import type {
  BrowserWindow,
  IpcMainInvokeEvent
} from 'electron'

export function assertTrustedSender(
  event: IpcMainInvokeEvent,
  window: BrowserWindow
): void {
  if (
    event.sender !== window.webContents ||
    event.senderFrame !== window.webContents.mainFrame ||
    event.senderFrame.url !== window.webContents.getURL()
  ) {
    throw new Error('拒绝来自未知窗口的 IPC 请求')
  }
}