pezkuwichain/pwap
1
0
Fork 0
mirror of https://github.com/pezkuwichain/pwap.git synced 2026-04-22 06:47:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: DEX improvements - Asset Hub balance fetching and Treasury admin support

Browse Source 
- WalletContext: Use Asset Hub API for PEZ/wHEZ/wUSDT balance queries
- AddLiquidityModal: Handle native token balance via system.account
- auth.ts: Add Treasury accounts to admin list for pool creation and minting

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Kurdistan Tech Ministry
2026-02-04 23:27:36 +03:00
parent 6d0437a3af
commit cd6da00ef8
3 changed files with 57 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
shared/utils/auth.ts
+19 -4
View File
@@ -8,11 +8,20 @@
export const FOUNDER_ADDRESS_FALLBACK = '5GgTgG9sRmPQAYU1RsTejZYnZRjwzKZKWD3awtuqjHioki45';
/**
* Check if given address is the sudo account (admin/founder)
* SECURITY: Only allows admin access when connected to blockchain with valid sudo key
* Treasury and admin accounts that have elevated permissions
* These accounts can perform admin operations like creating pools, minting tokens, etc.
*/
export const TREASURY_ADDRESSES = [
'5EhCpn82QtdU53MF6PoNFrKHgSrsfcAxFTMwrn3JYf9dioQw', // Treasury 1 - wUSDT issuer/admin
] as const;
/**
* Check if given address is the sudo account (admin/founder) or a treasury account
* SECURITY: Only allows admin access when connected to blockchain with valid sudo key,
* or if the address is a known treasury account
* @param address - Substrate address to check
* @param sudoKey - Sudo key fetched from blockchain (REQUIRED for admin access)
* @returns true if address matches sudo key from blockchain
* @returns true if address matches sudo key from blockchain or is a treasury account
*/
export const isFounderWallet = (
address: string | null | undefined,
@@ -20,6 +29,11 @@ export const isFounderWallet = (
): boolean => {
if (!address) return false;
// Check if address is a known treasury account
if (TREASURY_ADDRESSES.includes(address as typeof TREASURY_ADDRESSES[number])) {
return true;
}
// SECURITY FIX: ONLY use dynamic sudo key from blockchain
// No fallback to hardcoded address - admin access requires active blockchain connection
if (!sudoKey || sudoKey === '') {
@@ -99,6 +113,7 @@ export const getUserRole = (
sudoKey?: string | null
): string => {
if (!address) return 'Guest';
if (isFounderWallet(address, sudoKey)) return 'Sudo (Admin)';
if (address === sudoKey) return 'Sudo (Admin)';
if (TREASURY_ADDRESSES.includes(address as typeof TREASURY_ADDRESSES[number])) return 'Treasury (Admin)';
return 'User';
};