@nostrify/nostrify 0.47.0 → 0.48.1

package/.turbo/turbo-build.log

@@ -1,19 +1,32 @@
 
 
-> @nostrify/nostrify@0.46.9 build /home/sid/repos/nostrify/packages/nostrify
+> @nostrify/nostrify@0.48.0 build /home/sid/repos/nostrify/packages/nostrify
 > npx tsc -p tsconfig.json && node ../../esbuild.config.js --package ./
 
 npm warn Unknown env config "verify-deps-before-run". This will stop working in the next major version of npm.
 npm warn Unknown env config "_jsr-registry". This will stop working in the next major version of npm.
-⠙Building with esbuild...
+⠙⠙Building with esbuild...
 
-  dist/NRelay1.js               8.9kb
-  dist/NSchema.js               5.8kb
-  dist/NPool.js                 5.0kb
-  dist/test/TestRelayServer.js  4.4kb
-  dist/NSet.js                  4.1kb
-  ...and 25 more output files...
+  dist/NRelay1.js                       8.9kb
+  dist/NSchema.js                       5.8kb
+  dist/NPool.js                         5.0kb
+  dist/test/TestRelayServer.js          4.4kb
+  dist/NSet.js                          4.1kb
+  dist/NConnectSigner.js                3.9kb
+  dist/ln/LNURL.js                      3.3kb
+  dist/NIP98.js                         2.7kb
+  dist/NBrowserSigner.js                2.6kb
+  dist/uploaders/BlossomUploader.js     1.9kb
+  dist/uploaders/NostrBuildUploader.js  1.9kb
+  dist/test/MockRelay.js                1.4kb
+  dist/BunkerURI.js                     1.4kb
+  dist/NKinds.js                        1.1kb
+  dist/NIP05.js                         1.1kb
+  dist/NSecSigner.js                    1.1kb
+  dist/utils/Machina.js                 925b 
+  dist/NCache.js                        828b 
+  ...and 13 more output files...
 
-⚡ Done in 24ms
+⚡ Done in 27ms
 Copying source files...
 Done!

package/.turbo/turbo-test.log

@@ -1,91 +1,99 @@
 
 
-> @nostrify/nostrify@0.46.8 test /home/sid/repos/nostrify/packages/nostrify
+> @nostrify/nostrify@0.48.0 test /home/sid/repos/nostrify/packages/nostrify
 > node --test "**/*.test.ts"
 
