1 files changed, 9 insertions, 5 deletions

diff --git a/internal/handler/websocket/handler.go b/internal/handler/websocket/handler.go
index 35d0aea..5201698 100644
--- a/internal/handler/websocket/handler.go
+++ b/internal/handler/websocket/handler.go
@@ -262,8 +262,16 @@ func (h *Handler) handleEvent(ctx context.Context, conn *websocket.Conn, raw []j
                 return err
         }
 
+        // Parse event to get ID for OK response
+        var event nostr.Event
+        if err := json.Unmarshal(raw[1], &event); err != nil {
+                status = "error"
+                return fmt.Errorf("invalid event: %w", err)
+        }
+
         if state.authenticatedPubkey == "" && h.authConfig != nil && h.authConfig.WriteEnabled {
                 status = "unauthenticated"
+                h.sendOK(ctx, conn, event.ID, false, "auth-required: authentication required")
                 return nil
         }
 
@@ -279,11 +287,7 @@ func (h *Handler) handleEvent(ctx context.Context, conn *websocket.Conn, raw []j
                 }
         }
 
-        var event nostr.Event
-        if err := json.Unmarshal(raw[1], &event); err != nil {
-                status = "error"
-                return fmt.Errorf("invalid event: %w", err)
-        }
+        // Event already parsed above for auth check
 
         if !event.CheckID() {
                 status = "error"