Merge pull request #112 from IntersectMBO/pre-prod

Pre prod
IntersectMBO · Aug 23, 2024 · c742321 · c742321
2 parents 097d498 + f887c2c
commit c742321
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/backend/src/extensions/users-permissions/strapi-server.js b/backend/src/extensions/users-permissions/strapi-server.js
@@ -63,7 +63,13 @@ module.exports = (plugin) => {
       const publicKey = PublicKey.from_bytes(pubKeyBytes);
       const signature = Ed25519Signature.from_bytes(decoded.signature());
       const receivedData = decoded.signed_data().to_bytes();
-      const isVerified = publicKey.verify(receivedData, signature);
+
+      // Remove network id from identifier
+			const rawKeyHash = identifier.slice(2);
+
+			const isVerified =
+				publicKey.verify(receivedData, signature) &&
+				rawKeyHash === publicKey.hash().to_hex();
 
       if (!isVerified) {
         throw new ApplicationError("Verification failed");