applesauce-signers 4.1.0 → 4.2.0

package/dist/signers/extension-signer.js

@@ -1,4 +1,5 @@
 import { verifyEvent } from "nostr-tools";
+import { isHexKey } from "applesauce-core/helpers";
 /** AN error that is throw when the window.nostr extension is missing */
 export class ExtensionMissingError extends Error {
 }
@@ -16,7 +17,10 @@ export class ExtensionSigner {
             throw new ExtensionMissingError("Signer extension missing");
         if (this.pubkey)
             return this.pubkey;
-        this.pubkey = await window.nostr.getPublicKey();
+        const key = await window.nostr.getPublicKey();
+        if (!isHexKey(key))
+            throw new Error("Extension returned an invalid public key");
+        this.pubkey = key;
         return this.pubkey;
     }
     async signEvent(template) {

package/dist/signers/nostr-connect-signer.js

@@ -1,5 +1,5 @@
 import { logger } from "applesauce-core";
-import { getHiddenContent, unixNow } from "applesauce-core/helpers";
+import { getHiddenContent, isHexKey, unixNow } from "applesauce-core/helpers";
 import { createDefer } from "applesauce-core/promise";
 import { PrivateKeySigner, getConnectionMethods, } from "applesauce-signers";
 import { nanoid } from "nanoid";
@@ -265,7 +265,10 @@ export class NostrConnectSigner {
         if (this.pubkey)
             return this.pubkey;
         await this.requireConnection();
-        return this.makeRequest(NostrConnectMethod.GetPublicKey, []);
+        const key = await this.makeRequest(NostrConnectMethod.GetPublicKey, []);
+        if (!isHexKey(key))
+            throw new Error("Remote signer returned an invalid public key");
+        return key;
     }
     /** Request to sign an event */
     async signEvent(template) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "applesauce-signers",
-  "version": "4.1.0",
+  "version": "4.2.0",
   "description": "Signer classes for applesauce",
   "type": "module",
   "main": "dist/index.js",
@@ -47,7 +47,7 @@
     "@noble/hashes": "^1.7.1",
     "@noble/secp256k1": "^1.7.1",
     "@scure/base": "^1.2.4",
-    "applesauce-core": "^4.1.0",
+    "applesauce-core": "^4.2.0",
     "debug": "^4.4.0",
     "nanoid": "^5.0.9",
     "nostr-tools": "~2.17",