From bdef5ac224d561da9d58c2ee65fffba20d9346fe Mon Sep 17 00:00:00 2001
From: fiatjaf <fiatjaf@gmail.com>
Date: Tue, 16 Dec 2025 13:21:53 -0300
Subject: [PATCH] khatru: fix possible race condition with authed keys.

---
 khatru/handlers.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/khatru/handlers.go b/khatru/handlers.go
index d0fc24b..7be728a 100644
--- a/khatru/handlers.go
+++ b/khatru/handlers.go
@@ -322,8 +322,8 @@ func (rl *Relay) HandleWebsocket(w http.ResponseWriter, r *http.Request) {
 				case *nostr.AuthEnvelope:
 					wsBaseUrl := strings.Replace(rl.getBaseURL(r), "http", "ws", 1)
 					if pubkey, err := nip42.ValidateAuthEvent(env.Event, ws.Challenge, wsBaseUrl); err == nil {
-						total := len(ws.AuthedPublicKeys)
 						ws.authLock.Lock()
+						total := len(ws.AuthedPublicKeys)
 						if idx := slices.Index(ws.AuthedPublicKeys, pubkey); idx == -1 {
 							// this public key is not authenticated
 							if total < rl.MaxAuthenticatedClients {