But zaps are events right? Would the authenticatation just be looking at the zapās p tag and ensuring itās a paid user?
Discussion
It would look at the pubkey and see if it matches the nostrPubkey on the target pubkeys lnaddress. Expensive op and would need caching tho
Off topic- is there a way to sign a nostr pubkey to prove you hold priv? What about multi sig? Same attributes as bitcoin?