jwinterm 20cbdd364a fix(smirk): sign first, grant Nostr scope only on demand — one approval for returning users ...

Previously always called getNostrPublicKey() then signNostrEvent() = two approvals every login. Now signNostrEvent() runs first; only if the wallet reports the origin lacks the Nostr scope (NOT_AUTHORIZED, thrown without a popup) do we call getNostrPublicKey() to grant it and retry. First-time still does the one-time scope grant; returning users get a single approval. (The double PASSWORD is the wallet's autoLockMinutes=0 default and is user-configurable, not dapp-controllable.)

2026-07-10 11:07:11 -04:00

..

smirkAuth.js

fix(smirk): sign first, grant Nostr scope only on demand — one approval for returning users

2026-07-10 11:07:11 -04:00

socketHandlers.js

fix: resolve security/correctness review + AAA graphics pass

2026-07-09 17:46:58 -04:00