Merge pull request #608 from arconnectio/fix/add-sign-password-check

fix: add missing password check in sign auth
wanderwallet · Jan 9, 2025 · 7ec395f · 7ec395f
2 parents 1d0aa5a + 5b5d8bd
commit 7ec395f
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/src/routes/auth/sign.tsx b/src/routes/auth/sign.tsx
@@ -43,6 +43,7 @@ import { getTagValue } from "~tokens/aoTokens/ao";
 import { humanizeTimestampTags } from "~utils/timestamp";
 import styled from "styled-components";
 import { ChevronDownIcon, ChevronUpIcon } from "@iconicicons/react";
+import { checkPassword } from "~wallets/auth";
 
 export function SignAuthRequestView() {
   const { authRequest, acceptRequest, rejectRequest } =
@@ -240,6 +241,17 @@ export function SignAuthRequestView() {
 
   const sign = async () => {
     if (!transaction) return;
+    if (askPassword) {
+      const checkPw = await checkPassword(passwordInput.state);
+      if (!checkPw) {
+        setToast({
+          type: "error",
+          content: browser.i18n.getMessage("invalidPassword"),
+          duration: 2400
+        });
+        return;
+      }
+    }
     if (wallet.type === "hardware") {
       // load tx ur
       if (!page) await loadTransactionUR();