Check nip5 when you're logged in.

src/constants.ts

@@ -29,3 +29,5 @@ export const HITCHMAPS_AUTHOR_PUBLIC_KEY =
  "53055ee011e96a00a705b38253b9cbc6614ccbd37df4dad42ec69bbe608c4209" as const;
 
 export const TRUSTROOTS_NPUB_PUT_URL = "https://www.trustroots.org/api/users";
+export const TRUSTROOTS_NIP5_URL =
+ "https://www.trustroots.org/.well-known/nostr.json";

src/nostr/nip5.ts

@@ -0,0 +1,32 @@
+import { TRUSTROOTS_NIP5_URL } from "../constants";
+import { getTrustrootsUsernameFromLocation } from "../router";
+import { alert } from "../utils";
+import { getPublicKey } from "./keys";
+
+export const validateNip5 = async () => {
+ try {
+ const username = getTrustrootsUsernameFromLocation();
+ if (username.length < 3) {
+ alert(
+ `Sorry, you need to click to this page from trustroots.org. Without doing that, this site won't work properly. Please go to www.trustroots.org and click the Notes link to come back here. #wBjsEe`,
+ `You need to click from trustroots`
+ );
+ return;
+ }
+
+ const result = await fetch(`${TRUSTROOTS_NIP5_URL}?name=${username}`);
+ const nip5 = (await result.json()) as {
+ names: { [username: string]: string };
+ };
+ const nip5PublicKey = nip5.names?.[username];
+ const localPublicKey = await getPublicKey();
+ if (nip5PublicKey !== localPublicKey) {
+ alert(
+ `Your key doesn't match trustroots. Posting to the map will not work. Please sign out and sign in again with the nsec key that matches your trustroots npub key. #H9bEe2`,
+ "Fatal error"
+ );
+ }
+ } catch (error) {
+ alert(error, `Unexpected error`);
+ }
+};

src/startup.ts

@@ -12,6 +12,7 @@ import {
 import { getDefaultRelays } from "./nostr/relays";
 import { startUserOnboarding } from "./onboarding";
 import { startWelcomeSequence } from "./welcome";
+import { validateNip5 } from "./nostr/nip5";
 
 export const startup = async () => {
  const isLoggedIn = await hasPrivateKey();
@@ -31,6 +32,8 @@ export const startup = async () => {
  const loggedOut = L.DomUtil.get("loggedOut")!;
 
  if (isLoggedIn) {
+ validateNip5();
+
  L.DomUtil.addClass(loggedIn, "show");
  L.DomUtil.addClass(loggedOut, "hide");
 

src/utils.ts

@@ -16,8 +16,9 @@ export const confirmYesNo = async (text: string) => {
  return false;
 };
 
-export const alert = async (text: string) => {
+export const alert = async (text: string, title?: string) => {
  await Swal.fire({
+ title,
  text,
  });
 };