-✔ BunkerURI (2.901722ms)
-✔ BunkerURI.fromJSON (0.681727ms)
-✔ NBrowserSigner - without extension (2.955361ms)
-✔ NBrowserSigner - with extension polyfill (142.479686ms)
-✔ NBrowserSigner.nip44 - with extension polyfill (63.176698ms)
-✔ NBrowserSigner.nip04 - with extension polyfill (94.046199ms)
-✔ NBrowserSigner.getRelays - with extension polyfill (1.225726ms)
-✔ NBrowserSigner - missing nip44 support (0.470316ms)
-✔ NBrowserSigner - missing nip04 support (0.596869ms)
-✔ NBrowserSigner - feature detection (0.692134ms)
-✔ NCache (4.463457ms)
-✔ NConnectSigner.signEvent with nip04 encryption (264.497854ms)
-✔ NConnectSigner.signEvent with nip44 encryption (151.108865ms)
-✔ NIP05.lookup (82.449297ms)
-✔ NIP05.lookup with invalid values but valid profile pointer (5.343535ms)
-✔ NIP05.lookup with invalid document (5.910931ms)
-✔ NIP50.parseInput (6.388441ms)
-✔ NIP50.parseInput with negated token (0.443007ms)
-✔ NIP98.template (3.769298ms)
-✔ NIP98.template with payload (18.668676ms)
-✔ NIP98.verify (102.562862ms)
-✔ NIP98.verify fails with missing header (4.419038ms)
-✔ NIP98.verify fails with missing token (2.752191ms)
-✔ NIP98.verify fails with invalid token (4.587427ms)
-✔ NIP98.verify fails with invalid event (16.989187ms)
-✔ NIP98.verify fails with wrong event kind (40.621459ms)
-✔ NIP98.verify fails with wrong request URL (41.071101ms)
-✔ NIP98.verify fails with wrong request method (62.625645ms)
-✔ NIP98.verify fails with expired event (20.760162ms)
-✔ NIP98.verify fails with invalid payload (51.97091ms)
-✔ NKinds (3.308412ms)
-✔ NPool.query (368.093259ms)
-✔ NPool.req (266.969001ms)
-✔ NPool.event (232.161184ms)
-✔ NRelay1.query (280.362725ms)
-✔ NRelay1.query mismatched filter (245.542477ms)
-✔ NRelay1.req (247.658198ms)
-✔ NRelay1.event (216.357493ms)
-﹣ NRelay1 backoff (0.334682ms) # SKIP
+✔ BunkerURI (8.032428ms)
+✔ BunkerURI.fromJSON (1.011522ms)
+✔ NBrowserSigner - without extension (10.371695ms)
+✔ NBrowserSigner - with extension polyfill (329.050343ms)
+✔ NBrowserSigner.nip44 - with extension polyfill (188.734388ms)
+✔ NBrowserSigner.nip04 - with extension polyfill (70.232955ms)
+✔ NBrowserSigner.getRelays - with extension polyfill (2.229952ms)
+✔ NBrowserSigner - missing nip44 support (5.683803ms)
+✔ NBrowserSigner - missing nip04 support (0.456198ms)
+✔ NBrowserSigner - feature detection (4.388092ms)
+✔ NCache (28.041794ms)
+✔ NConnectSigner.signEvent with nip04 encryption (357.348402ms)
+✔ NConnectSigner.signEvent with nip44 encryption (179.341911ms)
+✔ NIP05.lookup (110.840506ms)
+✔ NIP05.lookup with invalid values but valid profile pointer (6.688672ms)
+✔ NIP05.lookup with invalid document (6.384854ms)
+✔ NIP50.parseInput (5.363623ms)
+✔ NIP50.parseInput with negated token (0.425237ms)
+✔ NIP98.template (26.510529ms)
+✔ NIP98.template with payload (57.914746ms)
+✔ NIP98.verify (172.889905ms)
+✔ NIP98.verify fails with missing header (2.182248ms)
+✔ NIP98.verify fails with missing token (1.647725ms)
+✔ NIP98.verify fails with invalid token (1.945311ms)
+✔ NIP98.verify fails with invalid event (49.451318ms)
+✔ NIP98.verify fails with wrong event kind (70.598745ms)
+✔ NIP98.verify fails with wrong request URL (86.043572ms)
+✔ NIP98.verify fails with wrong request method (52.311711ms)
+✔ NIP98.verify fails with expired event (70.877534ms)
+✔ NIP98.verify fails with invalid payload (235.890385ms)
+✔ NIP98Client.fetch - basic GET request (204.607488ms)
+✔ NIP98Client.fetch - POST request with body (224.461879ms)
+✔ NIP98Client.fetch - with Request object input (110.155447ms)
+✔ NIP98Client.fetch - with URL object input (69.82442ms)
