Auth on DMs Req

[ziomc-com]

Hi how can i enable Auth to read a DMs, i try with filterValidation but doesn't work

filterValidation {
# Enable strict filter validation for REQ messages
enabled = true

    # Maximum number of filters allowed per REQ (when validation enabled)
    maxFiltersPerReq = 3

    # Minimum number of filters required per REQ (when validation enabled)
    minFiltersPerReq = 1

    # Maximum number of kinds allowed per filter (when validation enabled)
    maxKindsPerFilter = 3

    # Comma-separated list of allowed kinds (empty = all allowed)
    allowedKinds = "4"

    # Require at least one author, p tag, or e tag in each filter
    requireAuthorOrTag = true
}

[keshav0479]

filterValidation won't help here, it only validates the structure of REQ filters (number of filters, allowed kinds, requiring an author/p/e tag), it has no awareness of NIP-42 AUTH state.

strfry only uses AUTH for write-side enforcement today: NIP-70 protected events, plus the authed pubkey gets passed to write-policy plugins,there's no read-side AUTH gate you can flip on to restrict who can request kind 4 events.
one other thing to watch out for: allowedKinds = "4" only kicks in when the client includes a kinds field. If they omit it, the kind check is skipped, so other kinds can still match. so that alone isn't locking down DM reads either.

That would need explicit AUTH-aware handling on the REQ path, i don't think there's a config only way to do it today.

[hoytech]

Yep like @keshav0479 said, there's not currently any way to do this in mainline strfry. We're going to be exploring some approaches to this soon. So hopefully it should be possible in the next major release.