thunder-bridge 0.8.8 → 0.8.10

package/dist/index.cjs

@@ -30,6 +30,8 @@ __export(index_exports, {
   REQUEST_IN_FLIGHT: () => REQUEST_IN_FLIGHT,
   ThunderBridge: () => ThunderBridge,
   UnverifiedRecipientError: () => UnverifiedRecipientError,
+  answerVerifyChallenge: () => answerVerifyChallenge,
+  answerVerifyChallengeRequest: () => answerVerifyChallengeRequest,
   answerWebhookChallenge: () => answerWebhookChallenge,
   answerWebhookChallengeRequest: () => answerWebhookChallengeRequest,
   bankRail: () => bankRail,
@@ -1287,6 +1289,151 @@ function minorScaleOf(currency) {
   return 10 ** minorUnitsOf(currency);
 }
 
+// ../core/ed25519.ts
+var ALGORITHM = { name: "Ed25519" };
+var SIGNATURE_BYTES = 64;
+var PUBLIC_KEY_BYTES = 32;
+var PKCS8_HEADER = hexToBytes("302e020100300506032b657004220420");
+async function verifyHex(publicKeyHex, signatureHex, payload) {
+  if (!isHex(publicKeyHex) || publicKeyHex.length !== PUBLIC_KEY_BYTES * 2) return false;
+  if (!isHex(signatureHex) || signatureHex.length !== SIGNATURE_BYTES * 2) return false;
+  try {
+    const key = await crypto.subtle.importKey(
+      "raw",
+      asBuffer2(hexToBytes(publicKeyHex)),
+      ALGORITHM,
+      false,
+      ["verify"]
+    );
+    return await crypto.subtle.verify(
+      ALGORITHM,
+      key,
+      asBuffer2(hexToBytes(signatureHex)),
+      asBuffer2(payload)
+    );
+  } catch {
+    return false;
+  }
+}
+function asBuffer2(bytes) {
+  return bytes.buffer instanceof ArrayBuffer ? bytes : new Uint8Array(bytes);
+}
+
+// src/webhook.ts
+var SIGNATURE_HEADER = "x-signature";
+var TIMESTAMP_HEADER = "x-timestamp";
+var SHARED_SECRET_PREFIX = "sha256=";
+var GATEWAY_KEY_PREFIX = "ed25519=";
+var DEFAULT_TOLERANCE_SECS = 300;
+var CHALLENGE = "webhook-challenge";
+var VERIFY_CHALLENGE = "verify-challenge";
+async function verifyWebhookSignature(body, signature, credential, timestamp, options = {}) {
+  if (!recent(timestamp, options.toleranceSecs ?? DEFAULT_TOLERANCE_SECS)) return false;
+  if (typeof credential !== "string") {
+    if (!signature.startsWith(GATEWAY_KEY_PREFIX)) return false;
+    return verifyHex(
+      credential.publicKey.toLowerCase(),
+      signature.slice(GATEWAY_KEY_PREFIX.length).toLowerCase(),
+      signed(timestamp, body)
+    );
+  }
+  if (signature.startsWith(GATEWAY_KEY_PREFIX)) return false;
+  const received = signature.startsWith(SHARED_SECRET_PREFIX) ? signature.slice(SHARED_SECRET_PREFIX.length) : signature;
+  return equalInConstantTime(await sign(credential, timestamp, body), received.toLowerCase());
+}
+async function parseWebhook(body, signature, credential, timestamp, options = {}) {
+  if (!await verifyWebhookSignature(body, signature, credential, timestamp, options)) return null;
+  const text2 = typeof body === "string" ? body : new TextDecoder().decode(body);
+  try {
+    return paymentFromWire(JSON.parse(text2));
+  } catch {
+    return null;
+  }
+}
+async function parseWebhookRequest(request, credential, options = {}) {
+  const signature = request.headers.get(SIGNATURE_HEADER);
+  const timestamp = request.headers.get(TIMESTAMP_HEADER);
+  if (signature === null || timestamp === null) return null;
+  return parseWebhook(await request.text(), signature, credential, timestamp, options);
+}
+async function parseWatchedWebhook(body, signature, credential, timestamp, options = {}) {
+  if (!await verifyWebhookSignature(body, signature, credential, timestamp, options)) return null;
+  const text2 = typeof body === "string" ? body : new TextDecoder().decode(body);
+  try {
+    return triggerEventFromWire(JSON.parse(text2));
+  } catch {
+    return null;
+  }
+}
+async function parseWatchedWebhookRequest(request, credential, options = {}) {
+  const signature = request.headers.get(SIGNATURE_HEADER);
+  const timestamp = request.headers.get(TIMESTAMP_HEADER);
+  if (signature === null || timestamp === null) return null;
+  return parseWatchedWebhook(await request.text(), signature, credential, timestamp, options);
+}
+async function answerWebhookChallenge(body, signature, credential, timestamp, options = {}) {
+  if (!await verifyWebhookSignature(body, signature, credential, timestamp, options)) return null;
+  const text2 = typeof body === "string" ? body : new TextDecoder().decode(body);
+  const nonce = challenged(text2);
+  if (nonce === null) return null;
+  if (typeof credential !== "string") return JSON.stringify({ nonce });
+  return JSON.stringify({
+    nonce,
+    signature: `${SHARED_SECRET_PREFIX}${await hmacHex(credential, nonce)}`
+  });
+}
+async function answerWebhookChallengeRequest(request, credential, options = {}) {
+  const signature = request.headers.get(SIGNATURE_HEADER);
+  const timestamp = request.headers.get(TIMESTAMP_HEADER);
+  if (signature === null || timestamp === null) return null;
+  const answer = await answerWebhookChallenge(
+    await request.clone().text(),
+    signature,
+    credential,
+    timestamp,
+    options
+  );
+  return answer === null ? null : new Response(answer, { headers: { "content-type": "application/json" } });
+}
+function challenged(text2) {
+  return nonceOf(text2, CHALLENGE);
+}
+function nonceOf(text2, type) {
+  try {
+    const said = JSON.parse(text2);
+    if (said["type"] !== type || typeof said["nonce"] !== "string") return null;
+    return said["nonce"];
+  } catch {
+    return null;
+  }
+}
+function answerVerifyChallenge(body) {
+  const nonce = nonceOf(body, VERIFY_CHALLENGE);
+  return nonce === null ? null : JSON.stringify({ nonce });
+}
+async function answerVerifyChallengeRequest(request) {
+  if (request.method !== "POST") return null;
+  const answer = answerVerifyChallenge(await request.clone().text());
+  return answer === null ? null : new Response(answer, { headers: { "content-type": "application/json" } });
+}
+function recent(timestamp, toleranceSecs) {
+  const sent = Number(timestamp);
+  if (!Number.isFinite(sent)) return false;
+  return Math.abs(Math.floor(Date.now() / 1e3) - sent) <= toleranceSecs;
+}
+async function sign(secret, timestamp, body) {
+  return hmacHex(secret, signed(timestamp, body));
+}
+function signed(timestamp, body) {
+  const encoder = new TextEncoder();
+  const stamp = encoder.encode(`${timestamp}.`);
+  const rest = typeof body === "string" ? encoder.encode(body) : new Uint8Array(body);
+  const payload = new Uint8Array(stamp.length + rest.length);
+  payload.set(stamp);
+  payload.set(rest, stamp.length);
