@idos-network/kwil-infra 1.1.0

package/dist/signature-verification/index.mjs

@@ -0,0 +1,140 @@
+import invariant from "tiny-invariant";
+import { borshDeserialize, borshSerialize, bs58Decode, hexDecode, hexEncode, sha256Hash, utf8Encode } from "@idos-network/utils/codecs";
+import nacl from "tweetnacl";
+//#region src/near/signature-verification.ts
+const verifyNearSignature = async (message, signature, publicKey) => {
+	try {
+		const pieces = publicKey.split(":");
+		if (pieces.length !== 2 || pieces[0] !== "ed25519") {
+			console.warn("Invalid NEAR public key format:", publicKey);
+			return false;
+		}
+		const publicKeyBytes = bs58Decode(pieces[1]);
+		if (publicKeyBytes.length !== 32) {
+			console.warn("Invalid NEAR public key length:", publicKeyBytes.length);
+			return false;
+		}
+		const signatureBytes = hexDecode(signature);
+		const payloadLength = new DataView(signatureBytes.buffer).getUint16(0, false);
+		const payloadBytes = signatureBytes.slice(2, 2 + payloadLength);
+		const actualSignature = signatureBytes.slice(2 + payloadLength);
+		if (actualSignature.length !== 64) {
+			console.warn("Invalid signature length:", actualSignature.length);
+			return false;
+		}
+		const payloadSchema = { struct: {
+			tag: "u32",
+			message: "string",
+			nonce: { array: {
+				type: "u8",
+				len: 32
+			} },
+			recipient: "string",
+			callbackUrl: { option: "string" }
+		} };
+		const deserializedPayload = borshDeserialize(payloadSchema, payloadBytes);
+		const hash = sha256Hash(borshSerialize(payloadSchema, {
+			tag: 2147484061,
+			message,
+			nonce: deserializedPayload.nonce,
+			recipient: deserializedPayload.recipient,
+			callbackUrl: deserializedPayload.callbackUrl
+		}));
+		return nacl.sign.detached.verify(hash, actualSignature, publicKeyBytes);
+	} catch (error) {
+		console.warn("NEAR signature verification failed:", error);
+		return false;
+	}
+};
+//#endregion
+//#region src/xrp/signature-verification.ts
+const verifyRippleSignature = async (message, signature, publicKey) => {
+	let xrpKeypair;
+	try {
+		xrpKeypair = await import("ripple-keypairs");
+	} catch (e) {
+		throw new Error("Can't load `ripple-keypairs`", { cause: e });
+	}
+	const messageHex = hexEncode(utf8Encode(message));
+	return xrpKeypair.verify(messageHex, signature, publicKey);
+};
+//#endregion
+//#region src/signature-verification/evm.ts
+const verifyEvmSignature = async (message, signature, address) => {
+	let wagmi;
+	try {
+		wagmi = await import("@wagmi/core");
+	} catch (_e) {
+		throw new Error("Can't load @wagmi/core");
+	}
+	let chains;
+	try {
+		chains = await import("@wagmi/core/chains");
+	} catch (_e) {
+		throw new Error("Can't load @wagmi/core/chains");
+	}
+	const wagmiConfig = wagmi.createConfig({
+		chains: [chains.mainnet],
+		transports: { [chains.mainnet.id]: wagmi.http() }
+	});
+	return wagmi.verifyMessage(wagmiConfig, {
+		address,
+		message,
+		signature
+	});
+};
+//#endregion
+//#region src/signature-verification/facesign.ts
+const verifyFaceSignSignature = (message, signature, publicKey) => {
+	try {
+		return nacl.sign.detached.verify(utf8Encode(message), hexDecode(signature), hexDecode(publicKey));
+	} catch (error) {
+		console.warn("FaceSign signature verification failed:", error);
+		return false;
+	}
+};
+//#endregion
+//#region src/signature-verification/stellar.ts
+const verifyStellarSignature = async (message, signature, publicKey) => {
+	let stellar;
+	try {
+		stellar = await import("@stellar/stellar-sdk");
+	} catch (e) {
+		throw new Error("Can't load `@stellar/stellar-sdk`", { cause: e });