+✔ NIP98Client.fetch - uses default fetch when not provided (43.370412ms)
+✔ NIP98Client.fetch - preserves existing headers (75.087655ms)
+✔ NIP98Client.fetch - event can be verified with NIP98.verify (76.739559ms)
+✔ NIP98Client.fetch - handles different HTTP methods (226.588206ms)
+✔ NKinds (15.675591ms)
+✔ NPool.query (635.444667ms)
+✔ NPool.req (107.060121ms)
+✔ NPool.event (66.952535ms)
+✔ NRelay1.query (538.03435ms)
+✔ NRelay1.query mismatched filter (133.455243ms)
+✔ NRelay1.req (141.418776ms)
+✔ NRelay1.event (32.63963ms)
+﹣ NRelay1 backoff (1.106008ms) # SKIP
 ▶ NRelay1 idleTimeout
-  ✔ websocket opens (40.531572ms)
-  ✔ websocket closes after idleTimeout (150.405626ms)
-  ✔ websocket wakes up during activity (14.544161ms)
-✔ NRelay1 idleTimeout (209.795356ms)
-✔ NRelay1.count rejects when the server sends CLOSED (6.440892ms)
-✔ NRelay1 closes when it receives a binary message (5.03225ms)
-✔ n.id (3.950608ms)
-✔ n.bech32 (1.817636ms)
-✔ n.filter (10.95275ms)
-✔ n.event (2.561941ms)
-✔ n.metadata (11.862022ms)
-✔ NSecSigner (178.164717ms)
-✔ NSecSigner.nip44 (31.935079ms)
-✔ NSet (19.978352ms)
-✔ NSet.add (replaceable) (0.615308ms)
-✔ NSet.add (parameterized) (0.985888ms)
-✔ NSet.add (deletion) (0.380918ms)
-✔ Construct a RelayError from the reason message (1.717692ms)
-✔ Throw a new RelayError if the OK message is false (0.750801ms)
-✔ LNURL.fromString (7.817616ms)
-✔ LNURL.fromLightningAddress (0.932529ms)
-✔ LNURL.toString (1.933713ms)
-✔ LNURL.getDetails (111.66131ms)
-✔ LNURL.getInvoice (13.562812ms)
-✔ ErrorRelay (112.209428ms)
-✔ MockRelay (3.019126ms)
-﹣ BlossomUploader.upload (1.127947ms) # SKIP
-﹣ NostrBuildUploader.upload (2.842008ms) # SKIP
-✔ CircularSet (2.247513ms)
-✔ push, iterate, & close (103.751782ms)
-✔ close & reopen (0.982257ms)
-✔ aborts with signal (51.656203ms)
-✔ already aborted signal in constructor (1.251916ms)
-✔ push after abort (0.906129ms)
-✔ multiple messages in queue (0.531637ms)
-✔ N64 (8.171994ms)
-✔ N64.encodeEvent (0.513338ms)
-✔ N64.decodeEvent (1.449988ms)
-ℹ tests 77
+  ✔ websocket opens (13.835447ms)
+  ✔ websocket closes after idleTimeout (150.566912ms)
+  ✔ websocket wakes up during activity (27.121071ms)
+✔ NRelay1 idleTimeout (204.19181ms)
+✔ NRelay1.count rejects when the server sends CLOSED (16.828862ms)
+✔ NRelay1 closes when it receives a binary message (11.148585ms)
+✔ n.id (8.094721ms)
+✔ n.bech32 (5.484882ms)
+✔ n.filter (18.52384ms)
+✔ n.event (4.463901ms)
+✔ n.metadata (24.462155ms)
+✔ NSecSigner (219.082425ms)
+✔ NSecSigner.nip44 (37.591612ms)
+✔ NSet (24.542373ms)
+✔ NSet.add (replaceable) (0.656583ms)
+✔ NSet.add (parameterized) (1.209522ms)
+✔ NSet.add (deletion) (0.555925ms)
+✔ Construct a RelayError from the reason message (2.598397ms)
+✔ Throw a new RelayError if the OK message is false (0.892217ms)
+✔ LNURL.fromString (21.686509ms)
+✔ LNURL.fromLightningAddress (6.521633ms)
+✔ LNURL.toString (2.187929ms)
+✔ LNURL.getDetails (149.682932ms)
+✔ LNURL.getInvoice (7.231692ms)
+✔ ErrorRelay (189.467472ms)
+✔ MockRelay (4.420616ms)
+﹣ BlossomUploader.upload (1.337574ms) # SKIP
+﹣ NostrBuildUploader.upload (2.212377ms) # SKIP
+✔ CircularSet (14.732834ms)
+✔ push, iterate, & close (109.180767ms)
+✔ close & reopen (0.918119ms)
+✔ aborts with signal (53.398331ms)
+✔ already aborted signal in constructor (0.819754ms)
+✔ push after abort (1.01538ms)
+✔ multiple messages in queue (0.693816ms)
+✔ N64 (13.23745ms)
+✔ N64.encodeEvent (0.744977ms)
+✔ N64.decodeEvent (1.885313ms)
+ℹ tests 85
 ℹ suites 0
-ℹ pass 74
+ℹ pass 82
 ℹ fail 0
 ℹ cancelled 0
 ℹ skipped 3
 ℹ todo 0
-ℹ duration_ms 2192.909865
+ℹ duration_ms 2367.358539

