chat_join: модуль join-протокола, invite-ссылки v2, синхронизация мемберов

src/chat/db_sync.c

@@ -6,6 +6,7 @@
 #include "../utun_instance.h"
 #include "../routing_layer/topo_group.h"
 #include "../routing_layer/topo_node_sqlite.h"
+#include "member_sync.h"
 #include "../transport_layer/etcp_dump.h"
 #include "../transport_layer/secure_channel.h"
 #include "../../lib/debug_config.h"
@@ -1255,6 +1256,16 @@ static void db_sync_recv_cb(struct ETCP_CONN* conn, struct ll_entry* entry)
         queue_dgram_free(entry); queue_entry_free(entry); return;
     }
 
+    /* валидация клиента: pubkey из ETCP-соединения должен быть в таблице мемберов канала */
+    {
+        char ch_id[32]; snprintf(ch_id, sizeof(ch_id), "%llu", (unsigned long long)group_id);
+        if (conn && !member_sync_validate_pubkey(conn->instance, ch_id, conn->crypto_ctx.peer_public_key)) {
+            DEBUG_WARN(DEBUG_CATEGORY_CHAT_SYNC, "sync: recv DROP — peer=0x%016llx not member of ch=%s (type=%02x)",
+                       (unsigned long long)src, ch_id, type);
+            queue_dgram_free(entry); queue_entry_free(entry); return;
+        }
+    }
+
     switch (type) {
     case DB_MSG_INIT_SYNC: DEBUG_TRACE(DEBUG_CATEGORY_CHAT_SYNC, "→ handle INIT_SYNC"); db_handle_init_sync(si, src, payload, plen); break;
     case DB_MSG_INIT_RESP: DEBUG_TRACE(DEBUG_CATEGORY_CHAT_SYNC, "→ handle INIT_RESP"); db_handle_init_resp(si, src, payload, plen); break;