice: res2.pr, maxFee }, { me, models, lnd })
     },

contributors.txt

@@ -3,4 +3,5 @@ kr
 ekzyis
 WeAreAllSatoshi
 rleed
-bitcoinplebdev
+bitcoinplebdev
+benthecarman