highperfocused/go-nostr
1
0
Fork 0
mirror of https://github.com/nbd-wtf/go-nostr.git synced 2025-03-18 05:42:20 +01:00
Code Issues Packages Projects Releases Wiki Activity

nip46: check signatures incoming from bunkers by default.

Browse Source
This commit is contained in:
fiatjaf 2024-11-12 15:48:49 -03:00
parent a0bf181547
commit 903770f78d
1 changed files with 21 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
nip46/client.go
View File

@ -30,6 +30,9 @@ type BunkerClient struct {
// memoized
getPublicKeyResponse string
// SkipSignatureCheck can be set if you don't want to double-check incoming signatures
SkipSignatureCheck bool
}
// ConnectBunker establishes an RPC connection to a NIP-46 signer using the relays and secret provided in the bunkerURL.
@ -175,10 +178,25 @@ func (bunker *BunkerClient) GetPublicKey(ctx context.Context) (string, error) {
func (bunker *BunkerClient) SignEvent(ctx context.Context, evt *nostr.Event) error {
resp, err := bunker.RPC(ctx, "sign_event", []string{evt.String()})
if err == nil {
err = easyjson.Unmarshal([]byte(resp), evt)
if err != nil {
return err
}
return err
err = easyjson.Unmarshal([]byte(resp), evt)
if err != nil {
return err
}
if !bunker.SkipSignatureCheck {
if ok := evt.CheckID(); !ok {
return fmt.Errorf("sign_event response from bunker has invalid id")
}
if ok, _ := evt.CheckSignature(); !ok {
return fmt.Errorf("sign_event response from bunker has invalid signature")
}
}
return nil
}
func (bunker *BunkerClient) NIP44Encrypt(