Fix leak of invoice for sender

Author: ekzyis

api/resolvers/wallet.js

@@ -767,10 +767,8 @@ const resolvers = {
         }
       }
 
-      if (invoice) {
-        const inv = await models.invoice.findUnique({ where: { id: invoice.id } })
-        return await logContextFromBolt11(inv.bolt11)
-      }
+      // XXX never return invoice as context because it might leak sensitive sender details
+      // if (invoice) { ... }
 
       return context
     }

worker/paidAction.js

@@ -443,6 +443,7 @@ export async function paidActionCanceling ({ data: { invoiceId, ...args }, model
       const decoded = await parsePaymentRequest({ request: bolt11 })
       logger.info(
         `invoice for ${formatSats(msatsToSats(decoded.mtokens))} canceled by payer`, {
+          bolt11,
           invoiceId: transitionedInvoice.id
         })
     }