@hive-p2p/server 1.0.59 → 1.0.61

package/core/arbiter.mjs

@@ -1,5 +1,5 @@
 import { CLOCK } from '../services/clock.mjs';
-import { GOSSIP, UNICAST, LOG_CSS } from './config.mjs';
+import { NODE, GOSSIP, UNICAST, LOG_CSS } from './config.mjs';
 
 // TRUST_BALANCE = seconds of ban if negative - never exceed MAX_TRUST if positive
 // Growing each second by 1000ms until 0
@@ -38,6 +38,7 @@ export class Arbiter {
 	 * - trustBalance = milliseconds of ban if negative
 	 * @type {Record<string, number>} */
 	trustBalances = {};
+	manualBanList = new Set();
 	bytesCounters = { gossip: {}, unicast: {} };
 	bytesCounterResetIn = 0;
 
@@ -73,7 +74,15 @@ export class Arbiter {
 		if (delta && this.verbose > 3) console.log(`%c(Arbiter: ${this.id}) ${peerId} +${delta}ms (${reason}). Updated: ${this.trustBalances[peerId]}ms.`, LOG_CSS.ARBITER);
 		if (this.isBanished(peerId) && this.verbose > 1) console.log(`%c(Arbiter: ${this.id}) Peer ${peerId} is now banished.`, LOG_CSS.ARBITER);
 	}
-	isBanished(peerId = 'toto') { return (this.trustBalances[peerId] || 0) < 0; }
+	/** MANUAL BAN (if enabled) @param {string} peerId */
+	setBanished(peerId) {
+		if (!this.manualBanList.has(peerId)) this.manualBanList.add(peerId);
+	}
+	/** Check if a peer is banished | based on trustBalances or manualBanList @param {string} peerId */
+	isBanished(peerId) {
+		if (!NODE.MANUAL_BAN_MODE) return (this.trustBalances[peerId] || 0) < 0;
+		else return this.manualBanList.has(peerId);
+	}
 
 	// MESSAGE VERIFICATION
 	/** @param {string} peerId @param {number} byteLength @param {'gossip' | 'unicast'} type */
@@ -90,7 +99,7 @@ export class Arbiter {
 	/** Call from HiveP2P module only! @param {string} from @param {any} message @param {Uint8Array} serialized @param {number} [powCheckFactor] default: 0.01 (1%) */
 	async digestMessage(from, message, serialized, powCheckFactor = .01) {
 		const { senderId, pubkey, topic, expectedEnd } = message; // avoid powControl() on banished peers
-		if (!this.#signatureControl(from, message, serialized)) return;
+		if (!await this.#signatureControl(from, message, serialized)) return;
 		if (!this.#lengthControl(from, topic ? 'gossip' : 'unicast', serialized, expectedEnd)) return;
 
 		const routeOrHopsOk = topic ? this.#hopsControl(from, message) : this.#routeLengthControl(from, message);
@@ -102,11 +111,11 @@ export class Arbiter {
 		return true;
 	}
 	/** @param {string} from @param {import('./gossip.mjs').GossipMessage} message @param {Uint8Array} serialized */
-	#signatureControl(from, message, serialized) {
+	async #signatureControl(from, message, serialized) {
 		try {
 			const { pubkey, signature, signatureStart } = message;
 			const signedData = serialized.subarray(0, signatureStart);
-			const signatureValid = this.cryptoCodex.verifySignature(pubkey, signature, signedData);
+			const signatureValid = await this.cryptoCodex.verifySignature(pubkey, signature, signedData);
 			if (!signatureValid) throw new Error('Gossip signature invalid');
 			this.adjustTrust(from, TRUST_VALUES.VALID_SIGNATURE, 'Gossip signature valid');
 			return true;

package/core/config.mjs

@@ -50,6 +50,8 @@ export const NODE = {
 	CONNECTION_UPGRADE_TIMEOUT: 15_000,
 	/** Flag to indicate if we are running in a browser environment | DON'T MODIFY THIS VALUE */
 	IS_BROWSER: isNode ? false : true,
+	/** Enable manual banning of peers through the Arbiter module | Default: false (useful for consensus based ban, arbiter.trustBalances remain accessible) */
+	MANUAL_BAN_MODE: false
 }
 
 export const SERVICE = {

package/core/crypto-codex.mjs

@@ -168,9 +168,9 @@ export class CryptoCodex {
 
 	// MESSSAGE READING (DESERIALIZATION AND SIGNATURE VERIFICATION INCLUDED)
 	/** @param {Uint8Array} publicKey @param {Uint8Array} dataToVerify @param {Uint8Array} signature */
-	verifySignature(publicKey, dataToVerify, signature) {
+	async verifySignature(publicKey, dataToVerify, signature) {
 		if (this.AVOID_CRYPTO) return true;
-		return ed25519.verify(dataToVerify, signature, publicKey);
+		return ed25519.verifyAsync(dataToVerify, signature, publicKey);
 	}
 	/** @param {Uint8Array} bufferView */
 	readBufferHeader(bufferView, readAssociatedId = true) {

package/core/node-services.mjs

@@ -56,7 +56,7 @@ export class NodeServices {
 			ws.on('error', (error) => console.error(`WebSocket error on Node #${this.id} with peer ${remoteId}:`, error.stack));
 
 			let remoteId;
-			ws.on('message', (data) => { // When peer proves his id, we can handle data normally
+			ws.on('message', async (data) => { // When peer proves his id, we can handle data normally
 				if (remoteId) for (const cb of this.peerStore.callbacks.data) cb(remoteId, data);
 				else { // FIRST MESSAGE SHOULD BE HANDSHAKE WITH ID
 					const d = new Uint8Array(data); if (d[0] > 127) return; // not unicast, ignore
@@ -68,7 +68,7 @@ export class NodeServices {
 
 					const { signatureStart, pubkey, signature } = message;
 					const signedData = d.subarray(0, signatureStart);
-					if (!this.cryptoCodex.verifySignature(pubkey, signature, signedData)) return;
+					if (!await this.cryptoCodex.verifySignature(pubkey, signature, signedData)) return;
 
 					remoteId = route[0];
 					this.peerStore.digestPeerNeighbors(remoteId, neighborsList); // Update known store

package/core/topologist.mjs

@@ -175,7 +175,7 @@ export class Topologist {
 				this.bootstrapsConnectionState.set(publicUrl, false);
 				for (const cb of this.peerStore.callbacks.disconnect) cb(remoteId, 'out');
 			}
-			ws.onmessage = (data) => {
+			ws.onmessage = async (data) => {
 				if (remoteId) for (const cb of this.peerStore.callbacks.data) cb(remoteId, data.data);
 				else { // FIRST MESSAGE SHOULD BE HANDSHAKE WITH ID
 					const d = new Uint8Array(data.data); if (d[0] > 127) return; // not unicast, ignore
@@ -187,7 +187,7 @@ export class Topologist {
 
 					const { signatureStart, pubkey, signature } = message;
 					const signedData = d.subarray(0, signatureStart);
-					if (!this.cryptoCodex.verifySignature(pubkey, signature, signedData)) return;
+					if (!await this.cryptoCodex.verifySignature(pubkey, signature, signedData)) return;
 
 					remoteId = route[0];
 					this.peerStore.digestPeerNeighbors(remoteId, neighborsList); // Update known store

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hive-p2p/server",
-  "version": "1.0.59",
+  "version": "1.0.61",
   "publishConfig": {
     "access": "public"
   },