Final DM (SIGit complete) not being sent #92
Labels
No Label
Kind/Breaking
Kind/Bug
Kind/Documentation
Kind/Enhancement
Kind/Feature
Kind/Security
Kind/Testing
Priority
Critical
Priority
High
Priority
Low
Priority
Medium
Reviewed
Confirmed
Reviewed
Duplicate
Reviewed
Invalid
Reviewed
Won't Fix
Status
Abandoned
Status
Blocked
Status
Need More Info
No Milestone
No project
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Depends on
#229 callbackPath - handleRootRedirect, navigateAfterLogin
sigit/sigit.io
#232 Sigit Routing - Add Sigit ID as a Path Param to /verify
sigit/sigit.io
Reference: sigit/sigit.io#92
Loading…
Reference in New Issue
Block a user
No description provided.
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
When the final signer has signed, the notification email (SIGit complete + link) is not being sent
Final email (SIGit complete) not being sentto Final DM (SIGit complete) not being sent@b
We can't send a kind 4 DM as the signer, as that would leak a relationship between the signers
We should either send gift-wrapped DMs or a DM from a random NPUB as you suggest
Probably kind-17 makes the most sense as otherwise the SIGit DMs could be an attack vector (trick people into visiting a dangerous url)
About the link - it should be /sign or /verify depending on whether the target NPUB is the next signer or not
Did you mean
https://github.com/nostr-protocol/nips/blob/master/17.md
or
https://github.com/nostr-protocol/nips/blob/master/25.md#reactions-to-a-website or
Ah, it's not just final signer. So, just to make sure I've understood everything, after each signing, we are sending a DM.
If there's a next signer, we send a single DM with link to
/sign
, and if it's a final signer we notify everyone with/verify
link (creator, signers and viewers)?This is how it looks in coracle for the quick test (nip04)
Sorry yeah, NIP-17 not kind-17 lol
We should send the creator and the signer a message after every signature (
/sign
or/verify
depending on status). If it's a final signature then it would be sent to everyone (creator, signers, viewers,/verify
only)