Require current node possession proof

product-source/guanghu-knowledge-base/server/node-registration.ts

@@ -11,6 +11,7 @@ const SHA256_PATTERN = /^[a-f0-9]{64}$/;
 const MAX_CLAIM_LIFETIME_MS = 24 * 60 * 60 * 1000;
 const MAX_CLOCK_SKEW_MS = 5 * 60 * 1000;
 const registeredEndpoints = new WeakSet<object>();
+const verifiedClaims = new WeakSet<object>();
 
 export interface NodeRegistrationEndpoint {
   algorithm: 'Ed25519';
@@ -57,6 +58,13 @@ export interface VerifiedNodeRegistration extends NodeRegistrationClaimPayload {
   verifiedAt: number;
 }
 
+export function assertVerifiedNodeRegistration(
+  claim: VerifiedNodeRegistration,
+): VerifiedNodeRegistration {
+  if (!verifiedClaims.has(claim)) invalidClaim();
+  return claim;
+}
+
 export interface NodeRegistrationLookup {
   domainId: string;
   nodeType: DomainNodeType;
@@ -270,9 +278,11 @@ export function verifyNodeRegistrationClaim(
   } catch {
     invalidClaim();
   }
-  return Object.freeze({
+  const verified = Object.freeze({
     ...payload,
     signature: input.signature,
     verifiedAt: now,
   });
+  verifiedClaims.add(verified);
+  return verified;
 }