+	}
+	try {
+		const signatureBuffer = Buffer.from(signature, "hex");
+		const publicKeyBuffer = Buffer.from(publicKey, "hex");
+		const strKeyAddress = stellar.StrKey.encodeEd25519PublicKey(publicKeyBuffer);
+		return stellar.Keypair.fromPublicKey(strKeyAddress).verify(Buffer.from(message), signatureBuffer);
+	} catch (error) {
+		console.warn("Stellar signature verification failed:", error);
+		return false;
+	}
+};
+//#endregion
+//#region src/signature-verification/index.ts
+const verifySignature = async (walletPayload) => {
+	invariant(walletPayload.address, "Wallet address is required");
+	invariant(walletPayload.message, "Wallet message is required");
+	invariant(walletPayload.signature, "Wallet signature is required");
+	invariant(walletPayload.wallet_type, "Wallet type is required");
+	if (walletPayload.wallet_type !== "EVM") invariant(walletPayload.public_key?.[0], "Wallet public_key is required for non-EVM wallets");
+	try {
+		switch (walletPayload.wallet_type) {
+			case "EVM": return verifyEvmSignature(walletPayload.message, walletPayload.signature, walletPayload.address);
+			case "NEAR": return verifyNearSignature(walletPayload.message, walletPayload.signature, walletPayload.public_key[0]);
+			case "XRPL": return verifyRippleSignature(walletPayload.message, walletPayload.signature, walletPayload.public_key[0]);
+			case "Stellar": return await verifyStellarSignature(walletPayload.message, walletPayload.signature, walletPayload.public_key[0]);
+			case "FaceSign": return verifyFaceSignSignature(walletPayload.message, walletPayload.signature, walletPayload.public_key[0]);
+			default: throw new Error(`Unsupported wallet type: ${walletPayload.wallet_type}`);
+		}
+	} catch (error) {
+		console.warn("Error verifying signature", error);
+		return false;
+	}
+};
+//#endregion
+export { verifySignature };
+
+//# sourceMappingURL=index.mjs.map

package/dist/signature-verification/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/near/signature-verification.ts","../../src/xrp/signature-verification.ts","../../src/signature-verification/evm.ts","../../src/signature-verification/facesign.ts","../../src/signature-verification/stellar.ts","../../src/signature-verification/index.ts"],"sourcesContent":["import {\n  borshDeserialize,\n  borshSerialize,\n  bs58Decode,\n  hexDecode,\n  sha256Hash,\n} from \"@idos-network/utils/codecs\";\nimport nacl from \"tweetnacl\";\n\ninterface NEP413Payload {\n  tag: number;\n  message: string;\n  nonce: number[];\n  recipient: string;\n  callbackUrl?: string;\n}\n\nexport const verifyNearSignature = async (\n  message: string,\n  signature: string,\n  publicKey: string,\n): Promise<boolean> => {\n  try {\n    // Parse the NEAR public key format: \"ed25519:base58_encoded_key\"\n    const pieces = publicKey.split(\":\");\n    if (pieces.length !== 2 || pieces[0] !== \"ed25519\") {\n      console.warn(\"Invalid NEAR public key format:\", publicKey);\n      return false;\n    }\n\n    // Extract raw public key bytes (am trying to match the logic I did in Backend)\n    const publicKeyBytes = bs58Decode(pieces[1]);\n    if (publicKeyBytes.length !== 32) {\n      console.warn(\"Invalid NEAR public key length:\", publicKeyBytes.length);\n      return false;\n    }\n\n    // Decode the signature from hex\n    const signatureBytes = hexDecode(signature);\n\n    // Deserialize the signature (matching Go's deserializeSignature)\n    const payloadLength = new DataView(signatureBytes.buffer).getUint16(0, false);\n    const payloadBytes = signatureBytes.slice(2, 2 + payloadLength);\n    const actualSignature = signatureBytes.slice(2 + payloadLength);\n\n    if (actualSignature.length !