enfore valid DLEQ on minting auth proofs

cashubtc · Feb 6, 2025 · 798093e · 798093e
1 parent 601ca25
commit 798093e
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/src/auth/CashuAuthWallet.ts b/src/auth/CashuAuthWallet.ts
@@ -165,7 +165,11 @@ class CashuAuthWallet {
 			outputs: outputData.map((d) => d.blindedMessage)
 		};
 		const { signatures } = await this.mint.mint(mintPayload, clearAuthToken);
-		return outputData.map((d, i) => d.toProof(signatures[i], keyset));
+		const authProofs = outputData.map((d, i) => d.toProof(signatures[i], keyset));
+		if (authProofs.some((p) => !p.dleqValid)) {
+			throw new Error('Mint returned auth proofs with invalid DLEQ');
+		}
+		return authProofs;
 	}
 }