mirror/ditto
mirror/ditto
1
0
Fork 0
mirror of https://gitlab.com/soapbox-pub/ditto.git synced 2025-12-06 11:29:46 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

eventSchema: ensure the event ID matches its hash

Browse source
This commit is contained in:
Alex Gleason 2023-09-02 19:40:28 -05:00
parent 7595dfa2e5
commit 007565b513
No known key found for this signature in database
GPG key ID: 7211D1F99744FBB7
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
src/schemas/nostr.ts
View file

@ -1,4 +1,4 @@
import { verifySignature, z } from '@/deps.ts'; import { getEventHash, verifySignature, z } from '@/deps.ts';
import { jsonSchema, safeUrlSchema } from '../schema.ts'; import { jsonSchema, safeUrlSchema } from '../schema.ts';
@ -19,7 +19,9 @@ const eventSchema = z.object({
}); });
/** Nostr event schema that also verifies the event's signature. */ /** Nostr event schema that also verifies the event's signature. */
const signedEventSchema = eventSchema.refine(verifySignature); const signedEventSchema = eventSchema
.refine((event) => event.id === getEventHash(event), 'Event ID does not match hash')
.refine(verifySignature, 'Event signature is invalid');
/** Nostr relay filter schema. */ /** Nostr relay filter schema. */
const filterSchema = z.object({ const filterSchema = z.object({