Implement fail-closed node keystore bridge

product-source/guanghu-knowledge-base/server/node-possession-proof.ts

@@ -81,6 +81,18 @@ export function nodePossessionChallengeSigningBytes(challenge: NodePossessionCha
   }), 'utf8');
 }
 
+export function assertActiveNodePossessionChallenge(
+  challenge: NodePossessionChallenge,
+  now = Date.now(),
+): NodePossessionChallenge {
+  if (!issuedChallenges.has(challenge)
+    || consumedChallenges.has(challenge)
+    || !Number.isSafeInteger(now)
+    || now < challenge.issuedAt
+    || now >= challenge.expiresAt) invalidProof();
+  return challenge;
+}
+
 export function createNodePossessionChallenge(
   registration: VerifiedNodeRegistration,
   now = Date.now(),