From 558a7c5a08cb172dbe229675a6b330611000d3fc Mon Sep 17 00:00:00 2001 From: Adam Soltys Date: Tue, 13 Oct 2026 16:23:39 -0700 Subject: nostr: fetch the encrypted key with the password when there's no session key Without the sk cookie from a password login (nostr logins, older sessions) the reveal button was hidden and signing failed. Ask for the password and get the key from /nsec instead. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01UjHzoBmW1iPpEe5qC2LDYB --- src/lib/nostr.ts | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to 'src/lib') diff --git a/src/lib/nostr.ts b/src/lib/nostr.ts index 69e21286..2e993f9d 100644 --- a/src/lib/nostr.ts +++ b/src/lib/nostr.ts @@ -75,8 +75,13 @@ export const getPrivateKey = async (user: User): Promise => { // /me no longer returns the encrypted key; /login decrypts it into the // sk cookie instead. user.nsec is only present on a fresh login response. + // Sessions without either (nostr or older logins) fetch it with the + // password. const sk = browser && cookies.get("sk"); - const { nsec } = user; + let { nsec } = user; + + if (!sk && !nsec && user.hasnsec) + ({ nsec } = await post("/nsec", { password: await getPassword() })); if (sk) { k = hexToBytes(sk); -- cgit v1.2.3