+  return payload;
+}
+
 // src/bank.ts
 var DEFAULT_CURRENCY = "CZK";
 var DEFAULT_LOOK_BACK_SECS = 7 * 24 * 60 * 60;
@@ -1321,6 +1468,8 @@ function bankVerifyEndpoint(config) {
     "cache-control": `max-age=${config.pollEverySecs ?? DEFAULT_POLL_EVERY_SECS}`
   };
   return async (request) => {
+    const consented = await answerVerifyChallengeRequest(request);
+    if (consented !== null) return consented;
     const asked = readQuery(new URL(request.url));
     if (asked === null) return Response.json({ settled: false }, { status: 400 });
     const subject = subjectOf(asked.reference, asked.amountMinor, asked.currency);
@@ -1791,138 +1940,6 @@ function refusals2(answers) {
     (answer) => answer.reason instanceof Error ? answer.reason.message : String(answer.reason)
   ).join("; ");
 }
-
-// ../core/ed25519.ts
-var ALGORITHM = { name: "Ed25519" };
-var SIGNATURE_BYTES = 64;
-var PUBLIC_KEY_BYTES = 32;
-var PKCS8_HEADER = hexToBytes("302e020100300506032b657004220420");
-async function verifyHex(publicKeyHex, signatureHex, payload) {
-  if (!isHex(publicKeyHex) || publicKeyHex.length !== PUBLIC_KEY_BYTES * 2) return false;
-  if (!isHex(signatureHex) || signatureHex.length !== SIGNATURE_BYTES * 2) return false;
-  try {
-    const key = await crypto.subtle.importKey(
-      "raw",
-      asBuffer2(hexToBytes(publicKeyHex)),
-      ALGORITHM,
-      false,
-      ["verify"]
-    );
-    return await crypto.subtle.verify(
-      ALGORITHM,
-      key,
-      asBuffer2(hexToBytes(signatureHex)),
-      asBuffer2(payload)
-    );
-  } catch {
-    return false;
-  }
-}
-function asBuffer2(bytes) {
-  return bytes.buffer instanceof ArrayBuffer ? bytes : new Uint8Array(bytes);
-}
-
-// src/webhook.ts
-var SIGNATURE_HEADER = "x-signature";
-var TIMESTAMP_HEADER = "x-timestamp";
-var SHARED_SECRET_PREFIX = "sha256=";
-var GATEWAY_KEY_PREFIX = "ed25519=";
-var DEFAULT_TOLERANCE_SECS = 300;
-var CHALLENGE = "webhook-challenge";
-async function verifyWebhookSignature(body, signature, credential, timestamp, options = {}) {
-  if (!recent(timestamp, options.toleranceSecs ?? DEFAULT_TOLERANCE_SECS)) return false;
-  if (typeof credential !== "string") {
-    if (!signature.startsWith(GATEWAY_KEY_PREFIX)) return false;
-    return verifyHex(
-      credential.publicKey.toLowerCase(),
-      signature.slice(GATEWAY_KEY_PREFIX.length).toLowerCase(),
-      signed(timestamp, body)
-    );
-  }
-  if (signature.startsWith(GATEWAY_KEY_PREFIX)) return false;
-  const received = signature.startsWith(SHARED_SECRET_PREFIX) ? signature.slice(SHARED_SECRET_PREFIX.length) : signature;
-  return equalInConstantTime(await sign(credential, timestamp, body), received.toLowerCase());
-}
-async function parseWebhook(body, signature, credential, timestamp, options = {}) {
-  if (!await verifyWebhookSignature(body, signature, credential, timestamp, options)) return null;
-  const text2 = typeof body === "string" ? body : new TextDecoder().decode(body);
-  try {
-    return paymentFromWire(JSON.parse(text2));
-  } catch {
-    return null;
-  }
-}
-async function parseWebhookRequest(request, credential, options = {}) {
-  const signature = request.headers.get(SIGNATURE_HEADER);
-  const timestamp = request.headers.get(TIMESTAMP_HEADER);
-  if (signature === null || timestamp === null) return null;
-  return parseWebhook(await request.text(), signature, credential, timestamp, options);
-}
-async function parseWatchedWebhook(body, signature, credential, timestamp, options = {}) {
-  if (!await verifyWebhookSignature(body, signature, credential, timestamp, options)) return null;
-  const text2 = typeof body === "string" ? body : new TextDecoder().decode(body);
-  try {
-    return triggerEventFromWire(JSON.parse(text2));
-  } catch {
-    return null;
-  }
-}
-async function parseWatchedWebhookRequest(request, credential, options = {}) {
-  const signature = request.headers.get(SIGNATURE_HEADER);
-  const timestamp = request.headers.get(TIMESTAMP_HEADER);
-  if (signature === null || timestamp === null) return null;
-  return parseWatchedWebhook(await request.text(), signature, credential, timestamp, options);
-}
-async function answerWebhookChallenge(body, signature, credential, timestamp, options = {}) {
-  if (!await verifyWebhookSignature(body, signature, credential, timestamp, options)) return null;
-  const text2 = typeof body === "string" ? body : new TextDecoder().decode(body);
-  const nonce = challenged(text2);
-  if (nonce === null) return null;
-  if (typeof credential !== "string") return JSON.stringify({ nonce });
-  return JSON.stringify({
-    nonce,
-    signature: `${SHARED_SECRET_PREFIX}${await hmacHex(credential, nonce)}`
-  });
-}
-async function answerWebhookChallengeRequest(request, credential, options = {}) {
-  const signature = request.headers.get(SIGNATURE_HEADER);
-  const timestamp = request.headers.get(TIMESTAMP_HEADER);
-  if (signature === null || timestamp === null) return null;
-  const answer = await answerWebhookChallenge(
-    await request.clone().text(),
-    signature,
-    credential,
-    timestamp,
-    options
-  );
-  return answer === null ? null : new Response(answer, { headers: { "content-type": "application/json" } });
-}
-function challenged(text2) {
-  try {
-    const said = JSON.parse(text2);
-    if (said["type"] !== CHALLENGE || typeof said["nonce"] !== "string") return null;
-    return said["nonce"];
-  } catch {
-    return null;
-  }
-}
-function recent(timestamp, toleranceSecs) {
-  const sent = Number(timestamp);
-  if (!Number.isFinite(sent)) return false;
-  return Math.abs(Math.floor(Date.now() / 1e3) - sent) <= toleranceSecs;
-}
-async function sign(secret, timestamp, body) {
-  return hmacHex(secret, signed(timestamp, body));
-}
-function signed(timestamp, body) {
-  const encoder = new TextEncoder();
-  const stamp = encoder.encode(`${timestamp}.`);
-  const rest = typeof body === "string" ? encoder.encode(body) : new Uint8Array(body);
-  const payload = new Uint8Array(stamp.length + rest.length);
-  payload.set(stamp);
-  payload.set(rest, stamp.length);
-  return payload;
-}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   GatewayCheatError,
@@ -1935,6 +1952,8 @@ function signed(timestamp, body) {
   REQUEST_IN_FLIGHT,
   ThunderBridge,
   UnverifiedRecipientError,
+  answerVerifyChallenge,
+  answerVerifyChallengeRequest,
   answerWebhookChallenge,
   answerWebhookChallengeRequest,
   bankRail,

