verify description hash

src/Element/Timeline.tsx

@@ -53,7 +53,7 @@ export default function Timeline({ subject, postsOnly = false, method, ignoreMod
             }
             case EventKind.ZapReceipt: {
                 const zap = parseZap(e)
-              return zap.e ? null : <Zap zap={zap} />
+                return zap.e ? null : <Zap zap={zap} key={e.id} />
             }
             case EventKind.Reaction:
             case EventKind.Repost: {

src/Element/Zap.tsx

@@ -4,6 +4,7 @@ import { useSelector } from "react-redux";
 // @ts-expect-error
 import { decode as invoiceDecode } from "light-bolt11-decoder";
 import { bytesToHex } from "@noble/hashes/utils";
+import { sha256 } from "Util";
 
 //import { sha256 } from "Util";
 import { formatShort } from "Number";
@@ -30,21 +31,24 @@ function getInvoice(zap: TaggedRawEvent) {
   return { amount, hash: hash ? bytesToHex(hash) : undefined };
 }
 
-function getZapper(zap: TaggedRawEvent, dhash: string) {
+interface Zapper {
+  pubkey?: HexKey,
+  isValid: boolean
+}
+
+function getZapper(zap: TaggedRawEvent, dhash: string): Zapper {
   const zapRequest = findTag(zap, 'description')
   if (zapRequest) {
     const rawEvent: TaggedRawEvent = JSON.parse(zapRequest);
     if (Array.isArray(rawEvent)) {
       // old format, ignored
-      const rawDescriptionTag = rawEvent.find(a => a[0] === 'application/nostr')
+      return { isValid: false };
-      const rawDescription = rawDescriptionTag && rawDescriptionTag[1]
-      const request = typeof rawDescription === 'string' ? JSON.parse(rawDescription) : rawDescription
-      return request?.pubkey
     }
-    //const metaHash = sha256(zapRequest);
+    const metaHash = sha256(zapRequest);
     const ev = new Event(rawEvent)
-    return ev.PubKey
+    return { pubkey: ev.PubKey, isValid: dhash === metaHash };
   }
+  return { isValid: false }
 }
 
 interface ParsedZap {
@@ -59,7 +63,7 @@ interface ParsedZap {
 
 export function parseZap(zap: TaggedRawEvent): ParsedZap {
   const { amount, hash } = getInvoice(zap)
-  const zapper = hash && getZapper(zap, hash)
+  const zapper = hash ? getZapper(zap, hash) : { isValid: false };
   const e = findTag(zap, 'e')
   const p = findTag(zap, 'p')!
   return {
@@ -67,9 +71,9 @@ export function parseZap(zap: TaggedRawEvent): ParsedZap {
     e,
     p,
     amount: Number(amount) / 1000,
-    zapper,
+    zapper: zapper.pubkey,
     content: zap.content,
-    valid: true,
+    valid: zapper.isValid,
   }
 }
 

src/Number.ts

@@ -4,7 +4,7 @@ const intl = new Intl.NumberFormat("en", {
 });
 
 export function formatShort(n: number) {
-  if (n < 1e5) {
+  if (n < 2e3) {
     return n
   } else if (n < 1e8) {
     return `${intl.format(n / 1e3)}K`