omniauth-ethereum 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 6947c484fefdc343cb442e3d34f8fbbba0f4ac877048fef87cc4ba2adba7dfec
+  data.tar.gz: 407145e7efecc556eca441957b950bc69e5c70b0f326694876e91349e96f9fce
+SHA512:
+  metadata.gz: a2044f7abf6b20972f3bf5eed4f54ab735fd4aa33ea38824584270bb6d8a99f3c67603f03b169e96c02627d7770fb0645208cfb029adaac3cf1574de0fed4f0c
+  data.tar.gz: 3e2115d0a251336dd0cd4afd92f5373702cde207c8517bf0bf1c8cc044e036efb5b7285891f5d56084bb1fbc397248c12747bef3df8a0d3716ee70e77336d989

data/lib/omniauth-ethereum.rb

@@ -0,0 +1,69 @@
+require 'omniauth'
+require 'eth'
+
+module OmniAuth
+  module Strategies
+    class Ethereum
+      include OmniAuth::Strategy
+
+      # ethereum authentication strategy fields
+      # `eth_message`: contains a custom string, the request time, and the specific nonce to sign
+      # `eth_address`: contains the public Eth::Address of the user's Ethereum account
+      # `eth_signature`: contains the signature of the `eth_message` signed by `eth_address`
+      option :fields, [:eth_message, :eth_address, :eth_signature]
+
+      # the `eth_address` will be the _fake_ unique identifier for the Ethereum strategy
+      option :uid_field, :eth_address
+      option :fields, [:eth_message, :eth_address, :eth_signature]
+      option :uid_field, :eth_address
+
+      def request_phase
+        form = OmniAuth::Form.new :title => 'Ethereum Authentication', :url => callback_path
+        options.fields.each do |field|
+
+          # these fields are read-only and will be filled by javascript in the process
+          if field == :eth_message
+            form.html("<input type='hidden' id='eth_message' name='eth_message' value='#{now}' />")
+          else
+            form.html("<input type='hidden' id='#{field.to_s}' name='#{field.to_s}' />")
+          end
+        end
+
+        # the form button will be heavy on javascript, requesting account, nonce, and signature before submission
+        form.button 'Sign In'
+        path = File.join( File.dirname(__FILE__), 'new_session.js')
+        js = File.read(path)
+        mod = "<script type='module'>\n#{js}\n</script>"
+
+        form.html(mod)
+        form.to_response
+      end
+
+      def callback_phase
+        address = request.params['eth_address'].downcase
+        message = request.params['eth_message']
+        signature = request.params['eth_signature']
+        signature_pubkey = Eth::Key.personal_recover message, signature
+        signature_address = (Eth::Utils.public_key_to_address signature_pubkey).downcase
+
+        unix_time = message.scan(/\d+/).first.to_i
+        ten_min = 10 * 60
+        return fail!(:invalid_time) unless unix_time + ten_min >= now && unix_time - ten_min <= now
+
+        return fail!(:invalid_credentials) unless signature_address == address
+
+        super
+      end
+
+      uid do
+        request.params[options.uid_field.to_s]
+      end
+
+      private
+
+      def now
+        Time.now.utc.to_i
+      end
+    end
+  end
+end

metadata

@@ -0,0 +1,44 @@
+--- !ruby/object:Gem::Specification
+name: omniauth-ethereum
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Afri Schoedon
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2021-11-18 00:00:00.000000000 Z
+dependencies: []
+description: Authentication Strategy for OmniAuth to authenticate a user with an Ethereum
+  account
+email: gems@fault.dev
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/omniauth-ethereum.rb
+homepage: https://github.com/byz-f/omniauth-ethereum
+licenses:
+- Apache-2.0
+metadata: {}
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.2.29
+signing_key:
+specification_version: 4
+summary: OmniAuth Strategy for Ethereum
+test_files: []