fix: wakunode tests

waku-org · Mar 5, 2024 · 32fdb4e · 32fdb4e
1 parent ba34fbd
commit 32fdb4e
Show file tree

Hide file tree

Showing 4 changed files with 18 additions and 4 deletions.
diff --git a/tests/wakunode_rest/test_rest_relay.nim b/tests/wakunode_rest/test_rest_relay.nim
@@ -210,6 +210,7 @@ suite "Waku v2 Rest API - Relay":
     await node.mountRelay()
     await node.mountRlnRelay(WakuRlnConfig(rlnRelayDynamic: false,
         rlnRelayCredIndex: some(1.uint),
+        rlnRelayUserMessageLimit: 20,
         rlnEpochSizeSec: 1,
         rlnRelayTreePath: genTempPath("rln_tree", "wakunode_1")))
 
@@ -413,6 +414,7 @@ suite "Waku v2 Rest API - Relay":
     await node.mountRelay()
     await node.mountRlnRelay(WakuRlnConfig(rlnRelayDynamic: false,
         rlnRelayCredIndex: some(1.uint),
+        rlnRelayUserMessageLimit: 20,
         rlnEpochSizeSec: 1,
         rlnRelayTreePath: genTempPath("rln_tree", "wakunode_1")))
 
@@ -458,6 +460,7 @@ suite "Waku v2 Rest API - Relay":
     await node.mountRelay()
     await node.mountRlnRelay(WakuRlnConfig(rlnRelayDynamic: false,
         rlnRelayCredIndex: some(1.uint),
+        rlnRelayUserMessageLimit: 20,
         rlnEpochSizeSec: 1,
         rlnRelayTreePath: genTempPath("rln_tree", "wakunode_1")))
 
@@ -498,6 +501,7 @@ suite "Waku v2 Rest API - Relay":
     await node.mountRelay()
     await node.mountRlnRelay(WakuRlnConfig(rlnRelayDynamic: false,
         rlnRelayCredIndex: some(1.uint),
+        rlnRelayUserMessageLimit: 20,
         rlnEpochSizeSec: 1,
         rlnRelayTreePath: genTempPath("rln_tree", "wakunode_1")))
 
@@ -543,6 +547,7 @@ suite "Waku v2 Rest API - Relay":
     await node.mountRelay()
     await node.mountRlnRelay(WakuRlnConfig(rlnRelayDynamic: false,
         rlnRelayCredIndex: some(1.uint),
+        rlnRelayUserMessageLimit: 20,
         rlnEpochSizeSec: 1,
         rlnRelayTreePath: genTempPath("rln_tree", "wakunode_1")))
 

diff --git a/waku/waku_api/rest/relay/handlers.nim b/waku/waku_api/rest/relay/handlers.nim
@@ -132,7 +132,7 @@ proc installRelayApiHandlers*(router: var RestRouter, node: WakuNode, cache: Mes
       # append the proof to the message
       node.wakuRlnRelay.appendRLNProof(message,
                                        float64(getTime().toUnix())).isOkOr:
-        return RestApiResponse.internalServerError("Failed to publish: error appending RLN proof to message")
+        return RestApiResponse.internalServerError("Failed to publish: error appending RLN proof to message: " & $error)
 
     (await node.wakuRelay.validateMessage(pubsubTopic, message)).isOkOr:
       return RestApiResponse.badRequest("Failed to publish: " & error)
@@ -220,7 +220,7 @@ proc installRelayApiHandlers*(router: var RestRouter, node: WakuNode, cache: Mes
     if not node.wakuRlnRelay.isNil():
       node.wakuRlnRelay.appendRLNProof(message, float64(getTime().toUnix())).isOkOr:
         return RestApiResponse.internalServerError(
-          "Failed to publish: error appending RLN proof to message")
+          "Failed to publish: error appending RLN proof to message: " & $error)
 
     (await node.wakuRelay.validateMessage(pubsubTopic, message)).isOkOr:
       return RestApiResponse.badRequest("Failed to publish: " & error)

diff --git a/waku/waku_rln_relay/nonce_manager.nim b/waku/waku_rln_relay/nonce_manager.nim
@@ -62,6 +62,6 @@ proc getNonce*(n: NonceManager): NonceManagerResult[Nonce] =
 
   if retNonce >= n.nonceLimit:
     return err(NonceManagerError(kind: NonceLimitReached, 
-                                 error: "Nonce limit reached. Please wait for the next epoch"))
+                                 error: "Nonce limit reached. Please wait for the next epoch. requested nonce: " & $retNonce & " & nonceLimit: " & $n.nonceLimit))
 
   return ok(retNonce)
diff --git a/waku/waku_rln_relay/rln/wrappers.nim b/waku/waku_rln_relay/rln/wrappers.nim
@@ -266,6 +266,8 @@ when defined(rln_v2):
     let output = RateLimitProof(proof: zkproof,
                                 merkleRoot: proofRoot,
                                 externalNullifier: externalNullifier,
+                                epoch: epoch,
+                                rlnIdentifier: rlnIdentifier,
                                 shareX: shareX,
                                 shareY: shareY,
                                 nullifier: nullifier)
@@ -339,8 +341,15 @@ proc proofVerify*(rlnInstance: ptr RLN,
                   validRoots: seq[MerkleNode] = @[]): RlnRelayResult[bool] =
   ## verifies the proof, returns an error if the proof verification fails
   ## returns true if the proof is valid
+  var normalizedProof = proof
+  when defined(rln_v2):
+    # when we do this, we ensure that we compute the proof for the derived value
+    # of the externalNullifier. The proof verification will fail if a malicious peer
+    # attaches invalid epoch+rlnidentifier pair
+    normalizedProof.externalNullifier = poseidon(@[@(proof.epoch), @(proof.rlnIdentifier)]).valueOr:
+      return err("could not construct the external nullifier")
   var
-    proofBytes = serialize(proof, data)
+    proofBytes = serialize(normalizedProof, data)
     proofBuffer = proofBytes.toBuffer()
     validProof: bool
     rootsBytes = serialize(validRoots)