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## 0.48.1
+
+### Patch Changes
+
+- remove happy-dom dependency, fix improper test in NRelay1
+
+## 0.48.0
+
+### Minor Changes
+
+- Remove all JSR imports
+
+## 0.47.1
+
+### Patch Changes
+
+- rebuild package for NIP98Client member
+
 ## 0.47.0
 
 ### Minor Changes
@@ -65,7 +83,8 @@
 All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
-and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+and this project adheres to
+[Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## 0.46.4 - 2025-07-15
 
@@ -77,7 +96,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 
-- Fix fetch calls in browser by binding globalThis (NIP05, LNURL, BlossomUploader).
+- Fix fetch calls in browser by binding globalThis (NIP05, LNURL,
+  BlossomUploader).
 - BlossomUploader: use a browser-supported file hashing method.
 
 ## 0.46.0 - 2025-05-10
@@ -102,7 +122,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 
-- BREAKING: Redesign the `LNURL` module to be a stateful class, more similar to `URL`.
+- BREAKING: Redesign the `LNURL` module to be a stateful class, more similar to
+  `URL`.
 
 ## 0.44.0 - 2025-04-23
 
@@ -114,7 +135,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 
-- Moved `NSeedSigner`, `NPhraseSigner`, and `NCustodial` into a separate `@nostrify/seed` package.
+- Moved `NSeedSigner`, `NPhraseSigner`, and `NCustodial` into a separate
+  `@nostrify/seed` package.
 
 ## 0.42.1 - 2025-04-10
 
@@ -149,7 +171,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 
-- NRelay1: batch ids-only filters and filters for replaceable events by author/kind within the same event loop.
+- NRelay1: batch ids-only filters and filters for replaceable events by
+  author/kind within the same event loop.
 
 ## 0.40.0 - 2025-03-26
 
@@ -248,7 +271,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 
-- NRelay1: added `idleTimeout` option to automatically close inactive connections.
+- NRelay1: added `idleTimeout` option to automatically close inactive
+  connections.
 - NRelay1: support `await using` syntax.
 
 ## 0.31.0 - 2024-09-09
@@ -256,11 +280,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 
 - Added ReplyBotPolicy to block replies from bots in the same second.
-- Added AuthorPolicy to reject events from authors without a kind 0, or with a particular kind 0.
+- Added AuthorPolicy to reject events from authors without a kind 0, or with a
+  particular kind 0.
 
 ### Changed
 
-- BREAKING: Moved moderation policies to the `@nostrify/policies` package. Replace `@nostrify/nostrify/policies` with `@nostrify/policies` in your project.
+- BREAKING: Moved moderation policies to the `@nostrify/policies` package.
+  Replace `@nostrify/nostrify/policies` with `@nostrify/policies` in your
+  project.
 
 ### Fixed
 
@@ -300,7 +327,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 
-- BREAKING: NDatabase: add kind, pubkey, and created_at columns to nostr_tags table. These columns are non-nullable, so the old database will need to be deleted or manually migrated.
+- BREAKING: NDatabase: add kind, pubkey, and created_at columns to nostr_tags
+  table. These columns are non-nullable, so the old database will need to be
+  deleted or manually migrated.
 
 ## [0.26.3] - 2024-07-18
 
@@ -324,7 +353,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 
-- BREAKING: NPool: remove `reqRelays` option, add `reqRouter`. Rename `eventRelays` to `eventRouter`.
+- BREAKING: NPool: remove `reqRelays` option, add `reqRouter`. Rename
+  `eventRelays` to `eventRouter`.
 
 ## [0.25.0] - 2024-06-29
 
@@ -342,7 +372,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 
-- NDatabase: add intrinsic limits to filters when applicable, skip 0 limit filters.
+- NDatabase: add intrinsic limits to filters when applicable, skip 0 limit
+  filters.
 
