Merge pull request #267 from relaystr/blossom-missing-authorization

Blossom missing authorization

Author: nogringo

packages/ndk/lib/data_layer/repositories/blossom/blossom_impl.dart

@@ -418,9 +418,15 @@ class BlossomRepositoryImpl implements BlossomRepository {
           if (until != null) 'until': '${until.millisecondsSinceEpoch ~/ 1000}',
         };
 
+        final headers = <String, String>{};
+        if (authorization != null) {
+          headers['Authorization'] = "Nostr ${authorization.toBase64()}";
+        }
+
         final response = await client.get(
           url: Uri.parse('$url/list/$pubkey')
               .replace(queryParameters: queryParams),
+          headers: headers,
         );
 
         if (response.statusCode == 200) {

packages/ndk/test/mocks/mock_blossom_server.dart

@@ -90,6 +90,22 @@ class MockBlossomServer {
 
     // GET /list/<pubkey> - List Blobs
     router.get('/list/<pubkey>', (Request request, String pubkey) {
+      final authHeader = request.headers['authorization'];
+
+      if (authHeader == null) {
+        return Response.forbidden('Missing authorization');
+      }
+
+      try {
+        final authEvent =
+            json.decode(utf8.decode(base64Decode(authHeader.split(' ')[1])));
+        if (!_verifyAuthEvent(authEvent, 'list')) {
+          return Response.forbidden('Invalid authorization event');
+        }
+      } catch (e) {
+        return Response.forbidden('Invalid authorization format');
+      }
+
       final since = int.tryParse(request.url.queryParameters['since'] ?? '');
       final until = int.tryParse(request.url.queryParameters['until'] ?? '');
 

packages/ndk/test/usecases/files/blossom_test.dart

@@ -463,4 +463,19 @@ void main() {
       expect(reportRsp, equals(200));
     });
   });
+
+  test('Get blobs with NDK', () async {
+    final ndk = Ndk.defaultConfig();
+
+    final keyPair = Bip340.generatePrivateKey();
+    ndk.accounts.loginPrivateKey(
+      pubkey: keyPair.publicKey,
+      privkey: keyPair.privateKey!,
+    );
+
+    await ndk.blossom.listBlobs(
+      pubkey: ndk.accounts.getPublicKey()!,
+      serverUrls: ["http://localhost:3000"],
+    );
+  });
 }