mirror of https://github.com/waku-org/nwaku.git
72 lines
2.1 KiB
Nim
72 lines
2.1 KiB
Nim
when (NimMajor, NimMinor) < (1, 4):
|
|
{.push raises: [Defect].}
|
|
else:
|
|
{.push raises: [].}
|
|
|
|
import
|
|
std/math,
|
|
chronicles,
|
|
chronos,
|
|
metrics,
|
|
stew/byteutils,
|
|
stew/endians2,
|
|
libp2p/protocols/pubsub/gossipsub,
|
|
libp2p/protocols/pubsub/rpc/messages,
|
|
libp2p/protocols/pubsub/errors,
|
|
nimcrypto/sha2,
|
|
secp256k1
|
|
|
|
const MessageWindowInSec = 5*60 # +- 5 minutes
|
|
|
|
import
|
|
../../waku/v2/waku_relay/protocol,
|
|
../../waku/v2/waku_core
|
|
|
|
declarePublicCounter waku_msg_validator_signed_outcome, "number of messages for each validation outcome", ["result"]
|
|
|
|
# Application level message hash
|
|
proc msgHash*(pubSubTopic: string, msg: WakuMessage): array[32, byte] =
|
|
var ctx: sha256
|
|
ctx.init()
|
|
defer: ctx.clear()
|
|
|
|
ctx.update(pubsubTopic.toBytes())
|
|
ctx.update(msg.payload)
|
|
ctx.update(msg.contentTopic.toBytes())
|
|
ctx.update(msg.timestamp.uint64.toBytes(Endianness.littleEndian))
|
|
ctx.update(if msg.ephemeral: @[1.byte] else: @[0.byte])
|
|
|
|
return ctx.finish()
|
|
|
|
proc withinTimeWindow*(msg: WakuMessage): bool =
|
|
# Returns true if the message timestamp is:
|
|
# abs(now - msg.timestamp) < MessageWindowInSec
|
|
let ts = msg.timestamp
|
|
let now = getNowInNanosecondTime()
|
|
let window = getNanosecondTime(MessageWindowInSec)
|
|
|
|
if abs(now - ts) < window:
|
|
return true
|
|
return false
|
|
|
|
proc addSignedTopicValidator*(w: WakuRelay, topic: PubsubTopic, publicTopicKey: SkPublicKey) =
|
|
debug "adding validator to signed topic", topic=topic, publicTopicKey=publicTopicKey
|
|
|
|
proc validator(topic: string, message: messages.Message): Future[errors.ValidationResult] {.async.} =
|
|
let msg = WakuMessage.decode(message.data)
|
|
var outcome = errors.ValidationResult.Reject
|
|
|
|
if msg.isOk():
|
|
if msg.get.timestamp != 0:
|
|
if msg.get.withinTimeWindow():
|
|
let msgHash = SkMessage(topic.msgHash(msg.get))
|
|
let recoveredSignature = SkSignature.fromRaw(msg.get.meta)
|
|
if recoveredSignature.isOk():
|
|
if recoveredSignature.get.verify(msgHash, publicTopicKey):
|
|
outcome = errors.ValidationResult.Accept
|
|
|
|
waku_msg_validator_signed_outcome.inc(labelValues = [$outcome])
|
|
return outcome
|
|
|
|
w.addValidator(topic, validator)
|