commit 5ab414c1264f32acc7b6ca8b94be89547f61da27 · nekomimi.pet/wisp.place-monorepo

+20 -1
src/lib/dns-verification-worker.ts
···

       100
       100
        
                 // Extract hash from id (SHA256 of did:domain)

     

       101
       101
        
                 const expectedHash = id.substring(0, 16);

     

       102
       102
        
       

     

       103
       103
       -
                 // Verify DNS records

     

       103
       103
       +
                 // Verify DNS records - this will only verify if TXT record matches this specific DID

     

       104
       104
        
                 const result = await verifyCustomDomain(domain, did, expectedHash);

     

       105
       105
        
       

     

       106
       106
        
                 if (result.verified) {

     

       107
       107
       +
                   // Double-check: ensure this record is still the current owner in database

     

       108
       108
       +
                   // This prevents race conditions where domain ownership changed during verification

     

       109
       109
       +
                   const currentOwner = await db<Array<{ id: string; did: string; verified: boolean }>>`

     

       110
       110
       +
                     SELECT id, did, verified FROM custom_domains WHERE domain = ${domain}

     

       111
       111
       +
                   `;

     

       112
       112
       +
                   

     

       113
       113
       +
                   const isStillOwner = currentOwner.length > 0 && currentOwner[0].id === id;

     

       114
       114
       +
                   

     

       115
       115
       +
                   if (!isStillOwner) {

     

       116
       116
       +
                     this.log(`⚠️  Domain ownership changed during verification: ${domain}`, {

     

       117
       117
       +
                       expectedId: id,

     

       118
       118
       +
                       expectedDid: did,

     

       119
       119
       +
                       actualId: currentOwner[0]?.id,

     

       120
       120
       +
                       actualDid: currentOwner[0]?.did

     

       121
       121
       +
                     });

     

       122
       122
       +
                     runStats.failed++;

     

       123
       123
       +
                     continue;

     

       124
       124
       +
                   }

     

       125
       125
       +
       

     

       107
       126
        
                   // Update verified status and last_verified_at timestamp

     

       108
       127
        
                   await db`

     

       109
       128
        
                     UPDATE custom_domains