@unicitylabs/nostr-js-sdk 0.3.0 → 0.3.1

package/README.md

@@ -5,6 +5,7 @@ A TypeScript SDK for Nostr protocol with Unicity extensions. Works in both Node.
 ## Features
 
 - **NIP-17 Private Messages** - Gift-wrapped private direct messages with sender anonymity
+- **NIP-42 Client Authentication** - Automatic relay authentication for protected relays
 - **NIP-44 Encryption** - Modern ChaCha20-Poly1305 AEAD encryption with HKDF
 - **BIP-340 Schnorr Signatures** - Full support for secp256k1 Schnorr signatures
 - **NIP-04 Encryption** - Legacy AES-256-CBC encryption with ECDH key agreement
@@ -470,6 +471,7 @@ const parsed = await PaymentRequestProtocol.parsePaymentRequest(event, keyManage
 | 14 | CHAT_MESSAGE | Private direct message rumor (NIP-17) |
 | 15 | READ_RECEIPT | Read receipt rumor (NIP-17) |
 | 1059 | GIFT_WRAP | Gift-wrapped message (NIP-17) |
+| 22242 | AUTH | Client authentication to relay (NIP-42) |
 | 30078 | APP_DATA | Application-specific data (nametag bindings) |
 | 31111 | AGENT_PROFILE | Agent profile information |
 | 31112 | AGENT_LOCATION | Agent GPS location |

package/dist/browser/index.js

@@ -5585,6 +5585,8 @@ const REACTION = 7;
 const GIFT_WRAP = 1059;
 /** NIP-65: Relay list metadata */
 const RELAY_LIST = 10002;
+/** NIP-42: Client authentication to relay */
+const AUTH = 22242;
 /** NIP-78: Application-specific data (parameterized replaceable) */
 const APP_DATA = 30078;
 // ============================================================================
@@ -5698,6 +5700,7 @@ var EventKinds = /*#__PURE__*/Object.freeze({
     AGENT_LOCATION: AGENT_LOCATION,
     AGENT_PROFILE: AGENT_PROFILE,
     APP_DATA: APP_DATA,
+    AUTH: AUTH,
     CHAT_MESSAGE: CHAT_MESSAGE,
     CONTACTS: CONTACTS,
     DELETION: DELETION,
@@ -5998,6 +6001,13 @@ const DEFAULT_QUERY_TIMEOUT_MS = 5000;
 const DEFAULT_RECONNECT_INTERVAL_MS = 1000;
 const DEFAULT_MAX_RECONNECT_INTERVAL_MS = 30000;
 const DEFAULT_PING_INTERVAL_MS = 30000;
+/**
+ * Delay before resubscribing after NIP-42 authentication.
+ * This gives the relay time to process the AUTH response before we send
+ * subscription requests. Without this delay, some relays may still reject
+ * the subscriptions as the AUTH hasn't been fully processed yet.
+ */
+const AUTH_RESUBSCRIBE_DELAY_MS = 100;
 /**
  * NostrClient provides the main interface for Nostr protocol operations.
  */
@@ -6342,6 +6352,9 @@ class NostrClient {
                 case 'CLOSED':
                     this.handleClosedMessage(json);
                     break;
+                case 'AUTH':
+                    this.handleAuthMessage(_url, json);
+                    break;
             }
         }
         catch {
@@ -6422,6 +6435,33 @@ class NostrClient {
             subscription.listener.onError(subscriptionId, `Subscription closed: ${message}`);
         }
     }
+    /**
+     * Handle AUTH message from relay (NIP-42 authentication challenge).
+     */
+    handleAuthMessage(relayUrl, json) {
+        if (json.length < 2)
+            return;
+        const challenge = json[1];
+        const relay = this.relays.get(relayUrl);
+        if (!relay?.socket || !relay.connected)
+            return;
+        // Create and sign the auth event (kind 22242)
+        const authEvent = Event.create(this.keyManager, {
+            kind: AUTH,
+            tags: [
+                ['relay', relayUrl],
+                ['challenge', challenge],
+            ],
+            content: '',
+        });
+        // Send AUTH response
+        const message = JSON.stringify(['AUTH', authEvent.toJSON()]);
+        relay.socket.send(message);
+        // Re-send subscriptions after auth (relay may have ignored pre-auth requests)
+        setTimeout(() => {
+            this.resubscribeAll(relayUrl);
+        }, AUTH_RESUBSCRIBE_DELAY_MS);
+    }
     /**
      * Disconnect from all relays.
      */
@@ -10654,5 +10694,5 @@ function isReadReceipt(message) {
     return message.kind === 15;
 }
 
-export { AGENT_LOCATION, AGENT_PROFILE, APP_DATA, bech32 as Bech32, CHAT_MESSAGE, CLOSED, CLOSING, CONNECTING, CONTACTS, CallbackEventListener, DELETION, ENCRYPTED_DM, Event, EventKinds, FILE_METADATA, Filter, FilterBuilder, GIFT_WRAP, nip04 as NIP04, nip17 as NIP17, nip44 as NIP44, NametagBinding, NametagUtils, NostrClient, NostrKeyManager, OPEN, PAYMENT_REQUEST, PAYMENT_REQUEST_RESPONSE, PROFILE, PaymentRequestProtocol, REACTION, READ_RECEIPT, RECOMMEND_RELAY, RELAY_LIST, SEAL, schnorr as SchnorrSigner, TEXT_NOTE, TOKEN_TRANSFER, TokenTransferProtocol, areSameNametag, createBindingEvent, createGiftWrap, createNametagToPubkeyFilter, createPubkeyToNametagFilter, createReadReceipt, createWebSocket, decode, decodeNpub, decodeNsec, encode, encodeNpub, encodeNsec, extractMessageData, formatForDisplay, getName, getPublicKey, getPublicKeyHex, hashNametag, isChatMessage, isEphemeral, isParameterizedReplaceable, isPhoneNumber, isReadReceipt, isReplaceable, isValidBindingEvent, normalizeNametag, parseAddressFromEvent, parseNametagHashFromEvent, sign, signHex, unwrap, verify, verifyHex };
+export { AGENT_LOCATION, AGENT_PROFILE, APP_DATA, AUTH, bech32 as Bech32, CHAT_MESSAGE, CLOSED, CLOSING, CONNECTING, CONTACTS, CallbackEventListener, DELETION, ENCRYPTED_DM, Event, EventKinds, FILE_METADATA, Filter, FilterBuilder, GIFT_WRAP, nip04 as NIP04, nip17 as NIP17, nip44 as NIP44, NametagBinding, NametagUtils, NostrClient, NostrKeyManager, OPEN, PAYMENT_REQUEST, PAYMENT_REQUEST_RESPONSE, PROFILE, PaymentRequestProtocol, REACTION, READ_RECEIPT, RECOMMEND_RELAY, RELAY_LIST, SEAL, schnorr as SchnorrSigner, TEXT_NOTE, TOKEN_TRANSFER, TokenTransferProtocol, areSameNametag, createBindingEvent, createGiftWrap, createNametagToPubkeyFilter, createPubkeyToNametagFilter, createReadReceipt, createWebSocket, decode, decodeNpub, decodeNsec, encode, encodeNpub, encodeNsec, extractMessageData, formatForDisplay, getName, getPublicKey, getPublicKeyHex, hashNametag, isChatMessage, isEphemeral, isParameterizedReplaceable, isPhoneNumber, isReadReceipt, isReplaceable, isValidBindingEvent, normalizeNametag, parseAddressFromEvent, parseNametagHashFromEvent, sign, signHex, unwrap, verify, verifyHex };
 //# sourceMappingURL=index.js.map