From 798093e708b812df36c6ea57ef4c3540adc98a65 Mon Sep 17 00:00:00 2001 From: Egge Date: Thu, 6 Feb 2025 10:44:26 +0100 Subject: [PATCH] enfore valid DLEQ on minting auth proofs --- src/auth/CashuAuthWallet.ts | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/src/auth/CashuAuthWallet.ts b/src/auth/CashuAuthWallet.ts index 02ef7e6a..6991b56e 100644 --- a/src/auth/CashuAuthWallet.ts +++ b/src/auth/CashuAuthWallet.ts @@ -165,7 +165,11 @@ class CashuAuthWallet { outputs: outputData.map((d) => d.blindedMessage) }; const { signatures } = await this.mint.mint(mintPayload, clearAuthToken); - return outputData.map((d, i) => d.toProof(signatures[i], keyset)); + const authProofs = outputData.map((d, i) => d.toProof(signatures[i], keyset)); + if (authProofs.some((p) => !p.dleqValid)) { + throw new Error('Mint returned auth proofs with invalid DLEQ'); + } + return authProofs; } }