replace risky khatru.GetConnection().AuthedPubKeys with safe helper.

Author: fiatjaf

core.go

@@ -258,7 +258,7 @@ func queryMain(ctx context.Context, filter nostr.Filter) iter.Seq[nostr.Event] {
 		// normal query
 		if global.Settings.Paywall.AmountSats > 0 && global.Settings.Paywall.PeriodDays > 0 {
 			// use this special query that filters content for paying visitors
-			authed := khatru.GetConnection(ctx).AuthedPublicKeys
+			authed := khatru.GetAllAuthed(ctx)
 
 			for evt := range global.IL.Main.QueryEvents(filter, 500) {
 				if nip70.IsProtected(evt) && (global.Settings.Paywall.Tag == "" || evt.Tags.FindWithValue("t", global.Settings.Paywall.Tag) != nil) {

favorites/relay.go

@@ -78,7 +78,7 @@ func setupEnabled() {
 		policies.PreventTooManyIndexableTags(1200, nil, []nostr.Kind{3}),
 		policies.RestrictToSpecifiedKinds(true, 1, 11, 1111, 1222, 1244, 30023, 30818, 9802, 20, 21, 22),
 		func(ctx context.Context, evt nostr.Event) (bool, string) {
-			authedPublicKeys := khatru.GetConnection(ctx).AuthedPublicKeys
+			authedPublicKeys := khatru.GetAllAuthed(ctx)
 			if len(authedPublicKeys) == 0 {
 				return true, "auth-required: must be a relay member"
 			}

go.mod

@@ -3,7 +3,7 @@ module github.com/fiatjaf/pyramid
 go 1.25
 
 require (
-	fiatjaf.com/nostr v0.0.0-20251201193824-15dc5b11aa09
+	fiatjaf.com/nostr v0.0.0-20251203223123-b323ca1b7327
 	github.com/FastFilter/xorfilter v0.2.1
 	github.com/a-h/templ v0.3.960
 	github.com/kelseyhightower/envconfig v1.4.0

go.sum

@@ -1,7 +1,5 @@
-fiatjaf.com/nostr v0.0.0-20251126120447-7261a4b515ed h1:dip4Bxlfj4/N2oIIGCZpcYRrvfMObcXRcyBM5uYswnM=
-fiatjaf.com/nostr v0.0.0-20251126120447-7261a4b515ed/go.mod h1:ue7yw0zHfZj23Ml2kVSdBx0ENEaZiuvGxs/8VEN93FU=
-fiatjaf.com/nostr v0.0.0-20251201193824-15dc5b11aa09 h1:oU/3PgIfxaGdMoaCIl88JRNFcoMdagD3aYNM2a6NGoQ=
-fiatjaf.com/nostr v0.0.0-20251201193824-15dc5b11aa09/go.mod h1:ue7yw0zHfZj23Ml2kVSdBx0ENEaZiuvGxs/8VEN93FU=
+fiatjaf.com/nostr v0.0.0-20251203223123-b323ca1b7327 h1:Cv7SQkTdSx3b2RxAfjbNiO7oHKzB4Bumny0DWD1AUXk=
+fiatjaf.com/nostr v0.0.0-20251203223123-b323ca1b7327/go.mod h1:ue7yw0zHfZj23Ml2kVSdBx0ENEaZiuvGxs/8VEN93FU=
 github.com/FastFilter/xorfilter v0.2.1 h1:lbdeLG9BdpquK64ZsleBS8B4xO/QW1IM0gMzF7KaBKc=
 github.com/FastFilter/xorfilter v0.2.1/go.mod h1:aumvdkhscz6YBZF9ZA/6O4fIoNod4YR50kIVGGZ7l9I=
 github.com/ImVexed/fasturl v0.0.0-20230304231329-4e41488060f3 h1:ClzzXMDDuUbWfNNZqGeYq4PnYOlwlOVIvSyNaIy0ykg=

groups/filter.go

@@ -11,7 +11,7 @@ func (s *GroupsState) RequestAuthWhenNecessary(
 	ctx context.Context,
 	filter nostr.Filter,
 ) (reject bool, msg string) {
-	authed := khatru.GetConnection(ctx).AuthedPublicKeys
+	authed := khatru.GetAllAuthed(ctx)
 	groupIds, _ := filter.Tags["h"]
 
 	for _, groupId := range groupIds {

groups/queries.go

@@ -11,7 +11,7 @@ import (
 
 func (s *GroupsState) Query(ctx context.Context, filter nostr.Filter) iter.Seq[nostr.Event] {
 	return func(yield func(nostr.Event) bool) {
-		authed := khatru.GetConnection(ctx).AuthedPublicKeys
+		authed := khatru.GetAllAuthed(ctx)
 		groupIds, hasGroupIds := filter.Tags["d"]
 
 		switch hasGroupIds {

inbox/core.go

@@ -37,7 +37,7 @@ func rejectFilter(ctx context.Context, filter nostr.Filter) (bool, string) {
 
 	// from now on we know it's a secret kind query
 	// secret kinds require authentication
-	authedPublicKeys := khatru.GetConnection(ctx).AuthedPublicKeys
+	authedPublicKeys := khatru.GetAllAuthed(ctx)
 	if len(authedPublicKeys) == 0 {
 		return true, "auth-required: must authenticate to see private events"
 	}

internal/relay.go

@@ -70,7 +70,7 @@ func setupEnabled() {
 		policies.NoSearchQueries,
 		policies.MustAuth,
 		func(ctx context.Context, _ nostr.Filter) (bool, string) {
-			authedPublicKeys := khatru.GetConnection(ctx).AuthedPublicKeys
+			authedPublicKeys := khatru.GetAllAuthed(ctx)
 			if len(authedPublicKeys) == 0 {
 				return true, "auth-required: this is only viewable by relay members"
 			}