status-im
/
status-go
mirror of https://github.com/status-im/status-go.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

fix: use community controlNode pubkey instead of community ID for verifying the received community data signer (#4411)

This commit is contained in:
Mykhailo Prakhov 2023-12-04 10:56:54 +01:00 committed by GitHub
parent 82d5e0c849
commit b9197510b1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
protocol/communities/community.go
View File

@ -1758,7 +1758,7 @@ func (o *Community) VerifyGrantSignature(data []byte) (*protobuf.Grant, error) {
return nil, err
}
if !common.IsPubKeyEqual(o.config.ID, extractedPublicKey) {
if !common.IsPubKeyEqual(o.ControlNode(), extractedPublicKey) {
return nil, ErrInvalidGrant
}
@ -1778,7 +1778,7 @@ func (o *Community) CanPost(pk *ecdsa.PublicKey, chatID string, grantBytes []byt
}
// community creator can always post, return immediately
if common.IsPubKeyEqual(pk, o.config.ID) {
if common.IsPubKeyEqual(pk, o.ControlNode()) {
return true, nil
}

4
protocol/communities/community_event.go
View File

@ -187,7 +187,7 @@ func (o *Community) UpdateCommunityByEvents(communityEventMessage *CommunityEven
defer o.mutex.Unlock()
// Validate that EventsBaseCommunityDescription was signed by the control node
description, err := validateAndGetEventsMessageCommunityDescription(communityEventMessage.EventsBaseCommunityDescription, o.config.ID)
description, err := validateAndGetEventsMessageCommunityDescription(communityEventMessage.EventsBaseCommunityDescription, o.ControlNode())
if err != nil {
return err
}
@ -342,7 +342,7 @@ func (o *Community) addNewCommunityEvent(event *CommunityEvent) error {
// If there were no events before, extract CommunityDescription from CommunityDescriptionProtocolMessage
// and check the signature
if o.config.EventsData == nil || len(o.config.EventsData.EventsBaseCommunityDescription) == 0 {
_, err := validateAndGetEventsMessageCommunityDescription(o.config.CommunityDescriptionProtocolMessage, o.config.ID)
_, err := validateAndGetEventsMessageCommunityDescription(o.config.CommunityDescriptionProtocolMessage, o.ControlNode())
if err != nil {
return err
}