From a06695734d64883a8a99b545e987dcdc2f45dbd9 Mon Sep 17 00:00:00 2001
From: Adrien Beraud <adrien.beraud@savoirfairelinux.com>
Date: Sun, 18 Oct 2026 15:08:14 -0400
Subject: [PATCH] network: require a session for keyed value requests

---
 src/network_engine.cpp | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/network_engine.cpp b/src/network_engine.cpp
index 6336f1d2..4b2494b0 100644
--- a/src/network_engine.cpp
+++ b/src/network_engine.cpp
@@ -902,6 +902,8 @@ NetworkEngine::process(std::unique_ptr<ParsedMessage>&& msg, const SockAddr& fro
                 break;
             }
             case MessageType::GetValues: {
+                if (transport_ and node->getTransport() and not msg->session)
+                    throw DhtProtocolException {DhtProtocolException::UNAUTHORIZED, "Session required", msg->id};
                 // if (logger_)
                 //     logger_->d("[node %s] got 'get' request for %s",
                 //     node->toString().c_str(), msg->info_hash.toString().c_str());