Verify events before dispatch

nostr-java-api/src/main/java/nostr/api/NostrSpringWebSocketClient.java

@@ -3,6 +3,7 @@
 import lombok.Getter;
 import lombok.NoArgsConstructor;
 import lombok.NonNull;
+import nostr.api.service.NoteService;
 import nostr.base.IEvent;
 import nostr.base.ISignable;
 import nostr.client.springwebsocket.SpringWebSocketClient;
@@ -12,6 +13,7 @@
 import nostr.event.message.ReqMessage;
 import nostr.id.Identity;
 import nostr.util.NostrUtil;
+import nostr.api.service.impl.DefaultNoteService;
 
 import java.io.IOException;
 import java.util.HashMap;
@@ -27,12 +29,23 @@ public class NostrSpringWebSocketClient implements NostrIF {
     @Getter
     private Identity sender;
 
+    private NoteService noteService = new DefaultNoteService();
+
     private static volatile NostrSpringWebSocketClient INSTANCE;
 
     public NostrSpringWebSocketClient(String relayName, String relayUri) {
         setRelays(Map.of(relayName, relayUri));
     }
 
+    public NostrSpringWebSocketClient(@NonNull NoteService noteService) {
+        this.noteService = noteService;
+    }
+
+    public NostrSpringWebSocketClient(@NonNull Identity sender, @NonNull NoteService noteService) {
+        this.sender = sender;
+        this.noteService = noteService;
+    }
+
     public static NostrIF getInstance() {
         if (INSTANCE == null) {
             synchronized (NostrSpringWebSocketClient.class) {
@@ -78,8 +91,13 @@ public NostrIF setRelays(@NonNull Map<String, String> relays) {
 
     @Override
     public List<String> sendEvent(@NonNull IEvent event) {
-        return clientMap.values().stream().map(client ->
-                client.sendEvent(event)).flatMap(List::stream).distinct().toList();
+        if (event instanceof GenericEvent genericEvent) {
+            if (!verify(genericEvent)) {
+                throw new IllegalStateException("Event verification failed");
+            }
+        }
+
+        return noteService.send(event, clientMap);
     }
 
     @Override

nostr-java-api/src/main/java/nostr/api/WebSocketClientHandler.java

@@ -31,7 +31,7 @@ protected WebSocketClientHandler(@NonNull String relayName, @NonNull String rela
         this.eventClient = new SpringWebSocketClient(relayUri);
     }
 
-    protected List<String> sendEvent(@NonNull IEvent event) {
+    public List<String> sendEvent(@NonNull IEvent event) {
         ((GenericEvent) event).validate();
         return eventClient.send(new EventMessage(event)).stream().toList();
     }

nostr-java-api/src/main/java/nostr/api/service/NoteService.java

@@ -0,0 +1,12 @@
+package nostr.api.service;
+
+import lombok.NonNull;
+import nostr.api.WebSocketClientHandler;
+import nostr.base.IEvent;
+
+import java.util.List;
+import java.util.Map;
+
+public interface NoteService {
+    List<String> send(@NonNull IEvent event, @NonNull Map<String, WebSocketClientHandler> clients);
+}

nostr-java-api/src/main/java/nostr/api/service/impl/DefaultNoteService.java

@@ -0,0 +1,23 @@
+package nostr.api.service.impl;
+
+import lombok.NonNull;
+import nostr.api.service.NoteService;
+import nostr.api.WebSocketClientHandler;
+import nostr.base.IEvent;
+
+import java.util.List;
+import java.util.Map;
+
+/**
+ * Default implementation that dispatches notes through all WebSocket clients.
+ */
+public class DefaultNoteService implements NoteService {
+    @Override
+    public List<String> send(@NonNull IEvent event, @NonNull Map<String, WebSocketClientHandler> clients) {
+        return clients.values().stream()
+                .map(client -> client.sendEvent(event))
+                .flatMap(List::stream)
+                .distinct()
+                .toList();
+    }
+}

nostr-java-api/src/test/java/nostr/api/unit/NostrSpringWebSocketClientEventVerificationTest.java

@@ -0,0 +1,43 @@
+package nostr.api.unit;
+
+import nostr.api.NostrSpringWebSocketClient;
+import nostr.api.service.NoteService;
+import org.mockito.Mockito;
+import nostr.config.Constants;
+import nostr.event.impl.GenericEvent;
+import nostr.id.Identity;
+import org.junit.jupiter.api.Test;
+
+import java.util.List;
+
+import static org.junit.jupiter.api.Assertions.*;
+
+public class NostrSpringWebSocketClientEventVerificationTest {
+
+    @Test
+    void sendEventThrowsWhenUnsigned() {
+        GenericEvent event = new GenericEvent();
+        event.setPubKey(Identity.generateRandomIdentity().getPublicKey());
+        event.setKind(Constants.Kind.SHORT_TEXT_NOTE);
+        event.setContent("test");
+
+        NoteService service = Mockito.mock(NoteService.class);
+        Mockito.when(service.send(Mockito.any(), Mockito.any())).thenReturn(List.of());
+        NostrSpringWebSocketClient client = new NostrSpringWebSocketClient(service);
+        assertThrows(IllegalStateException.class, () -> client.sendEvent(event));
+    }
+
+    @Test
+    void sendEventReturnsEmptyListWhenSigned() {
+        Identity identity = Identity.generateRandomIdentity();
+        GenericEvent event = new GenericEvent(identity.getPublicKey(), Constants.Kind.SHORT_TEXT_NOTE);
+        event.setContent("signed");
+        identity.sign(event);
+
+        NoteService service = Mockito.mock(NoteService.class);
+        Mockito.when(service.send(Mockito.any(), Mockito.any())).thenReturn(List.of());
+        NostrSpringWebSocketClient client = new NostrSpringWebSocketClient(service);
+        List<String> responses = client.sendEvent(event);
+        assertTrue(responses.isEmpty());
+    }
+}