diff --git a/22.md b/22.md index 60ec4be..34924f6 100644 --- a/22.md +++ b/22.md @@ -2,7 +2,7 @@ `optional` -`depends on: NUT-21` +`depends on: NUT-21, NUT-12` --- @@ -183,8 +183,16 @@ and make the request as we usually would. `AuthProofs` are single-use. The wallet MUST delete the `AuthProof` after a successful request, and SHOULD delete it even if request results in an error. If the wallet runs out of `AuthProofs`, it can [mint new ones](#minting-blind-authentication-tokens) using its clear authentication token (CAT). +### DLEQs + +To prevent a mint pinning blind authentication token wallets SHOULD check that the returned `AuthProofs` contain a valid DLEQ as defined in [NUT-12](./12.md). + ## Mint +### DLEQs + +The mint MUST return a DLEQ proof with all signatures it returns as defined in [NUT-12](./12.md) + ### Signaling protected endpoints and settings The mint lists each protected endpoint that requires a blind authentication token (BAT) in the `MintBlindAuthSetting` in its [NUT-06][06] info response: