Avoids trying to decrypt a zap that was not sent by the author.

2023-05-06 22:17:43 -04:00
parent e5de2c45de
commit b093873eb0
1 changed files with 14 additions and 4 deletions
@@ -868,11 +868,21 @@ class Account(
                }

                if (altPrivateKeyToUse != null && altPubkeyToUse != null) {
-                    val result = event.getPrivateZapEvent(altPrivateKeyToUse, altPubkeyToUse)
-                    if (result == null) {
-                        Log.w("Private ZAP Decrypt", "Fail to decrypt Zap from ${note.author?.toBestDisplayName()} ${note.idNote()}")
+                    val altPubKeyFromPrivate = Utils.pubkeyCreate(altPrivateKeyToUse).toHexKey()
+
+                    if (altPubKeyFromPrivate == event.pubKey) {
+                        val result = event.getPrivateZapEvent(altPrivateKeyToUse, altPubkeyToUse)
+
+                        if (result == null) {
+                            Log.w(
+                                "Private ZAP Decrypt",
+                                "Fail to decrypt Zap from ${note.author?.toBestDisplayName()} ${note.idNote()}"
+                            )
+                        }
+                        result
+                    } else {
+                        null
                    }
-                    result
                } else {
                    null
                }