Coracle/nostrlib
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

khatru: nip86 "u" tag checking normalization fix.

Browse Source
This commit is contained in:
fiatjaf
2025-09-05 11:06:17 -03:00
parent 0770f217a5
commit 5f8b069f5d
1 changed files with 16 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
khatru/nip86.go
View File

@@ -86,13 +86,25 @@ func (rl *Relay) HandleNIP86(w http.ResponseWriter, r *http.Request) {
goto respond
}
if uTag := evt.Tags.Find("u"); uTag == nil || rl.getBaseURL(r) != uTag[1] {
resp.Error = fmt.Sprintf("invalid 'u' tag, expected '%s', got '%s'", rl.getBaseURL(r), uTag[1])
uTag := evt.Tags.Find("u")
if uTag == nil {
resp.Error = "missing \"u\" tag"
goto respond
} else if pht := evt.Tags.FindWithValue("payload", hex.EncodeToString(payloadHash[:])); pht == nil {
}
expected := nostr.NormalizeURL(rl.getBaseURL(r))
got := nostr.NormalizeURL(uTag[1])
if expected != got {
resp.Error = fmt.Sprintf("invalid \"u\" tag, expected '%s', got '%s'", expected, got)
goto respond
}
if pht := evt.Tags.FindWithValue("payload", hex.EncodeToString(payloadHash[:])); pht == nil {
resp.Error = "invalid auth event payload hash"
goto respond
} else if evt.CreatedAt < nostr.Now()-30 {
}
if evt.CreatedAt < nostr.Now()-30 {
resp.Error = "auth event is too old"
goto respond
}