highperfocused/grimoire
1
0
Fork 0
mirror of https://github.com/purrgrammer/grimoire.git synced 2026-06-15 00:58:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

refactor: reduce NIP-46 permissions to minimum required

Browse Source 
- Only request get_public_key permission
- Only request signing for event kinds Grimoire actually uses:
  - Kind 5: Delete events
  - Kind 777: Spells
  - Kind 30777: Spellbooks
- Removed unnecessary encryption and other event kind permissions
- Follows principle of least privilege
- Improves user trust and security
This commit is contained in:
Claude
2026-01-05 16:57:52 +00:00
parent 2c470b2bb6
commit 4901fa0fd5
1 changed files with 4 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
src/components/LoginDialog.tsx
View File

@@ -59,19 +59,10 @@ export default function LoginDialog({ open, onOpenChange }: LoginDialogProps) {
name: "Grimoire",
url: window.location.origin,
permissions: [
"sign_event:1", // Short text notes
"sign_event:3", // Contact list
"sign_event:6", // Reposts
"sign_event:7", // Reactions
"sign_event:1984", // Reporting
"sign_event:9734", // Zap requests
"sign_event:9735", // Zap receipts
"sign_event:10002", // Relay list
"sign_event:30023", // Long-form content
"nip04_encrypt",
"nip04_decrypt",
"nip44_encrypt",
"nip44_decrypt",
"get_public_key",
"sign_event:5", // Delete events
"sign_event:777", // Spells
"sign_event:30777", // Spellbooks
],
});