 ## [0.23.2] - 2024-06-13
 
@@ -385,7 +416,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 
-- NostrMetadata: added `website` field so `NSchema.metadata()` returns the correct type.
+- NostrMetadata: added `website` field so `NSchema.metadata()` returns the
+  correct type.
 
 ### Changed
 
@@ -410,7 +442,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 
-- `NUploader` interface and two uploader classes under `@nostrify/nostrify/uploaders`.
+- `NUploader` interface and two uploader classes under
+  `@nostrify/nostrify/uploaders`.
 - Blossom uploader (`BlossomUploader`) to upload files to Blossom servers.
 - nostr.build uploader (`NostrBuildUploader`) to upload files to nostr.build.
 - `NIP98` module to verify NIP-98 Requests.
@@ -425,11 +458,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 
-- NConnectSigner: NIP-44 encryption support by setting `{ encryption: 'nip44' }` in the constructor.
+- NConnectSigner: NIP-44 encryption support by setting `{ encryption: 'nip44' }`
+  in the constructor.
 
 ### Fixed
 
-- NDatabase: Postgres FTS now correctly uses the `searchText` option to create the search index.
+- NDatabase: Postgres FTS now correctly uses the `searchText` option to create
+  the search index.
 
 ## [0.20.0] - 2024-05-16
 
@@ -439,7 +474,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 
-- BREAKING: NDatabase `fts5` option has been renamed to `fts`, and now accepts a string of either `'sqlite'` or `'postgres'`.
+- BREAKING: NDatabase `fts5` option has been renamed to `fts`, and now accepts a
+  string of either `'sqlite'` or `'postgres'`.
 
 ## [0.19.2] - 2024-05-16
 
@@ -451,14 +487,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 
-- NDatabase: fix deleting everything for the author when they delete a single event.
+- NDatabase: fix deleting everything for the author when they delete a single
+  event.
 
 ## [0.19.0] - 2024-05-13
 
 ### Fixed
 
 - Improved performance of NDatabase when querying replaceable events by author.
-- NConnect.signEvent now throws if the connect message was rejected by the relay.
+- NConnect.signEvent now throws if the connect message was rejected by the
+  relay.
 
 ## [0.18.0] - 2024-05-04
 
@@ -468,13 +506,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [0.17.1] - 2024-04-29
 
-Redeploy to JSR (to hopefully fix [npm compatibility](https://github.com/jsr-io/jsr/issues/446)).
+Redeploy to JSR (to hopefully fix
+[npm compatibility](https://github.com/jsr-io/jsr/issues/446)).
 
 ## [0.17.0] - 2024-04-28
 
 ### Changed
 
-- BREAKING: change `NRelay.req` return type from an AsyncGenerator to an AsyncIterable.
+- BREAKING: change `NRelay.req` return type from an AsyncGenerator to an
+  AsyncIterable.
 
 ## [0.16.0] - 2024-04-25
 
@@ -498,7 +538,8 @@ Redeploy to JSR (to hopefully fix [npm compatibility](https://github.com/jsr-io/
 
 ### Fixed
 
-- `NConnectSigner` - fixed race condition between sending messages and receiving responses.
+- `NConnectSigner` - fixed race condition between sending messages and receiving
+  responses.
 
 ## [0.14.1] - 2024-04-24
 
@@ -510,7 +551,8 @@ Redeploy to JSR (to hopefully fix [npm compatibility](https://github.com/jsr-io/
 
 ### Fixed
 
-- BREAKING: fixed `NConnectSigner.connect` method signature (it doesn't need to accept a pubkey).
+- BREAKING: fixed `NConnectSigner.connect` method signature (it doesn't need to
+  accept a pubkey).
 
 ## [0.13.0] - 2024-04-24
 
@@ -528,7 +570,8 @@ Redeploy to JSR (to hopefully fix [npm compatibility](https://github.com/jsr-io/
 
 ### Added
 
-- Added `AnyPolicy` policy, a pipeline policy which rejects only if all policies reject.
+- Added `AnyPolicy` policy, a pipeline policy which rejects only if all policies
+  reject.
 