== 64) {\n      console.warn(\"Invalid signature length:\", actualSignature.length);\n      return false;\n    }\n\n    // Deserialize the payload to extract nonce, recipient, callbackUrl\n    const payloadSchema = {\n      struct: {\n        tag: \"u32\",\n        message: \"string\",\n        nonce: { array: { type: \"u8\", len: 32 } },\n        recipient: \"string\",\n        callbackUrl: { option: \"string\" },\n      },\n    };\n\n    const deserializedPayload = borshDeserialize(payloadSchema, payloadBytes) as NEP413Payload;\n\n    // Reconstruct the payload with tag and message (matching Go implementation)\n    const reconstructedPayload: NEP413Payload = {\n      tag: 2147484061, // 2**31 + 413\n      message: message, // Use the provided message\n      nonce: deserializedPayload.nonce,\n      recipient: deserializedPayload.recipient,\n      callbackUrl: deserializedPayload.callbackUrl,\n    };\n\n    // Serialize the entire payload (matching Go's borsch.Serialize(*payload))\n    const fullPayloadBytes = borshSerialize(payloadSchema, reconstructedPayload);\n    // Hash the payload (matching Go's sha256.Sum256(payloadBytes))\n    const hash = sha256Hash(fullPayloadBytes);\n    // Raw ed25519 verification using nacl (matching Go's ed25519.Verify)\n    const isValid = nacl.sign.detached.verify(hash, actualSignature, publicKeyBytes);\n\n    return isValid;\n  } catch (error) {\n    console.warn(\"NEAR signature verification failed:\", error);\n    return false;\n  }\n};\n","import { hexEncode, utf8Encode } from \"@idos-network/utils/codecs\";\n\nexport const verifyRippleSignature = async (\n  message: string,\n  signature: string,\n  publicKey: string,\n): Promise<boolean> => {\n  let xrpKeypair: typeof import(\"ripple-keypairs\");\n\n  try {\n    xrpKeypair = await import(\"ripple-keypairs\");\n  } catch (e) {\n    throw new Error(\"Can't load `ripple-keypairs`\", { cause: e });\n  }\n\n  const messageHex = hexEncode(utf8Encode(message));\n  return xrpKeypair.verify(messageHex, signature, publicKey);\n};\n","export const verifyEvmSignature = async (\n  message: string,\n  signature: `0x${string}`,\n  address: `0x${string}`,\n): Promise<boolean> => {\n  let wagmi: typeof import(\"@wagmi/core\");\n\n  try {\n    wagmi = await import(\"@wagmi/core\");\n  } catch (_e) {\n    throw new Error(\"Can't load @wagmi/core\");\n  }\n\n  let chains: typeof import(\"@wagmi/core/chains\");\n  try {\n    chains = await import(\"@wagmi/core/chains\");\n  } catch (_e) {\n    throw new Error(\"Can't load @wagmi/core/chains\");\n  }\n\n  const wagmiConfig = wagmi.createConfig({\n    chains: [chains.mainnet],\n    transports: {\n      [chains.mainnet.id]: wagmi.http(),\n    },\n  });\n\n  return wagmi.verifyMessage(wagmiConfig, {\n    address,\n    message,\n    signature,\n  });\n};\n","import { hexDecode, utf8Encode } from \"@idos-network/utils/codecs\";\nimport nacl from \"tweetnacl\";\n\nexport const verifyFaceSignSignature = (\n  message: string,\n  signature: string,\n  publicKey: string,\n): boolean => {\n  try {\n    return nacl.sign.detached.verify(\n      utf8Encode(message),\n      hexDecode(signature),\n      hexDecode(publicKey),\n    );\n  } catch (error) {\n    console.warn(\"FaceSign signature verification failed:\", error);\n    return false;\n  }\n};\n","export const verifyStellarSignature = async (\n  message: string,\n  signature: string,\n  publicKey: string,\n): Promise<boolean> => {\n  let stellar: typeof import(\"@stellar/stellar-sdk\");\n\n  try {\n    stellar = await import(\"@stellar/stellar-sdk\");\n  } catch (e) {\n    throw new Error(\"Can't load `@stellar/stellar-sdk`\", { cause: e });\n  }\n\n  try {\n    // Convert hex signature to buffer\n    const signatureBuffer = Buffer.from(signature, \"hex\");\n\n    // `Keypair.fromPublicKey()` expects StrKey format, but we're passing as hex (derivePublicKey result).