Function handshake

Performs the handshake with a Sentinel dVPN node to initiate a VPN session.

Replicates the InitHandshake method of the Sentinel Go SDK client. The process is:

1. JSON-encodes the session data (WireGuard pubkey or v2ray uid)
2. Builds the message as bigEndian(sessionId) || JSON(data)
3. Signs the SHA256 hash of the message with the Cosmos secp256k1 private key
4. POSTs { data, id, pub_key, signature } to the node's root endpoint (/)

The node verifies the signature, derives the account address from pub_key, and checks it matches the on-chain session's account address before adding the peer to the active VPN service.

SSL certificate verification is intentionally disabled since node daemons use self-signed certificates.

Throws

Will throw if the HTTP request fails, the session is not active on-chain, or the signature verification fails on the node side (HTTP 401)

Example

// WireGuard
const wgKeys = generateKeypair();
const result = await handshake(
    sessionId,
    { pub_key: wgKeys.publicKey },
    cosmosPrivKeyBytes,
    node.remoteUrl,
);
// result.result.addrs → ["1.2.3.4:51820"]
// result.result.data  → WireGuard peer config
Copy

Example

// v2ray
const uid = Buffer.from(crypto.randomBytes(16)).toString('base64');
const result = await handshake(
    sessionId,
    { uid },
    cosmosPrivKeyBytes,
    node.remoteUrl,
);
Copy