@mblaney/holster 1.0.23 → 1.0.25

package/src/user.js

@@ -60,8 +60,9 @@ const User = (opt, wire) => {
             const update = {
               auth: JSON.stringify({enc: enc, salt: salt}),
             }
-            const propertySignatures = await SEA.signProperties(update, user.is)
-            const graph = utils.graph(pub, update, propertySignatures, data.pub)
+            const timestamp = Date.now()
+            const sig = await SEA.signTimestamp(timestamp, user.is)
+            const graph = utils.graph(pub, update, sig, data.pub, timestamp)
             wire.put(graph, err => {
               if (err) {
                 done(`error putting ${update} on ${pub}: ${err}`)
@@ -72,15 +73,14 @@ const User = (opt, wire) => {
             return
           }
 
-          // Migrate old per-node signatures to per-property signatures
-          // Check if data has per-property signatures
-          if (
-            !data._ ||
-            !data._["s"] ||
-            Object.keys(data._["s"]).length === 0
-          ) {
-            // Data has old per-node signatures, migrate to per-property
-            // Copy all properties from existing data, excluding metadata
+          // Migration: broadcast signed data on login if enabled
+          // Can be enabled by setting localStorage.setItem("holster_migrate_signatures", "true")
+          const migrationEnabled =
+            typeof globalThis.localStorage !== "undefined" &&
+            globalThis.localStorage.getItem("holster_migrate_signatures") ===
+              "true"
+
+          if (migrationEnabled) {
             const migrationData = {}
             for (const key of Object.keys(data)) {
               if (
@@ -91,16 +91,15 @@ const User = (opt, wire) => {
                 migrationData[key] = data[key]
               }
             }
-            // Sign each property individually
-            const propertySignatures = await SEA.signProperties(
-              migrationData,
-              user.is,
-            )
+            // Sign the timestamp for migration
+            const timestamp = Date.now()
+            const sig = await SEA.signTimestamp(timestamp, user.is)
             const graph = utils.graph(
               pub,
               migrationData,
-              propertySignatures,
+              sig,
               data.pub,
+              timestamp,
             )
             wire.put(graph, err => {
               if (err) {
@@ -111,10 +110,9 @@ const User = (opt, wire) => {
               }
               done(null)
             })
-            return
+          } else {
+            done(null)
           }
-
-          return done(null)
         },
         {wait: 5000},
       )
@@ -200,9 +198,10 @@ const User = (opt, wire) => {
           }
 
           const pub = "~" + pair.pub
-          // Sign each property individually for new account
-          const propertySignatures = await SEA.signProperties(data, pair)
-          const graph = utils.graph(pub, data, propertySignatures, pair.pub)
+          // Sign the timestamp for new account
+          const timestamp = Date.now()
+          const sig = await SEA.signTimestamp(timestamp, pair)
+          const graph = utils.graph(pub, data, sig, pair.pub, timestamp)
           wire.put(graph, err => {
             creating = false
             if (err) {
@@ -359,10 +358,11 @@ const User = (opt, wire) => {
         }
 
         const data = {username: null, pub: null, epub: null, auth: null}
-        // Sign each property individually for account deletion
-        const propertySignatures = await SEA.signProperties(data, user.is)
+        // Sign the timestamp for account deletion
+        const timestamp = Date.now()
+        const sig = await SEA.signTimestamp(timestamp, user.is)
         const pub = "~" + user.is.pub
-        const graph = utils.graph(pub, data, propertySignatures, user.is.pub)
+        const graph = utils.graph(pub, data, sig, user.is.pub, timestamp)
         wire.put(graph, err => {
           if (err) {
             ack(`error putting null on ${pub}: ${err}`)

package/src/utils.js

@@ -80,22 +80,29 @@ export const userPublicKey = "_holster_user_public_key"
 
 // graph converts objects to graph format with updated states,
 // with optional meta data to verify signed data.
-export const graph = (soul, data, sig, pub) => {
-  const timestamp = Date.now()
+export const graph = (soul, data, sig, pub, timestamp) => {
   const g = {[soul]: {_: {"#": soul, ">": {}}}}
 
   for (const [key, value] of Object.entries(data)) {
     if (key !== "_" && key !== userPublicKey && key !== userSignature) {
       g[soul][key] = value
-      g[soul]._[">"][key] = timestamp
+      g[soul]._[">"][key] = timestamp || Date.now()
     }
   }
-  // Store per-property signatures in node._["s"]
-  // sig is an object with per-property signatures
-  if (sig && pub) {
+  // Store signatures in node._["s"]
+  // sig can be:
+  // - object: per-property signatures (legacy format)
+  // - string: timestamp signature (new format)
+  if (sig && pub && timestamp) {
     g[soul]._["s"] = {}
-    for (const [key, signature] of Object.entries(sig)) {
-      g[soul]._["s"][key] = signature
+    if (typeof sig === "string") {
+      // Timestamp signature: store with timestamp as key
+      g[soul]._["s"][timestamp] = sig
+    } else if (typeof sig === "object") {
+      // Per-property signatures: store with property names as keys
+      for (const [key, signature] of Object.entries(sig)) {
+        g[soul]._["s"][key] = signature
+      }
     }
     g[soul][userPublicKey] = pub
     g[soul]._[">"][userPublicKey] = timestamp

package/src/wire.js

@@ -354,6 +354,9 @@ const Wire = opt => {
   const api = send => {
     return {
       get: (lex, cb, _opt) => {
+        if (lex && typeof lex["."] === "number") {
+          lex = {...lex, ".": String(lex["."])}
+        }
         // Mark requested soul as something we want to store
         if (lex && lex["#"]) {
           pendingReferences.add(lex["#"])
@@ -403,6 +406,9 @@ const Wire = opt => {
         }
       },
       on: (lex, cb, _get, _opt) => {
+        if (lex && typeof lex["."] === "number") {
+          lex = {...lex, ".": String(lex["."])}
+        }
         const soul = lex && lex["#"]
         if (!soul || !cb) return