fix: initial hand-shake from archipelago

decentraland · Oct 4, 2024 · a95e32d · a95e32d
1 parent 43725c8
commit a95e32d
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/browser-interface/packages/shared/realm/connections/ArchipelagoConnection.ts b/browser-interface/packages/shared/realm/connections/ArchipelagoConnection.ts
@@ -74,6 +74,10 @@ export async function createArchipelagoConnection(
 
       switch (message.$case) {
         case 'challengeResponse': {
+          if (!message.challengeResponse.challengeToSign.startsWith('dcl-')) {
+            throw new Error('Invalid initial hand-shake')
+          }
+
           const authChainJson = JSON.stringify(
             Authenticator.signPayload(identity, message.challengeResponse.challengeToSign)
           )