From ad58af86059f01ed3110d3c9d6e38c061258c0e4 Mon Sep 17 00:00:00 2001
From: Jon Staab <shtaab@gmail.com>
Date: Tue, 19 Nov 2024 09:25:02 -0800
Subject: [PATCH] Customize nip 46 perms

---
 src/app/commands.ts                   | 4 ++--
 src/app/components/LogInBunker.svelte | 6 +++---
 src/app/components/SignUp.svelte      | 8 ++++----
 src/app/state.ts                      | 8 ++++++++
 4 files changed, 17 insertions(+), 9 deletions(-)

diff --git a/src/app/commands.ts b/src/app/commands.ts
index f58afdb12..504a461f0 100644
--- a/src/app/commands.ts
+++ b/src/app/commands.ts
@@ -46,7 +46,6 @@ import {
   nip44EncryptToSelf,
   loadRelay,
   addSession,
-  nip46Perms,
   subscribe,
 } from "@welshman/app"
 import {
@@ -55,6 +54,7 @@ import {
   userMembership,
   MEMBERSHIPS,
   INDEXER_RELAYS,
+  NIP46_PERMS,
   loadMembership,
   loadSettings,
   getDefaultPubkeys,
@@ -123,7 +123,7 @@ export const subscribePersistent = (request: SubscribeRequestWithHandlers) => {
 export const loginWithNip46 = async (token: string, handler: Nip46Handler) => {
   const secret = makeSecret()
   const broker = Nip46Broker.get({secret, handler})
-  const result = await broker.connect(token, nip46Perms)
+  const result = await broker.connect(token, NIP46_PERMS)
 
   if (!result) return false
 
diff --git a/src/app/components/LogInBunker.svelte b/src/app/components/LogInBunker.svelte
index 7e92ce4d6..d50bbea39 100644
--- a/src/app/components/LogInBunker.svelte
+++ b/src/app/components/LogInBunker.svelte
@@ -1,7 +1,7 @@
 <script lang="ts">
   import {onDestroy} from "svelte"
   import {Nip46Broker} from "@welshman/signer"
-  import {nip46Perms, addSession} from "@welshman/app"
+  import {addSession} from "@welshman/app"
   import {slideAndFade} from "@lib/transition"
   import Spinner from "@lib/components/Spinner.svelte"
   import Button from "@lib/components/Button.svelte"
@@ -15,14 +15,14 @@
   import {pushModal, clearModals} from "@app/modal"
   import {setChecked} from "@app/notifications"
   import {pushToast} from "@app/toast"
-  import {PLATFORM_URL, PLATFORM_NAME, PLATFORM_LOGO, SIGNER_RELAYS} from "@app/state"
+  import {NIP46_PERMS, PLATFORM_URL, PLATFORM_NAME, PLATFORM_LOGO, SIGNER_RELAYS} from "@app/state"
 
   const back = () => history.back()
 
   const abortController = new AbortController()
 
   const init = Nip46Broker.initiate({
-    perms: nip46Perms,
+    perms: NIP46_PERMS,
     url: PLATFORM_URL,
     name: PLATFORM_NAME,
     relays: SIGNER_RELAYS,
diff --git a/src/app/components/SignUp.svelte b/src/app/components/SignUp.svelte
index d2833afd6..6e7c7364f 100644
--- a/src/app/components/SignUp.svelte
+++ b/src/app/components/SignUp.svelte
@@ -1,6 +1,6 @@
 <script lang="ts">
   import {makeSecret, Nip46Broker} from "@welshman/signer"
-  import {addSession, nip46Perms, loadHandle} from "@welshman/app"
+  import {addSession, loadHandle} from "@welshman/app"
   import Icon from "@lib/components/Icon.svelte"
   import Field from "@lib/components/Field.svelte"
   import Link from "@lib/components/Link.svelte"
@@ -11,7 +11,7 @@
   import InfoNostr from "@app/components/InfoNostr.svelte"
   import {pushModal, clearModals} from "@app/modal"
   import {setChecked} from "@app/notifications"
-  import {PLATFORM_NAME} from "@app/state"
+  import {PLATFORM_NAME, NIP46_PERMS} from "@app/state"
   import {pushToast} from "@app/toast"
 
   const login = () => pushModal(LogIn)
@@ -28,7 +28,7 @@
     }
 
     const signupBroker = Nip46Broker.get({secret, handler})
-    const pubkey = await signupBroker.createAccount(username, nip46Perms)
+    const pubkey = await signupBroker.createAccount(username, NIP46_PERMS)
 
     if (!pubkey) {
       return pushToast({
@@ -40,7 +40,7 @@
     // Gotta use user pubkey as the handler pubkey for historical reasons
     const loginBroker = Nip46Broker.get({secret, handler: {...handler, pubkey}})
 
-    if (await loginBroker.connect("", nip46Perms)) {
+    if (await loginBroker.connect("", NIP46_PERMS)) {
       addSession({method: "nip46", pubkey, secret, handler: {...handler, pubkey}})
       pushToast({message: "Successfully logged in!"})
       setChecked("*")
diff --git a/src/app/state.ts b/src/app/state.ts
index c0f52bed3..5ac491a75 100644
--- a/src/app/state.ts
+++ b/src/app/state.ts
@@ -20,6 +20,8 @@ import {
 import {
   getIdFilters,
   WRAP,
+  CLIENT_AUTH,
+  AUTH_JOIN,
   REACTION,
   ZAP_RESPONSE,
   DIRECT_MESSAGE,
@@ -99,6 +101,12 @@ export const IMGPROXY_URL = "https://imgproxy.coracle.social"
 
 export const REACTION_KINDS = [REACTION, ZAP_RESPONSE]
 
+export const NIP46_PERMS =
+  "nip04_encrypt,nip04_decrypt,nip44_encrypt,nip44_decrypt" +
+  [CLIENT_AUTH, AUTH_JOIN, MESSAGE, THREAD, COMMENT, MEMBERSHIPS, WRAP, REACTION]
+    .map(k => `sign_event:${k}`)
+    .join(",")
+
 export const colors = [
   ["amber", twColors.amber[600]],
   ["blue", twColors.blue[600]],