@libp2p/floodsub 11.0.25-cec2b1f34 → 11.0.25-ff9e5fc7c

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (11) hide show
  1. package/dist/index.min.js +1 -1
  2. package/dist/index.min.js.map +2 -2
  3. package/dist/src/decodeRpc.d.ts +5 -4
  4. package/dist/src/decodeRpc.d.ts.map +1 -1
  5. package/dist/src/decodeRpc.js.map +1 -1
  6. package/dist/src/sign.d.ts.map +1 -1
  7. package/dist/src/sign.js +7 -3
  8. package/dist/src/sign.js.map +1 -1
  9. package/package.json +8 -8
  10. package/src/decodeRpc.ts +5 -4
  11. package/src/sign.ts +8 -4
package/dist/src/decodeRpc.d.ts CHANGED
@@ -2,10 +2,11 @@ import type { RPC } from './message/rpc.ts';
2
2
  import type { DecodeOptions } from 'protons-runtime';
3
3
  /**
4
4
  * Limits applied when decoding incoming RPC messages. A single RPC frame is
5
- * already byte-capped by the length-prefixed stream (see `maxDataLength`), but
6
- * that bounds bytes, not element counts - protobuf packs many small repeated
7
- * entries into a few bytes. These caps bound the number of decoded elements so
8
- * a single frame cannot expand into millions of objects.
5
+ * already byte-capped by the underlying byte stream (`maxBufferSize`, which
6
+ * defaults to 4 MiB), but that bounds bytes, not element counts - protobuf
7
+ * packs many small repeated entries into a few bytes. These caps bound the
8
+ * number of decoded elements so a single frame cannot expand into millions of
9
+ * objects.
9
10
  */
10
11
  export interface DecodeRPCLimits {
11
12
  maxSubscriptions: number;
package/dist/src/decodeRpc.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"decodeRpc.d.ts","sourceRoot":"","sources":["../../src/decodeRpc.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAEpD;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,gBAAgB,EAAE,MAAM,CAAA;IACxB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,eAAO,MAAM,sBAAsB,EAAE,eAGpC,CAAA;AAED,MAAM,MAAM,eAAe,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;AAE1D;;;GAGG;AACH,wBAAgB,qBAAqB,CAAE,MAAM,EAAE,eAAe,GAAG,eAAe,CAK/E"}
1
+ {"version":3,"file":"decodeRpc.d.ts","sourceRoot":"","sources":["../../src/decodeRpc.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAEpD;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,gBAAgB,EAAE,MAAM,CAAA;IACxB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,eAAO,MAAM,sBAAsB,EAAE,eAGpC,CAAA;AAED,MAAM,MAAM,eAAe,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;AAE1D;;;GAGG;AACH,wBAAgB,qBAAqB,CAAE,MAAM,EAAE,eAAe,GAAG,eAAe,CAK/E"}
package/dist/src/decodeRpc.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"decodeRpc.js","sourceRoot":"","sources":["../../src/decodeRpc.ts"],"names":[],"mappings":"AAeA,MAAM,CAAC,MAAM,sBAAsB,GAAoB;IACrD,gBAAgB,EAAE,IAAI;IACtB,WAAW,EAAE,IAAI;CAClB,CAAA;AAID;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAE,MAAuB;IAC5D,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,gBAAgB;QACtC,QAAQ,EAAE,MAAM,CAAC,WAAW;KAC7B,CAAA;AACH,CAAC"}
1
+ {"version":3,"file":"decodeRpc.js","sourceRoot":"","sources":["../../src/decodeRpc.ts"],"names":[],"mappings":"AAgBA,MAAM,CAAC,MAAM,sBAAsB,GAAoB;IACrD,gBAAgB,EAAE,IAAI;IACtB,WAAW,EAAE,IAAI;CAClB,CAAA;AAID;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAE,MAAuB;IAC5D,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,gBAAgB;QACtC,QAAQ,EAAE,MAAM,CAAC,WAAW;KAC7B,CAAA;AACH,CAAC"}
package/dist/src/sign.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../src/sign.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC/C,OAAO,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAEtE,eAAO,MAAM,UAAU,yBAAyC,CAAA;AAEhE;;GAEG;AACH,wBAAsB,WAAW,CAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAoBpN;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CA4B9H;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAE,OAAO,EAAE,aAAa,GAAG,SAAS,CAoBnE"}
1
+ {"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../src/sign.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC/C,OAAO,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAEtE,eAAO,MAAM,UAAU,yBAAyC,CAAA;AAEhE;;GAEG;AACH,wBAAsB,WAAW,CAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAoBpN;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CA4B9H;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAE,OAAO,EAAE,aAAa,GAAG,SAAS,CAwBnE"}
