mirror of
https://github.com/block/buzz.git
synced 2026-08-18 06:50:31 +02:00
klopez4212andnpub13fn4ahfnvaa2qwylvegdgeajqs0mph6v4qsw4jcqnw4mjh3hzh2quuucm5
955f6871db
1. P1 — Force NIP-98 signed auth for /transcribe/* endpoints regardless of BUZZ_REQUIRE_AUTH_TOKEN. The X-Pubkey dev fallback is spoofable, so a billable endpoint must always require cryptographic proof of identity before the membership check trusts the pubkey. 2. P2 — DictationButton now allows the stop action whenever isRecording is true, even during startup (mic live but SDP exchange in progress) or when the composer is disabled. Only blocks the button when idle and disabled, or when startup hasn't captured the mic yet.