cameri / nostream / 31555197199

70%

push

github

feat(nip98): add Authorization header verifier (#722)

* feat(nip98): add Authorization header verifier

* fix(nip98): tighten Authorization header parsing per review

Use one regex for scheme+token and lower the default header cap to 2KB.

* fix(nip98): parse auth JSON in decoder and fix digest compare

Move JSON.parse into the Authorization decoder and compare payload
digests with timingSafeEqual only after an explicit hex format check.

* fix(nip98): handle verifier edge cases

2385 of 3758 branches covered (63.46%)

Branch coverage included in aggregate %.

99 of 101 new or added lines in 1 file covered. (98.02%)

5372 of 7292 relevant lines covered (73.67%)

34.2 hits per line