package/dist/index.d.cts

@@ -381,6 +381,18 @@ declare function answerWebhookChallenge(body: string | Uint8Array, signature: st
  * the same handler can go on to `parseWebhookRequest` when this was no challenge
  */
 declare function answerWebhookChallengeRequest(request: Request, credential: WebhookCredential, options?: WebhookOptions): Promise<Response | null>;
+/**
+ * Answer the challenge the gateway sends a verify URL before it will poll it,
+ * which is how a caller shows the endpoint agreed to the traffic rather than
+ * merely being named. Returns null for anything that is not a challenge, so a
+ * verify endpoint hands the request on to its own reading of a payment.
+ *
+ * The nonce is echoed to whoever asked, which grants them nothing, so there is
+ * no signature to check here and no secret to hold
+ */
+declare function answerVerifyChallenge(body: string): string | null;
+/** {@link answerVerifyChallenge} against a `Request`, leaving its body unread */
+declare function answerVerifyChallengeRequest(request: Request): Promise<Response | null>;
 
 /**
  * The way a gateway was caught out, every code is a check that held against the
@@ -458,4 +470,4 @@ declare class NoWalletAvailableError extends ProblemError {
     }, wallets: WalletFailure[]);
 }
 
-export { type BankTransfer, type BankTransferParams, type BankVerifyConfig, CreatePaymentParams, type Credit, type FioConfig, type GatewayCheatCode, GatewayCheatError, IDEMPOTENCY_KEY_REUSED, type IdempotencyConflict, IdempotencyConflictError, type Invoice, type MedianOptions, NO_WALLET_AVAILABLE, NoWalletAvailableError, PAYMENT_ALREADY_WATCHED, Payment, ProblemError, type QrOptions, REQUEST_IN_FLIGHT, type Statement, ThunderBridge, type Ticker, TriggerEvent, UnverifiedRecipientError, WalletFailure, type WebhookCredential, type WebhookOptions, answerWebhookChallenge, answerWebhookChallengeRequest, bankTransfer, bankVerifyEndpoint, bitstamp, coinbase, coinmate, decodeInvoice, fioStatement, invoiceToDataUrl, invoiceToSvg, isProblemType, isProvablyPaid, kraken, lnurlToDataUrl, lnurlToSvg, medianOf, minorScaleOf, minorUnitsOf, msatFor, parseWatchedWebhook, parseWatchedWebhookRequest, parseWebhook, parseWebhookRequest, preimageMatchesHash, proveOrigin, proveSettlement, qrToDataUrl, qrToSvg, seal, spdToDataUrl, spdToSvg, toLnurl, unseal, verifyWebhookSignature };
+export { type BankTransfer, type BankTransferParams, type BankVerifyConfig, CreatePaymentParams, type Credit, type FioConfig, type GatewayCheatCode, GatewayCheatError, IDEMPOTENCY_KEY_REUSED, type IdempotencyConflict, IdempotencyConflictError, type Invoice, type MedianOptions, NO_WALLET_AVAILABLE, NoWalletAvailableError, PAYMENT_ALREADY_WATCHED, Payment, ProblemError, type QrOptions, REQUEST_IN_FLIGHT, type Statement, ThunderBridge, type Ticker, TriggerEvent, UnverifiedRecipientError, WalletFailure, type WebhookCredential, type WebhookOptions, answerVerifyChallenge, answerVerifyChallengeRequest, answerWebhookChallenge, answerWebhookChallengeRequest, bankTransfer, bankVerifyEndpoint, bitstamp, coinbase, coinmate, decodeInvoice, fioStatement, invoiceToDataUrl, invoiceToSvg, isProblemType, isProvablyPaid, kraken, lnurlToDataUrl, lnurlToSvg, medianOf, minorScaleOf, minorUnitsOf, msatFor, parseWatchedWebhook, parseWatchedWebhookRequest, parseWebhook, parseWebhookRequest, preimageMatchesHash, proveOrigin, proveSettlement, qrToDataUrl, qrToSvg, seal, spdToDataUrl, spdToSvg, toLnurl, unseal, verifyWebhookSignature };

package/dist/index.d.ts

@@ -381,6 +381,18 @@ declare function answerWebhookChallenge(body: string | Uint8Array, signature: st
  * the same handler can go on to `parseWebhookRequest` when this was no challenge
  */
 declare function answerWebhookChallengeRequest(request: Request, credential: WebhookCredential, options?: WebhookOptions): Promise<Response | null>;
+/**
+ * Answer the challenge the gateway sends a verify URL before it will poll it,
+ * which is how a caller shows the endpoint agreed to the traffic rather than
+ * merely being named. Returns null for anything that is not a challenge, so a
+ * verify endpoint hands the request on to its own reading of a payment.
+ *
+ * The nonce is echoed to whoever asked, which grants them nothing, so there is
+ * no signature to check here and no secret to hold
+ */
+declare function answerVerifyChallenge(body: string): string | null;
+/** {@link answerVerifyChallenge} against a `Request`, leaving its body unread */
+declare function answerVerifyChallengeRequest(request: Request): Promise<Response | null>;
 
 /**
  * The way a gateway was caught out, every code is a check that held against the
@@ -458,4 +470,4 @@ declare class NoWalletAvailableError extends ProblemError {
     }, wallets: WalletFailure[]);
 }
 
