From 3f37debe84da23d7ff21b85053387452ebf29ede Mon Sep 17 00:00:00 2001
From: Filip Hoffmann <folosp@protonmail.com>
Date: Mon, 4 May 2026 15:33:19 +0200
Subject: [PATCH] fix incorrect bit array syntax

---
 src/grom/interaction.gleam | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/grom/interaction.gleam b/src/grom/interaction.gleam
index a20286a..f11c861 100644
--- a/src/grom/interaction.gleam
+++ b/src/grom/interaction.gleam
@@ -1837,7 +1837,7 @@ fn validate_security_headers(
   )
 
   use public_key <- result.try(
-    eddsa.public_key_from_bytes(eddsa.Ed25519, <<public_key>>)
+    eddsa.public_key_from_bytes(eddsa.Ed25519, <<public_key:size(32)-unit(8)>>)
     |> result.replace_error(PublicKeyHasImproperLength),
   )
 
@@ -1859,7 +1859,8 @@ fn validate_security_headers(
     |> result.replace_error(HttpRequestTimestampNotProvided),
   )
 
-  let signature = <<signature>>
+  // Ed25519 signatures are 64 bytes
+  let signature = <<signature:size(64)-unit(8)>>
   let message = <<{ timestamp <> request.body }:utf8>>
 
   let is_verified = eddsa.verify(public_key, message, signature)
-- 
2.51.2