 ### Changed
 
@@ -538,7 +581,8 @@ Redeploy to JSR (to hopefully fix [npm compatibility](https://github.com/jsr-io/
 
 ### Added
 
-- Added moderation policies. Including the `NPolicy` interface and several policies.
+- Added moderation policies. Including the `NPolicy` interface and several
+  policies.
 
 ## [0.10.2] - 2024-04-21
 

package/NIP98.test.ts

@@ -1,8 +1,6 @@
 import { test } from "node:test";
 import { deepStrictEqual, rejects } from "node:assert";
 import { generateSecretKey } from "nostr-tools";
-import { ZodError } from "zod";
-
 import { NIP98 } from "./NIP98.ts";
 import { NSecSigner } from "./NSecSigner.ts";
 import { N64 } from "./utils/mod.ts";
@@ -78,7 +76,7 @@ await test("NIP98.verify fails with invalid token", async () => {
 
   await rejects(
     () => NIP98.verify(request),
-    ZodError,
+    (e) => e instanceof Error && e.message === "Invalid token",
   );
 });
 

package/NIP98.ts

@@ -1,8 +1,8 @@
-import type { NostrEvent } from '@nostrify/types';
-import { encodeHex } from '@std/encoding/hex';
-import { verifyEvent as _verifyEvent } from 'nostr-tools';
+import type { NostrEvent } from "@nostrify/types";
+import { toHex } from "@smithy/util-hex-encoding";
+import { verifyEvent as _verifyEvent } from "nostr-tools";
 
-import { N64 } from './utils/N64.ts';
+import { N64 } from "./utils/N64.ts";
 
 /** [NIP-98](https://github.com/nostr-protocol/nips/blob/master/98.md) HTTP auth. */
 export class NIP98 {
@@ -10,27 +10,27 @@ export class NIP98 {
   static async template(
     request: Request,
     opts?: { validatePayload?: boolean },
-  ): Promise<Omit<NostrEvent, 'id' | 'pubkey' | 'sig'>> {
+  ): Promise<Omit<NostrEvent, "id" | "pubkey" | "sig">> {
     const {
-      validatePayload = ['POST', 'PUT', 'PATCH'].includes(request.method),
+      validatePayload = ["POST", "PUT", "PATCH"].includes(request.method),
     } = opts ?? {};
     const { method, url } = request;
 
     const tags = [
-      ['method', method],
-      ['u', url],
+      ["method", method],
+      ["u", url],
     ];
 
     if (validatePayload) {
       const buffer = await request.clone().arrayBuffer();
-      const digest = await crypto.subtle.digest('SHA-256', buffer);
+      const digest = await crypto.subtle.digest("SHA-256", buffer);
 
-      tags.push(['payload', encodeHex(digest)]);
+      tags.push(["payload", toHex(new Uint8Array(digest))]);
     }
 
     return {
       kind: 27235,
-      content: '',
+      content: "",
       tags,
       created_at: Math.floor(Date.now() / 1000),
     };
@@ -47,48 +47,62 @@ export class NIP98 {
   ): Promise<NostrEvent> {
     const {
       maxAge = 60_000,
-      validatePayload = ['POST', 'PUT', 'PATCH'].includes(request.method),
+      validatePayload = ["POST", "PUT", "PATCH"].includes(request.method),
       verifyEvent = _verifyEvent,
     } = opts ?? {};
 
-    const header = request.headers.get('authorization');
+    const header = request.headers.get("authorization");
     if (!header) {
-      throw new Error('Missing Nostr authorization header');
+      throw new Error("Missing Nostr authorization header");
     }
 
     const token = header.match(/^Nostr (.+)$/)?.[1];
     if (!token) {
-      throw new Error('Missing Nostr authorization token');
+      throw new Error("Missing Nostr authorization token");
+    }
+
+    let event: NostrEvent;
+    try {
+      event = N64.decodeEvent(token);
+    } catch (e) {
+      if (
+        e instanceof TypeError &&
+        e.message.includes("Incorrect padding on base64")
+      ) {
+        throw new Error("Invalid token");
+      } else {
+        throw e;
+      }
     }
 
-    const event = N64.decodeEvent(token);
     if (!verifyEvent(event)) {
-      throw new Error('Event signature is invalid');
+      throw new Error("Event signature is invalid");
     }
 
     const age = Date.now() - (event.created_at * 1_000);
-    const u = event.tags.find(([name]) => name === 'u')?.[1];
-    const method = event.tags.find(([name]) => name === 'method')?.[1];
-    const payload = event.tags.find(([name]) => name === 'payload')?.[1];
+    const u = event.tags.find(([name]) => name === "u")?.[1];
+    const method = event.tags.find(([name]) => name === "method")?.[1];
+    const payload = event.tags.find(([name]) => name === "payload")?.[1];
 
     if (event.kind !== 27235) {
-      throw new Error('Event must be kind 27235');
+      throw new Error("Event must be kind 27235");
     }
     if (u !== request.url) {
-      throw new Error('Event URL does not match request URL');
+      throw new Error("Event URL does not match request URL");
     }
     if (method !== request.method) {
-      throw new Error('Event method does not match HTTP request method');
+      throw new Error("Event method does not match HTTP request method");
     }
     if (age >= maxAge) {
-      throw new Error('Event expired');
+      throw new Error("Event expired");
     }
     if (validatePayload && payload !== undefined) {
       const buffer = await request.clone().arrayBuffer();
-      const digest = await crypto.subtle.digest('SHA-256', buffer);
+      const digest = await crypto.subtle.digest("SHA-256", buffer);
+      const hexed = toHex(new Uint8Array(digest));
 
-      if (encodeHex(digest) !== payload) {
-        throw new Error('Event payload does not match request body');
+      if (hexed !== payload) {
+        throw new Error("Event payload does not match request body");
       }
     }
 

package/NRelay1.test.ts

@@ -157,9 +157,12 @@ await test("NRelay1 idleTimeout", async () => {
   await using relay = new NRelay1(server.url, { idleTimeout: 100 });
 
   await it("websocket opens", async () => {
-    await new Promise((resolve) => setTimeout(resolve, 20));
+    await new Promise((resolve) =>
+      relay.socket.addEventListener(WebsocketEvent.open, resolve, {
+        once: true,
+      })
+    );
     deepStrictEqual(relay.socket.readyState, WebSocket.OPEN);
-    await new Promise((resolve) => setTimeout(resolve, 20));
   });
 
   await it("websocket closes after idleTimeout", async () => {

package/dist/NIP98.d.ts

@@ -1,10 +1,10 @@
-import type { NostrEvent } from '@nostrify/types';
+import type { NostrEvent } from "@nostrify/types";
 /** [NIP-98](https://github.com/nostr-protocol/nips/blob/master/98.md) HTTP auth. */
 export declare class NIP98 {
     /** Generate an auth event template from a Request. */
     static template(request: Request, opts?: {
         validatePayload?: boolean;
-    }): Promise<Omit<NostrEvent, 'id' | 'pubkey' | 'sig'>>;
+    }): Promise<Omit<NostrEvent, "id" | "pubkey" | "sig">>;
     /** Compare the auth event with the request, throwing a human-readable error if validation fails. */
     static verify(request: Request, opts?: {
         maxAge?: number;

package/dist/NIP98.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NIP98.d.ts","sourceRoot":"","sources":["../NIP98.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAMlD,oFAAoF;AACpF,qBAAa,KAAK;IAChB,sDAAsD;WACzC,QAAQ,CACnB,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GACnC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,QAAQ,GAAG,KAAK,CAAC,CAAC;IA0BrD,oGAAoG;WACvF,MAAM,CACjB,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE;QACL,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC;KAC9C,GACA,OAAO,CAAC,UAAU,CAAC;CAkDvB"}
+{"version":3,"file":"NIP98.d.ts","sourceRoot":"","sources":["../NIP98.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAMlD,oFAAoF;AACpF,qBAAa,KAAK;IAChB,sDAAsD;WACzC,QAAQ,CACnB,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GACnC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,QAAQ,GAAG,KAAK,CAAC,CAAC;IA0BrD,oGAAoG;WACvF,MAAM,CACjB,OAAO,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE;QACL,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC;KAC9C,GACA,OAAO,CAAC,UAAU,CAAC;CAgEvB"}