@highway1/core 0.1.30 → 0.1.31

package/dist/index.js

@@ -1502,7 +1502,7 @@ function createMessageRouter(libp2p, verifyFn, dht, relayPeers) {
 function buildCircuitRelayAddr(relayAddr, targetPeerId) {
   return `${relayAddr}/p2p-circuit/p2p/${targetPeerId}`;
 }
-async function handleIncomingStream(stream, handlers, catchAllHandler, _verifyFn) {
+async function handleIncomingStream(stream, handlers, catchAllHandler, verifyFn) {
   try {
     const chunks = [];
     for await (const chunk of stream.source) {
@@ -1532,6 +1532,26 @@ async function handleIncomingStream(stream, handlers, catchAllHandler, _verifyFn
       });
       return;
     }
+    try {
+      const { signature, ...envelopeWithoutSig } = envelope;
+      const dataBytes = new TextEncoder().encode(JSON.stringify(envelopeWithoutSig));
+      const signatureBytes = Buffer.from(signature, "hex");
+      const hookValid = await verifyFn(signatureBytes, dataBytes);
+      if (!hookValid) {
+        logger5.warn("Message rejected by custom verifier", {
+          id: envelope.id,
+          from: envelope.from
+        });
+        return;
+      }
+    } catch (error) {
+      logger5.warn("Custom verification hook failed", {
+        id: envelope.id,
+        from: envelope.from,
+        error: error.message
+      });
+      return;
+    }
     logger5.info("Received message", {
       id: envelope.id,
       from: envelope.from,