feat: check puubkey to be allow before accept event

dezh-tech · Feb 17, 2025 · 85754fc · 85754fc
1 parent aa71488
commit 85754fc
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/.github/workflows/zapoli-build.yml b/.github/workflows/zapoli-build.yml
@@ -48,7 +48,6 @@ jobs:
           tags: |
             ${{ steps.meta.outputs.tags }},${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.BASE_TAG }}
           labels: ${{ steps.meta.outputs.labels }}
-          images: ${{ env.IMAGES }}  # Use the defined image names
 
       - name: Generate artifact attestation
         uses: actions/attest-build-provenance@v1

diff --git a/zapoli/main.go b/zapoli/main.go
@@ -64,6 +64,13 @@ func main() {
 	relay.CountEvents = append(relay.CountEvents, persistStore.CountEvents)
 	relay.DeleteEvent = append(relay.DeleteEvent, persistStore.DeleteEvent)
 	relay.ReplaceEvent = append(relay.ReplaceEvent, persistStore.ReplaceEvent)
+	relay.RejectEvent = append(relay.RejectEvent, func(ctx context.Context, event *nostr.Event) (reject bool, msg string) {
+		if !slices.Contains(management.AllowedPubkeys, event.PubKey) {
+			return true, "unauthorized"
+		}
+
+		return false, "ok"
+	})
 
 	relay.RejectEvent = append(relay.RejectEvent, policies.ValidateKind)
 
@@ -78,7 +85,7 @@ func main() {
 	bl.DeleteBlob = append(bl.DeleteBlob, blobStorage.Delete)
 	bl.RejectUpload = append(bl.RejectUpload, func(ctx context.Context, auth *nostr.Event, size int, ext string) (bool, string, int) {
 		if !slices.Contains(management.AllowedPubkeys, auth.PubKey) {
-			return true, "Unauthorized to upload.", http.StatusUnauthorized
+			return true, "unauthorized", http.StatusUnauthorized
 		}
 
 		return false, "ok", http.StatusOK