package/dist/src/sign.js CHANGED
@@ -63,12 +63,16 @@ export function messagePublicKey(message) {
63
63
  if (message.from == null) {
64
64
  throw new Error('Could not get the public key from the originator id');
65
65
  }
66
- if (message.key != null) {
67
- return message.key;
68
- }
66
+ // an Ed25519/secp256k1 peer id embeds its own public key, so a key recovered
67
+ // from `from` is provably the author's; trust it over the supplied message.key
69
68
  if (message.from.publicKey != null) {
70
69
  return message.from.publicKey;
71
70
  }
71
+ // otherwise the supplied key must derive to the from peer id, else a message
72
+ // could be signed by one key while claiming a different author
73
+ if (message.key != null && message.from.equals(message.key.toMultihash().bytes)) {
74
+ return message.key;
75
+ }
72
76
  // We couldn't validate pubkey is from the originator, error
73
77
  throw new Error('Could not get the public key from the originator id');
74
78
  }
package/dist/src/sign.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"sign.js","sourceRoot":"","sources":["../../src/sign.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,EAAE,MAAM,IAAI,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC/D,OAAO,EAAE,UAAU,IAAI,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAKzC,MAAM,CAAC,MAAM,UAAU,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,CAAA;AAEhE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAE,UAAsB,EAAE,OAAkF,EAAE,MAA6C;IAC1L,2DAA2D;IAC3D,MAAM,aAAa,GAAkB;QACnC,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,IAAI,EAAE,oBAAoB,CAAC,UAAU,CAAC;KACvC,CAAA;IAED,+DAA+D;IAC/D,MAAM,KAAK,GAAG,gBAAgB,CAAC;QAC7B,UAAU;QACV,MAAM,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC/C,CAAC,CAAA;IAEF,aAAa,CAAC,SAAS,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtD,aAAa,CAAC,GAAG,GAAG,UAAU,CAAC,SAAS,CAAA;IAExC,OAAO,aAAa,CAAA;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAE,OAAsB,EAAE,MAA6C;IAC1G,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACjE,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IACpE,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IACxE,CAAC;IAED,iCAAiC;IACjC,MAAM,KAAK,GAAG,gBAAgB,CAAC;QAC7B,UAAU;QACV,MAAM,CAAC;YACL,GAAG,YAAY,CAAC,OAAO,CAAC;YACxB,SAAS,EAAE,SAAS;YACpB,GAAG,EAAE,SAAS;SACf,CAAC,CAAC,QAAQ,EAAE;KACd,CAAC,CAAA;IAEF,qBAAqB;IACrB,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;IAExC,0BAA0B;IAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAE,OAAsB;IACtD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,CAAC;IAED,oEAAoE;IACpE,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IACxE,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC,GAAG,CAAA;IACpB,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC,IAAI,CAAC,SAAS,CAAA;IAC/B,CAAC;IAED,4DAA4D;IAC5D,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;AACxE,CAAC"}
1
+ {"version":3,"file":"sign.js","sourceRoot":"","sources":["../../src/sign.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,EAAE,MAAM,IAAI,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC/D,OAAO,EAAE,UAAU,IAAI,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAKzC,MAAM,CAAC,MAAM,UAAU,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,CAAA;AAEhE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAE,UAAsB,EAAE,OAAkF,EAAE,MAA6C;IAC1L,2DAA2D;IAC3D,MAAM,aAAa,GAAkB;QACnC,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,IAAI,EAAE,oBAAoB,CAAC,UAAU,CAAC;KACvC,CAAA;IAED,+DAA+D;IAC/D,MAAM,KAAK,GAAG,gBAAgB,CAAC;QAC7B,UAAU;QACV,MAAM,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC/C,CAAC,CAAA;IAEF,aAAa,CAAC,SAAS,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtD,aAAa,CAAC,GAAG,GAAG,UAAU,CAAC,SAAS,CAAA;IAExC,OAAO,aAAa,CAAA;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAE,OAAsB,EAAE,MAA6C;IAC1G,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACjE,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IACpE,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IACxE,CAAC;IAED,iCAAiC;IACjC,MAAM,KAAK,GAAG,gBAAgB,CAAC;QAC7B,UAAU;QACV,MAAM,CAAC;YACL,GAAG,YAAY,CAAC,OAAO,CAAC;YACxB,SAAS,EAAE,SAAS;YACpB,GAAG,EAAE,SAAS;SACf,CAAC,CAAC,QAAQ,EAAE;KACd,CAAC,CAAA;IAEF,qBAAqB;IACrB,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;IAExC,0BAA0B;IAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAE,OAAsB;IACtD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,CAAC;IAED,oEAAoE;IACpE,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IACxE,CAAC;IAED,6EAA6E;IAC7E,+EAA+E;IAC/E,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC,IAAI,CAAC,SAAS,CAAA;IAC/B,CAAC;IAED,6EAA6E;IAC7E,+DAA+D;IAC/D,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QAChF,OAAO,OAAO,CAAC,GAAG,CAAA;IACpB,CAAC;IAED,4DAA4D;IAC5D,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;AACxE,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@libp2p/floodsub",
3
- "version": "11.0.25-cec2b1f34",
3
+ "version": "11.0.25-ff9e5fc7c",
4
4
  "description": "libp2p-floodsub, also known as pubsub-flood or just dumbsub, this implementation of pubsub focused on delivering an API for Publish/Subscribe, but with no CastTree Forming (it just floods the network).",
5
5
  "license": "Apache-2.0 OR MIT",
6
6
  "homepage": "https://github.com/libp2p/js-libp2p/tree/main/packages/floodsub#readme",
@@ -54,12 +54,12 @@
54
54
  "test:electron-main": "aegir test -t electron-main"
55
55
  },
56
56
  "dependencies": {
57
- "@libp2p/crypto": "5.1.21-cec2b1f34",
58
- "@libp2p/interface": "3.2.5-cec2b1f34",
59
- "@libp2p/interface-internal": "3.1.8-cec2b1f34",
60
- "@libp2p/peer-collections": "7.0.23-cec2b1f34",
61
- "@libp2p/peer-id": "6.0.12-cec2b1f34",
62
- "@libp2p/utils": "7.2.4-cec2b1f34",
57
+ "@libp2p/crypto": "5.1.21-ff9e5fc7c",
58
+ "@libp2p/interface": "3.2.5-ff9e5fc7c",
59
+ "@libp2p/interface-internal": "3.1.8-ff9e5fc7c",
60
+ "@libp2p/peer-collections": "7.0.23-ff9e5fc7c",
61
+ "@libp2p/peer-id": "6.0.12-ff9e5fc7c",
62
+ "@libp2p/utils": "7.2.4-ff9e5fc7c",
63
63
  "it-length-prefixed": "^11.0.1",
64
64
  "main-event": "^1.0.1",
65
65
  "multiformats": "^14.0.0",
@@ -69,7 +69,7 @@
69
69
  "uint8arrays": "^6.1.1"
70
70
  },
71
71
  "devDependencies": {
72
- "@libp2p/logger": "6.2.10-cec2b1f34",
72
+ "@libp2p/logger": "6.2.10-ff9e5fc7c",
73
73
  "@multiformats/multiaddr": "^13.0.3",
74
74
  "@types/sinon": "^21.0.1",
75
75
  "aegir": "^48.1.1",
package/src/decodeRpc.ts CHANGED
@@ -3,10 +3,11 @@ import type { DecodeOptions } from 'protons-runtime'
3
3
 
4
4
  /**
5
5
  * Limits applied when decoding incoming RPC messages. A single RPC frame is
6
- * already byte-capped by the length-prefixed stream (see `maxDataLength`), but
7
- * that bounds bytes, not element counts - protobuf packs many small repeated
8
- * entries into a few bytes. These caps bound the number of decoded elements so
9
- * a single frame cannot expand into millions of objects.
6
+ * already byte-capped by the underlying byte stream (`maxBufferSize`, which
7
+ * defaults to 4 MiB), but that bounds bytes, not element counts - protobuf
8
+ * packs many small repeated entries into a few bytes. These caps bound the
9
+ * number of decoded elements so a single frame cannot expand into millions of
10
+ * objects.
10
11
  */
11
12
  export interface DecodeRPCLimits {
12
13
  maxSubscriptions: number
package/src/sign.ts CHANGED
@@ -80,14 +80,18 @@ export function messagePublicKey (message: SignedMessage): PublicKey {
80
80
  throw new Error('Could not get the public key from the originator id')
81
81
  }
82
82
 
83
- if (message.key != null) {
84
- return message.key
85
- }
86
-
83
+ // an Ed25519/secp256k1 peer id embeds its own public key, so a key recovered
84
+ // from `from` is provably the author's; trust it over the supplied message.key
87
85
  if (message.from.publicKey != null) {
88
86
  return message.from.publicKey
89
87
  }
90
88
 
89
+ // otherwise the supplied key must derive to the from peer id, else a message
90
+ // could be signed by one key while claiming a different author
91
+ if (message.key != null && message.from.equals(message.key.toMultihash().bytes)) {
92
+ return message.key
93
+ }
94
+
91
95
  // We couldn't validate pubkey is from the originator, error
92
96
  throw new Error('Could not get the public key from the originator id')
93
97
  }