aljaz/ditto
1
0
Fork 0
mirror of https://github.com/aljazceru/ditto.git synced 2025-12-30 19:54:24 +01:00
Code Issues Packages Projects Releases Wiki Activity

auth98: make requireProof obtain the event over NIP-46

Browse Source
This commit is contained in:
Alex Gleason
2023-09-02 19:33:13 -05:00
parent c8d6389132
commit 7595dfa2e5
3 changed files with 31 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
src/middleware/auth98.ts
View File

@@ -1,7 +1,8 @@
import { type AppMiddleware } from '@/app.ts';
import { HTTPException } from '@/deps.ts';
import { parseAuthRequest, type ParseAuthRequestOpts } from '@/utils/nip98.ts';
import { buildAuthEventTemplate, parseAuthRequest, type ParseAuthRequestOpts } from '@/utils/nip98.ts';
import { localRequest } from '@/utils/web.ts';
import { signNostrConnect } from '@/sign.ts';
/**
* NIP-98 auth.
@@ -22,12 +23,16 @@ function auth98(opts: ParseAuthRequestOpts = {}): AppMiddleware {
}
const requireProof: AppMiddleware = async (c, next) => {
const header = c.req.headers.get('x-nostr-sign');
const pubkey = c.get('pubkey');
const proof = c.get('proof');
const proof = c.get('proof') || header ? await obtainProof() : undefined;
// if (!proof && hasWebsocket(c.req)) {
// // TODO: attempt to sign nip98 event through websocket
// }
/** Get the proof over Nostr Connect. */
async function obtainProof() {
const req = localRequest(c);
const event = await buildAuthEventTemplate(req);
return signNostrConnect(event, c);
}
if (!pubkey || !proof || proof.pubkey !== pubkey) {
throw new HTTPException(401);