-export { type BankTransfer, type BankTransferParams, type BankVerifyConfig, CreatePaymentParams, type Credit, type FioConfig, type GatewayCheatCode, GatewayCheatError, IDEMPOTENCY_KEY_REUSED, type IdempotencyConflict, IdempotencyConflictError, type Invoice, type MedianOptions, NO_WALLET_AVAILABLE, NoWalletAvailableError, PAYMENT_ALREADY_WATCHED, Payment, ProblemError, type QrOptions, REQUEST_IN_FLIGHT, type Statement, ThunderBridge, type Ticker, TriggerEvent, UnverifiedRecipientError, WalletFailure, type WebhookCredential, type WebhookOptions, answerWebhookChallenge, answerWebhookChallengeRequest, bankTransfer, bankVerifyEndpoint, bitstamp, coinbase, coinmate, decodeInvoice, fioStatement, invoiceToDataUrl, invoiceToSvg, isProblemType, isProvablyPaid, kraken, lnurlToDataUrl, lnurlToSvg, medianOf, minorScaleOf, minorUnitsOf, msatFor, parseWatchedWebhook, parseWatchedWebhookRequest, parseWebhook, parseWebhookRequest, preimageMatchesHash, proveOrigin, proveSettlement, qrToDataUrl, qrToSvg, seal, spdToDataUrl, spdToSvg, toLnurl, unseal, verifyWebhookSignature };
+export { type BankTransfer, type BankTransferParams, type BankVerifyConfig, CreatePaymentParams, type Credit, type FioConfig, type GatewayCheatCode, GatewayCheatError, IDEMPOTENCY_KEY_REUSED, type IdempotencyConflict, IdempotencyConflictError, type Invoice, type MedianOptions, NO_WALLET_AVAILABLE, NoWalletAvailableError, PAYMENT_ALREADY_WATCHED, Payment, ProblemError, type QrOptions, REQUEST_IN_FLIGHT, type Statement, ThunderBridge, type Ticker, TriggerEvent, UnverifiedRecipientError, WalletFailure, type WebhookCredential, type WebhookOptions, answerVerifyChallenge, answerVerifyChallengeRequest, answerWebhookChallenge, answerWebhookChallengeRequest, bankTransfer, bankVerifyEndpoint, bitstamp, coinbase, coinmate, decodeInvoice, fioStatement, invoiceToDataUrl, invoiceToSvg, isProblemType, isProvablyPaid, kraken, lnurlToDataUrl, lnurlToSvg, medianOf, minorScaleOf, minorUnitsOf, msatFor, parseWatchedWebhook, parseWatchedWebhookRequest, parseWebhook, parseWebhookRequest, preimageMatchesHash, proveOrigin, proveSettlement, qrToDataUrl, qrToSvg, seal, spdToDataUrl, spdToSvg, toLnurl, unseal, verifyWebhookSignature };

package/dist/index.js

@@ -1215,6 +1215,151 @@ function minorScaleOf(currency) {
   return 10 ** minorUnitsOf(currency);
 }
 
+// ../core/ed25519.ts
+var ALGORITHM = { name: "Ed25519" };
+var SIGNATURE_BYTES = 64;
+var PUBLIC_KEY_BYTES = 32;
+var PKCS8_HEADER = hexToBytes("302e020100300506032b657004220420");
+async function verifyHex(publicKeyHex, signatureHex, payload) {
+  if (!isHex(publicKeyHex) || publicKeyHex.length !== PUBLIC_KEY_BYTES * 2) return false;
+  if (!isHex(signatureHex) || signatureHex.length !== SIGNATURE_BYTES * 2) return false;
+  try {
+    const key = await crypto.subtle.importKey(
+      "raw",
+      asBuffer2(hexToBytes(publicKeyHex)),
+      ALGORITHM,
+      false,
+      ["verify"]
+    );
+    return await crypto.subtle.verify(
+      ALGORITHM,
+      key,
+      asBuffer2(hexToBytes(signatureHex)),
+      asBuffer2(payload)
+    );
+  } catch {
+    return false;
+  }
+}
+function asBuffer2(bytes) {
+  return bytes.buffer instanceof ArrayBuffer ? bytes : new Uint8Array(bytes);
+}
+
+// src/webhook.ts
+var SIGNATURE_HEADER = "x-signature";
+var TIMESTAMP_HEADER = "x-timestamp";
+var SHARED_SECRET_PREFIX = "sha256=";
+var GATEWAY_KEY_PREFIX = "ed25519=";
+var DEFAULT_TOLERANCE_SECS = 300;
+var CHALLENGE = "webhook-challenge";
+var VERIFY_CHALLENGE = "verify-challenge";
+async function verifyWebhookSignature(body, signature, credential, timestamp, options = {}) {
+  if (!recent(timestamp, options.toleranceSecs ?? DEFAULT_TOLERANCE_SECS)) return false;
+  if (typeof credential !== "string") {
+    if (!signature.startsWith(GATEWAY_KEY_PREFIX)) return false;
+    return verifyHex(
+      credential.publicKey.toLowerCase(),
+      signature.slice(GATEWAY_KEY_PREFIX.length).toLowerCase(),
+      signed(timestamp, body)
+    );
+  }
+  if (signature.startsWith(GATEWAY_KEY_PREFIX)) return false;
+  const received = signature.startsWith(SHARED_SECRET_PREFIX) ? signature.slice(SHARED_SECRET_PREFIX.length) : signature;
+  return equalInConstantTime(await sign(credential, timestamp, body), received.toLowerCase());
+}
+async function parseWebhook(body, signature, credential, timestamp, options = {}) {
+  if (!await verifyWebhookSignature(body, signature, credential, timestamp, options)) return null;
+  const text2 = typeof body === "string" ? body : new TextDecoder().decode(body);
+  try {
+    return paymentFromWire(JSON.parse(text2));
+  } catch {
+    return null;
+  }
+}
+async function parseWebhookRequest(request, credential, options = {}) {
+  const signature = request.headers.get(SIGNATURE_HEADER);
+  const timestamp = request.headers.get(TIMESTAMP_HEADER);
+  if (signature === null || timestamp === null) return null;
+  return parseWebhook(await request.text(), signature, credential, timestamp, options);
+}
+async function parseWatchedWebhook(body, signature, credential, timestamp, options = {}) {
+  if (!await verifyWebhookSignature(body, signature, credential, timestamp, options)) return null;
+  const text2 = typeof body === "string" ? body : new TextDecoder().decode(body);
+  try {
+    return triggerEventFromWire(JSON.parse(text2));
+  } catch {
+    return null;
+  }
+}
+async function parseWatchedWebhookRequest(request, credential, options = {}) {
+  const signature = request.headers.get(SIGNATURE_HEADER);
+  const timestamp = request.headers.get(TIMESTAMP_HEADER);
+  if (signature === null || timestamp === null) return null;
+  return parseWatchedWebhook(await request.text(), signature, credential, timestamp, options);
+}
+async function answerWebhookChallenge(body, signature, credential, timestamp, options = {}) {
+  if (!await verifyWebhookSignature(body, signature, credential, timestamp, options)) return null;
+  const text2 = typeof body === "string" ? body : new TextDecoder().decode(body);
+  const nonce = challenged(text2);
+  if (nonce === null) return null;
+  if (typeof credential !== "string") return JSON.stringify({ nonce });
+  return JSON.stringify({
+    nonce,
+    signature: `${SHARED_SECRET_PREFIX}${await hmacHex(credential, nonce)}`
+  });
+}
+async function answerWebhookChallengeRequest(request, credential, options = {}) {
+  const signature = request.headers.get(SIGNATURE_HEADER);
+  const timestamp = request.headers.get(TIMESTAMP_HEADER);
+  if (signature === null || timestamp === null) return null;
+  const answer = await answerWebhookChallenge(
+    await request.clone().text(),
+    signature,
+    credential,
+    timestamp,
+    options
+  );
+  return answer === null ? null : new Response(answer, { headers: { "content-type": "application/json" } });
+}
+function challenged(text2) {
+  return nonceOf(text2, CHALLENGE);
+}
+function nonceOf(text2, type) {
+  try {
+    const said = JSON.parse(text2);
+    if (said["type"] !== type || typeof said["nonce"] !== "string") return null;
+    return said["nonce"];
+  } catch {
+    return null;
+  }
+}
+function answerVerifyChallenge(body) {
+  const nonce = nonceOf(body, VERIFY_CHALLENGE);
+  return nonce === null ? null : JSON.stringify({ nonce });
+}
+async function answerVerifyChallengeRequest(request) {
+  if (request.method !== "POST") return null;
+  const answer = answerVerifyChallenge(await request.clone().text());
+  return answer === null ? null : new Response(answer, { headers: { "content-type": "application/json" } });
+}
+function recent(timestamp, toleranceSecs) {
+  const sent = Number(timestamp);
+  if (!Number.isFinite(sent)) return false;
+  return Math.abs(Math.floor(Date.now() / 1e3) - sent) <= toleranceSecs;
+}
+async function sign(secret, timestamp, body) {
+  return hmacHex(secret, signed(timestamp, body));
+}
+function signed(timestamp, body) {
+  const encoder = new TextEncoder();
+  const stamp = encoder.encode(`${timestamp}.`);
+  const rest = typeof body === "string" ? encoder.encode(body) : new Uint8Array(body);
+  const payload = new Uint8Array(stamp.length + rest.length);
+  payload.set(stamp);
+  payload.set(rest, stamp.length);
+  return payload;
+}
+
 // src/bank.ts
 var DEFAULT_CURRENCY = "CZK";
 var DEFAULT_LOOK_BACK_SECS = 7 * 24 * 60 * 60;
@@ -1249,6 +1394,8 @@ function bankVerifyEndpoint(config) {
     "cache-control": `max-age=${config.pollEverySecs ?? DEFAULT_POLL_EVERY_SECS}`
   };
   return async (request) => {
+    const consented = await answerVerifyChallengeRequest(request);
+    if (consented !== null) return consented;
     const asked = readQuery(new URL(request.url));
     if (asked === null) return Response.json({ settled: false }, { status: 400 });
     const subject = subjectOf(asked.reference, asked.amountMinor, asked.currency);
@@ -1719,138 +1866,6 @@ function refusals2(answers) {
     (answer) => answer.reason instanceof Error ? answer.reason.message : String(answer.reason)
   ).join("; ");
 }
-
-// ../core/ed25519.ts
-var ALGORITHM = { name: "Ed25519" };
-var SIGNATURE_BYTES = 64;
-var PUBLIC_KEY_BYTES = 32;
-var PKCS8_HEADER = hexToBytes("302e020100300506032b657004220420");
-async function verifyHex(publicKeyHex, signatureHex, payload) {
-  if (!isHex(publicKeyHex) || publicKeyHex.length !== PUBLIC_KEY_BYTES * 2) return false;
-  if (!isHex(signatureHex) || signatureHex.length !== SIGNATURE_BYTES * 2) return false;
-  try {
-    const key = await crypto.subtle.importKey(
-      "raw",
-      asBuffer2(hexToBytes(publicKeyHex)),
-      ALGORITHM,
-      false,
-      ["verify"]
-    );
-    return await crypto.subtle.verify(
-      ALGORITHM,
-      key,
-      asBuffer2(hexToBytes(signatureHex)),
-      asBuffer2(payload)
-    );
-  } catch {
-    return false;
-  }
-}
-function asBuffer2(bytes) {
-  return bytes.buffer instanceof ArrayBuffer ? bytes : new Uint8Array(bytes);
-}
-
-// src/webhook.ts
-var SIGNATURE_HEADER = "x-signature";
-var TIMESTAMP_HEADER = "x-timestamp";
-var SHARED_SECRET_PREFIX = "sha256=";
-var GATEWAY_KEY_PREFIX = "ed25519=";
-var DEFAULT_TOLERANCE_SECS = 300;
-var CHALLENGE = "webhook-challenge";
-async function verifyWebhookSignature(body, signature, credential, timestamp, options = {}) {
-  if (!recent(timestamp, options.toleranceSecs ?? DEFAULT_TOLERANCE_SECS)) return false;
-  if (typeof credential !== "string") {
-    if (!signature.startsWith(GATEWAY_KEY_PREFIX)) return false;
-    return verifyHex(
-      credential.publicKey.toLowerCase(),
-      signature.slice(GATEWAY_KEY_PREFIX.length).toLowerCase(),
-      signed(timestamp, body)
-    );
-  }
-  if (signature.startsWith(GATEWAY_KEY_PREFIX)) return false;
-  const received = signature.startsWith(SHARED_SECRET_PREFIX) ? signature.slice(SHARED_SECRET_PREFIX.length) : signature;
-  return equalInConstantTime(await sign(credential, timestamp, body), received.toLowerCase());
-}
-async function parseWebhook(body, signature, credential, timestamp, options = {}) {
-  if (!await verifyWebhookSignature(body, signature, credential, timestamp, options)) return null;
-  const text2 = typeof body === "string" ? body : new TextDecoder().decode(body);
-  try {
-    return paymentFromWire(JSON.parse(text2));
-  } catch {
-    return null;
-  }
-}
-async function parseWebhookRequest(request, credential, options = {}) {
-  const signature = request.headers.get(SIGNATURE_HEADER);
-  const timestamp = request.headers.get(TIMESTAMP_HEADER);
-  if (signature === null || timestamp === null) return null;
-  return parseWebhook(await request.text(), signature, credential, timestamp, options);
-}
-async function parseWatchedWebhook(body, signature, credential, timestamp, options = {}) {
-  if (!await verifyWebhookSignature(body, signature, credential, timestamp, options)) return null;
-  const text2 = typeof body === "string" ? body : new TextDecoder().decode(body);
-  try {
-    return triggerEventFromWire(JSON.parse(text2));
-  } catch {
-    return null;
-  }
-}
-async function parseWatchedWebhookRequest(request, credential, options = {}) {
-  const signature = request.headers.get(SIGNATURE_HEADER);
-  const timestamp = request.headers.get(TIMESTAMP_HEADER);
-  if (signature === null || timestamp === null) return null;
-  return parseWatchedWebhook(await request.text(), signature, credential, timestamp, options);
-}
-async function answerWebhookChallenge(body, signature, credential, timestamp, options = {}) {
-  if (!await verifyWebhookSignature(body, signature, credential, timestamp, options)) return null;
-  const text2 = typeof body === "string" ? body : new TextDecoder().decode(body);
-  const nonce = challenged(text2);
-  if (nonce === null) return null;
-  if (typeof credential !== "string") return JSON.stringify({ nonce });
-  return JSON.stringify({
-    nonce,
-    signature: `${SHARED_SECRET_PREFIX}${await hmacHex(credential, nonce)}`
-  });
-}
-async function answerWebhookChallengeRequest(request, credential, options = {}) {
-  const signature = request.headers.get(SIGNATURE_HEADER);
-  const timestamp = request.headers.get(TIMESTAMP_HEADER);
-  if (signature === null || timestamp === null) return null;
-  const answer = await answerWebhookChallenge(
-    await request.clone().text(),
-    signature,
-    credential,
-    timestamp,
-    options
-  );
-  return answer === null ? null : new Response(answer, { headers: { "content-type": "application/json" } });
-}
-function challenged(text2) {
-  try {
-    const said = JSON.parse(text2);
-    if (said["type"] !== CHALLENGE || typeof said["nonce"] !== "string") return null;
-    return said["nonce"];
-  } catch {
-    return null;
-  }
-}
-function recent(timestamp, toleranceSecs) {
-  const sent = Number(timestamp);
-  if (!Number.isFinite(sent)) return false;
-  return Math.abs(Math.floor(Date.now() / 1e3) - sent) <= toleranceSecs;
-}
-async function sign(secret, timestamp, body) {
-  return hmacHex(secret, signed(timestamp, body));
-}
-function signed(timestamp, body) {
-  const encoder = new TextEncoder();
-  const stamp = encoder.encode(`${timestamp}.`);
-  const rest = typeof body === "string" ? encoder.encode(body) : new Uint8Array(body);
-  const payload = new Uint8Array(stamp.length + rest.length);
-  payload.set(stamp);
-  payload.set(rest, stamp.length);
-  return payload;
-}
 export {
   GatewayCheatError,
   IDEMPOTENCY_KEY_REUSED,
@@ -1862,6 +1877,8 @@ export {
   REQUEST_IN_FLIGHT,
   ThunderBridge,
   UnverifiedRecipientError,
+  answerVerifyChallenge,
+  answerVerifyChallengeRequest,
   answerWebhookChallenge,
   answerWebhookChallengeRequest,
   bankRail,

package/dist/server.cjs

@@ -402,20 +402,22 @@ var REDIRECTS = [301, 302, 303, 307, 308];
 var KEEPS_THE_METHOD = [307, 308];
 var CREDENTIALS = ["authorization", "cookie", "proxy-authorization"];
 var BODY_LIMIT_BYTES = 262144;
+var throughFetch = (url, sent, signal) => fetch(url, {
+  method: sent.method ?? "GET",
+  headers: sent.headers ?? {},
+  body: sent.body,
+  redirect: "manual",
+  signal
+});
+var send = throughFetch;
 async function ask(url, sent = {}) {
   const capped = AbortSignal.timeout(HTTP_TIMEOUT_MS);
   const signal = sent.deadline ? AbortSignal.any([sent.deadline, capped]) : capped;
   let target = url;
   let carried = sent;
   for (let hop = 0; hop <= HOPS_FOLLOWED; hop += 1) {
-    await refuseUnlessPublic(target);
-    const response = await fetch(target, {
-      method: carried.method ?? "GET",
-      headers: carried.headers ?? {},
-      body: carried.body,
-      redirect: "manual",
-      signal
-    });
+    const at = await addressesToReach(target);
+    const response = await send(target, carried, signal, at);
     if (!REDIRECTS.includes(response.status)) return await answerOf(response);
     const location = response.headers.get("location");
     if (location === null) {
@@ -429,7 +431,15 @@ async function ask(url, sent = {}) {
   }
   throw new Error(`${url} redirected more than ${HOPS_FOLLOWED} times`);
 }
-async function resolvesNothingPrivate(url) {
+async function addressesToReach(url) {
+  if (!publicHttps(url)) throw new Error(`${url} is not a public https URL`);
+  const found = await resolved(url);
+  if (found.length === 0 || !found.every((one) => publicAddress(one.address))) {
+    throw new Error(`${url} resolves to an address we do not reach`);
+  }
+  return found;
+}
+async function resolved(url) {
   const { lookup } = await import("dns/promises");
   const { setTimeout: sleep } = await import("timers/promises");
   const host = new URL(url).hostname.replace(/^\[|]$/g, "");
@@ -437,11 +447,7 @@ async function resolvesNothingPrivate(url) {
     lookup(host, { all: true, verbatim: true }).catch(() => []),
     sleep(LOOKUP_TIMEOUT_MS, null, { ref: false })
   ]);
-  return found !== null && found.every((one) => publicAddress(one.address));
-}
-async function refuseUnlessPublic(url) {
-  if (!publicHttps(url)) throw new Error(`${url} is not a public https URL`);
-  if (!await resolvesNothingPrivate(url)) throw new Error(`${url} resolves to an address we do not reach`);
+  return found ?? [];
 }
 async function answerOf(response) {
   const { status, ok, headers } = response;
@@ -494,6 +500,7 @@ var NoWalletAvailable = class extends Error {
 // ../core/lnurl.ts
 var VERIFY_WITHOUT_PREIMAGE = ["zeuspay.com", "zeusnuts.com", "ecash.love"];
 var RESOLVE_TIMEOUT_MS = 3e4;
+var NAMES_ONE_ACCOUNT = /^[A-Za-z0-9_-]+(?:\.[A-Za-z0-9_-]+)*$/;
 var MIN_PACE_SECS = 1;
 var MAX_PACE_SECS = 3600;
 var MIN_PER_SECOND = 0.01;
@@ -622,11 +629,19 @@ function withAmount(callback, amountMsat) {
 }
 function splitAddress(address) {
   const [user, domain, ...rest] = address.split("@");
-  if (!user || !domain || rest.length > 0 || !publicHttps(`https://${domain}/`)) {
+  if (!user || !domain || rest.length > 0 || !NAMES_ONE_ACCOUNT.test(user) || !isNothingButAHost(domain) || !publicHttps(`https://${domain}/`)) {
     throw new WalletRefused("address-unusable", `${address} is not a usable lightning address`);
   }
   return [user, domain];
 }
+function isNothingButAHost(domain) {
+  try {
+    const parsed = new URL(`https://${domain}/`);
+    return parsed.host === domain.toLowerCase() && parsed.pathname === "/" && parsed.search === "" && parsed.hash === "";
+  } catch {
+    return false;
+  }
+}
 async function fetchJson(url, deadline) {
   return (await answeredJson(url, deadline)).said;
 }
@@ -799,21 +814,21 @@ async function mintThroughGateway(config, address, amountMsat, nonce) {
   return { bolt11: payment.bolt11, verifyUrl: payment.verifyUrl };
 }
 async function mintBlind(config, address, amountMsat) {
-  const resolved = await resolve([address], amountMsat);
-  const minted = { ...resolved, amountMsat, lnAddress: resolved.address };
+  const resolved2 = await resolve([address], amountMsat);
+  const minted = { ...resolved2, amountMsat, lnAddress: resolved2.address };
   const locked = config.sealed;
   try {
     await config.gateway.watchPayment({
-      paymentHash: resolved.paymentHash,
-      verifyUrl: resolved.verifyUrl,
-      expiresAt: resolved.expiresAt,
+      paymentHash: resolved2.paymentHash,
+      verifyUrl: resolved2.verifyUrl,
+      expiresAt: resolved2.expiresAt,
       trigger: config.watchSecret,
       sealed: locked ? await seal(locked.secret, JSON.stringify(locked.data(minted))) : void 0
     });
   } catch (refused) {
     if (!alreadyWatched(refused)) throw refused;
   }
-  return { bolt11: resolved.bolt11, verifyUrl: resolved.verifyUrl };
+  return { bolt11: resolved2.bolt11, verifyUrl: resolved2.verifyUrl };
 }
 function alreadyWatched(refused) {
   return refused instanceof ProblemError && isProblemType(refused, PAYMENT_ALREADY_WATCHED);
@@ -831,6 +846,30 @@ function refuse(reason) {
   return Response.json({ status: "ERROR", reason });
 }
 
+// ../core/ed25519.ts
+var PKCS8_HEADER = hexToBytes("302e020100300506032b657004220420");
+
+// src/webhook.ts
+var VERIFY_CHALLENGE = "verify-challenge";
+function nonceOf(text2, type) {
+  try {
+    const said = JSON.parse(text2);
+    if (said["type"] !== type || typeof said["nonce"] !== "string") return null;
+    return said["nonce"];
+  } catch {
+    return null;
+  }
+}
+function answerVerifyChallenge(body) {
+  const nonce = nonceOf(body, VERIFY_CHALLENGE);
+  return nonce === null ? null : JSON.stringify({ nonce });
+}
+async function answerVerifyChallengeRequest(request) {
+  if (request.method !== "POST") return null;
+  const answer = answerVerifyChallenge(await request.clone().text());
+  return answer === null ? null : new Response(answer, { headers: { "content-type": "application/json" } });
+}
+
 // src/qr.ts
 var import_uqr = require("uqr");
 function encodeForQr(destination) {
@@ -850,6 +889,8 @@ function lightningVerifyEndpoint(config) {
     "cache-control": `max-age=${config.pollEverySecs ?? DEFAULT_POLL_EVERY_SECS}`
   };
   return async (request) => {
+    const consented = await answerVerifyChallengeRequest(request);
+    if (consented !== null) return consented;
     const sealed = new URL(request.url).searchParams.get(WALLET);
     if (sealed === null) return Response.json({ settled: false }, { status: 400 });
     const opened = await unseal(config.secret, sealed);
@@ -873,16 +914,16 @@ async function relayedVerifyUrl(endpoint, wallet, secret) {
 var LIGHTNING = "lightning";
 function blindLightningRail(config) {
   return async (order) => {
-    const resolved = await invoiceFrom(config.lnAddresses, await config.amountMsat(order));
+    const resolved2 = await invoiceFrom(config.lnAddresses, await config.amountMsat(order));
     const relay = config.relayVerifyThrough;
     const watched = await config.gateway.watchPayment({
-      paymentHash: resolved.paymentHash,
+      paymentHash: resolved2.paymentHash,
       verifyUrl: relay ? await relayedVerifyUrl(
         relay.endpoint,
-        { url: resolved.verifyUrl, hash: resolved.paymentHash },
+        { url: resolved2.verifyUrl, hash: resolved2.paymentHash },
         relay.secret
-      ) : resolved.verifyUrl,
-      expiresAt: resolved.expiresAt,
+      ) : resolved2.verifyUrl,
+      expiresAt: resolved2.expiresAt,
       trigger: config.trigger,
       sealed: await config.sealed?.(order),
       webhookUrl: config.webhookUrl,
@@ -891,9 +932,9 @@ function blindLightningRail(config) {
     return {
       id: watched.id,
       rail: config.name ?? LIGHTNING,
-      scan: resolved.bolt11,
-      qr: encodeForQr(resolved.bolt11),
-      expiresAt: resolved.expiresAt
+      scan: resolved2.bolt11,
+      qr: encodeForQr(resolved2.bolt11),
+      expiresAt: resolved2.expiresAt
     };
   };
 }

package/dist/server.js

@@ -363,20 +363,22 @@ var REDIRECTS = [301, 302, 303, 307, 308];
 var KEEPS_THE_METHOD = [307, 308];
 var CREDENTIALS = ["authorization", "cookie", "proxy-authorization"];
 var BODY_LIMIT_BYTES = 262144;
+var throughFetch = (url, sent, signal) => fetch(url, {
+  method: sent.method ?? "GET",
+  headers: sent.headers ?? {},
+  body: sent.body,
+  redirect: "manual",
+  signal
+});
+var send = throughFetch;
 async function ask(url, sent = {}) {
   const capped = AbortSignal.timeout(HTTP_TIMEOUT_MS);
   const signal = sent.deadline ? AbortSignal.any([sent.deadline, capped]) : capped;
   let target = url;
   let carried = sent;
   for (let hop = 0; hop <= HOPS_FOLLOWED; hop += 1) {
-    await refuseUnlessPublic(target);
-    const response = await fetch(target, {
-      method: carried.method ?? "GET",
-      headers: carried.headers ?? {},
-      body: carried.body,
-      redirect: "manual",
-      signal
-    });
+    const at = await addressesToReach(target);
+    const response = await send(target, carried, signal, at);
     if (!REDIRECTS.includes(response.status)) return await answerOf(response);
     const location = response.headers.get("location");
     if (location === null) {
@@ -390,7 +392,15 @@ async function ask(url, sent = {}) {
   }
   throw new Error(`${url} redirected more than ${HOPS_FOLLOWED} times`);
 }
-async function resolvesNothingPrivate(url) {
+async function addressesToReach(url) {
+  if (!publicHttps(url)) throw new Error(`${url} is not a public https URL`);
+  const found = await resolved(url);
+  if (found.length === 0 || !found.every((one) => publicAddress(one.address))) {
+    throw new Error(`${url} resolves to an address we do not reach`);
+  }
+  return found;
+}
+async function resolved(url) {
   const { lookup } = await import("dns/promises");
   const { setTimeout: sleep } = await import("timers/promises");
   const host = new URL(url).hostname.replace(/^\[|]$/g, "");
@@ -398,11 +408,7 @@ async function resolvesNothingPrivate(url) {
     lookup(host, { all: true, verbatim: true }).catch(() => []),
     sleep(LOOKUP_TIMEOUT_MS, null, { ref: false })
   ]);
-  return found !== null && found.every((one) => publicAddress(one.address));
-}
-async function refuseUnlessPublic(url) {
-  if (!publicHttps(url)) throw new Error(`${url} is not a public https URL`);
-  if (!await resolvesNothingPrivate(url)) throw new Error(`${url} resolves to an address we do not reach`);
+  return found ?? [];
 }
 async function answerOf(response) {
   const { status, ok, headers } = response;
@@ -455,6 +461,7 @@ var NoWalletAvailable = class extends Error {
 // ../core/lnurl.ts
 var VERIFY_WITHOUT_PREIMAGE = ["zeuspay.com", "zeusnuts.com", "ecash.love"];
 var RESOLVE_TIMEOUT_MS = 3e4;
+var NAMES_ONE_ACCOUNT = /^[A-Za-z0-9_-]+(?:\.[A-Za-z0-9_-]+)*$/;
 var MIN_PACE_SECS = 1;
 var MAX_PACE_SECS = 3600;
 var MIN_PER_SECOND = 0.01;
@@ -583,11 +590,19 @@ function withAmount(callback, amountMsat) {
 }
 function splitAddress(address) {
   const [user, domain, ...rest] = address.split("@");
-  if (!user || !domain || rest.length > 0 || !publicHttps(`https://${domain}/`)) {
+  if (!user || !domain || rest.length > 0 || !NAMES_ONE_ACCOUNT.test(user) || !isNothingButAHost(domain) || !publicHttps(`https://${domain}/`)) {
     throw new WalletRefused("address-unusable", `${address} is not a usable lightning address`);
   }
   return [user, domain];
 }
+function isNothingButAHost(domain) {
+  try {
+    const parsed = new URL(`https://${domain}/`);
+    return parsed.host === domain.toLowerCase() && parsed.pathname === "/" && parsed.search === "" && parsed.hash === "";
+  } catch {
+    return false;
+  }
+}
 async function fetchJson(url, deadline) {
   return (await answeredJson(url, deadline)).said;
 }
@@ -760,21 +775,21 @@ async function mintThroughGateway(config, address, amountMsat, nonce) {
   return { bolt11: payment.bolt11, verifyUrl: payment.verifyUrl };
 }
 async function mintBlind(config, address, amountMsat) {
-  const resolved = await resolve([address], amountMsat);
-  const minted = { ...resolved, amountMsat, lnAddress: resolved.address };
+  const resolved2 = await resolve([address], amountMsat);
+  const minted = { ...resolved2, amountMsat, lnAddress: resolved2.address };
   const locked = config.sealed;
   try {
     await config.gateway.watchPayment({
-      paymentHash: resolved.paymentHash,
-      verifyUrl: resolved.verifyUrl,
-      expiresAt: resolved.expiresAt,
+      paymentHash: resolved2.paymentHash,
+      verifyUrl: resolved2.verifyUrl,
+      expiresAt: resolved2.expiresAt,
       trigger: config.watchSecret,
       sealed: locked ? await seal(locked.secret, JSON.stringify(locked.data(minted))) : void 0
     });
   } catch (refused) {
     if (!alreadyWatched(refused)) throw refused;
   }
-  return { bolt11: resolved.bolt11, verifyUrl: resolved.verifyUrl };
+  return { bolt11: resolved2.bolt11, verifyUrl: resolved2.verifyUrl };
 }
 function alreadyWatched(refused) {
   return refused instanceof ProblemError && isProblemType(refused, PAYMENT_ALREADY_WATCHED);
@@ -792,6 +807,30 @@ function refuse(reason) {
   return Response.json({ status: "ERROR", reason });
 }
 
+// ../core/ed25519.ts
+var PKCS8_HEADER = hexToBytes("302e020100300506032b657004220420");
+
+// src/webhook.ts
+var VERIFY_CHALLENGE = "verify-challenge";
+function nonceOf(text2, type) {
+  try {
+    const said = JSON.parse(text2);
+    if (said["type"] !== type || typeof said["nonce"] !== "string") return null;
+    return said["nonce"];
+  } catch {
+    return null;
+  }
+}
+function answerVerifyChallenge(body) {
+  const nonce = nonceOf(body, VERIFY_CHALLENGE);
+  return nonce === null ? null : JSON.stringify({ nonce });
+}
+async function answerVerifyChallengeRequest(request) {
+  if (request.method !== "POST") return null;
+  const answer = answerVerifyChallenge(await request.clone().text());
+  return answer === null ? null : new Response(answer, { headers: { "content-type": "application/json" } });
+}
+
 // src/qr.ts
 import { encode } from "uqr";
 function encodeForQr(destination) {
@@ -811,6 +850,8 @@ function lightningVerifyEndpoint(config) {
     "cache-control": `max-age=${config.pollEverySecs ?? DEFAULT_POLL_EVERY_SECS}`
   };
   return async (request) => {
+    const consented = await answerVerifyChallengeRequest(request);
+    if (consented !== null) return consented;
     const sealed = new URL(request.url).searchParams.get(WALLET);
     if (sealed === null) return Response.json({ settled: false }, { status: 400 });
     const opened = await unseal(config.secret, sealed);
@@ -834,16 +875,16 @@ async function relayedVerifyUrl(endpoint, wallet, secret) {
 var LIGHTNING = "lightning";
 function blindLightningRail(config) {
   return async (order) => {
-    const resolved = await invoiceFrom(config.lnAddresses, await config.amountMsat(order));
+    const resolved2 = await invoiceFrom(config.lnAddresses, await config.amountMsat(order));
     const relay = config.relayVerifyThrough;
     const watched = await config.gateway.watchPayment({
-      paymentHash: resolved.paymentHash,
+      paymentHash: resolved2.paymentHash,
       verifyUrl: relay ? await relayedVerifyUrl(
         relay.endpoint,
-        { url: resolved.verifyUrl, hash: resolved.paymentHash },
+        { url: resolved2.verifyUrl, hash: resolved2.paymentHash },
         relay.secret
-      ) : resolved.verifyUrl,
-      expiresAt: resolved.expiresAt,
+      ) : resolved2.verifyUrl,
+      expiresAt: resolved2.expiresAt,
       trigger: config.trigger,
       sealed: await config.sealed?.(order),
       webhookUrl: config.webhookUrl,
@@ -852,9 +893,9 @@ function blindLightningRail(config) {
     return {
       id: watched.id,
       rail: config.name ?? LIGHTNING,
-      scan: resolved.bolt11,
-      qr: encodeForQr(resolved.bolt11),
-      expiresAt: resolved.expiresAt
+      scan: resolved2.bolt11,
+      qr: encodeForQr(resolved2.bolt11),
+      expiresAt: resolved2.expiresAt
     };
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thunder-bridge",
-  "version": "0.8.8",
+  "version": "0.8.10",
   "description": "Trustless JavaScript client for the Thunder Bridge Lightning payment gateway. Proves the invoice came from your own wallet before the payer sees it.",
   "author": "i-am-fatik",
   "homepage": "https://agora.gripe/en/tools/thunder-bridge",