\n    const publicKeyBuffer = Buffer.from(publicKey, \"hex\");\n    const strKeyAddress = stellar.StrKey.encodeEd25519PublicKey(publicKeyBuffer);\n\n    const keypair = stellar.Keypair.fromPublicKey(strKeyAddress);\n\n    const result = keypair.verify(Buffer.from(message), signatureBuffer);\n\n    return result;\n  } catch (error) {\n    console.warn(\"Stellar signature verification failed:\", error);\n    return false;\n  }\n};\n","import invariant from \"tiny-invariant\";\n\nimport type { WalletType } from \"../actions\";\n\nimport { verifyNearSignature } from \"../near/signature-verification\";\nimport { verifyRippleSignature } from \"../xrp/signature-verification\";\nimport { verifyEvmSignature } from \"./evm\";\nimport { verifyFaceSignSignature } from \"./facesign\";\nimport { verifyStellarSignature } from \"./stellar\";\n\nexport interface WalletSignature {\n  address: string;\n  signature: string;\n  message: string;\n  wallet_type: WalletType;\n  public_key?: string[];\n}\n\nexport const verifySignature = async (walletPayload: WalletSignature): Promise<boolean> => {\n  invariant(walletPayload.address, \"Wallet address is required\");\n  invariant(walletPayload.message, \"Wallet message is required\");\n  invariant(walletPayload.signature, \"Wallet signature is required\");\n  invariant(walletPayload.wallet_type, \"Wallet type is required\");\n\n  if (walletPayload.wallet_type !== \"EVM\") {\n    invariant(walletPayload.public_key?.[0], \"Wallet public_key is required for non-EVM wallets\");\n  }\n\n  try {\n    switch (walletPayload.wallet_type) {\n      case \"EVM\":\n        return verifyEvmSignature(\n          walletPayload.message,\n          walletPayload.signature as `0x${string}`,\n          walletPayload.address as `0x${string}`,\n        );\n      case \"NEAR\":\n        return verifyNearSignature(\n          walletPayload.message,\n          walletPayload.signature,\n          // @ts-expect-error - this has been checked above\n          walletPayload.public_key[0],\n        );\n      case \"XRPL\":\n        return verifyRippleSignature(\n          walletPayload.message,\n          walletPayload.signature,\n          // @ts-expect-error - this has been checked above\n          walletPayload.public_key[0],\n        );\n      case \"Stellar\":\n        return await verifyStellarSignature(\n          walletPayload.message,\n          walletPayload.signature,\n          // @ts-expect-error - this has been checked above\n          walletPayload.public_key[0],\n        );\n      case \"FaceSign\":\n        return verifyFaceSignSignature(\n          walletPayload.message,\n          walletPayload.signature,\n          // @ts-expect-error - this has been checked above\n          walletPayload.public_key[0],\n        );\n      default:\n        throw new Error(`Unsupported wallet type: ${walletPayload.wallet_type}`);\n    }\n  } catch (error) {\n    console.warn(\"Error verifying signature\", error);\n    return false;\n  }\n};\n"],"mappings":";;;;AAiBA,MAAa,sBAAsB,OACjC,SACA,WACA,cACqB;AACrB,KAAI;EAEF,MAAM,SAAS,UAAU,MAAM,IAAI;AACnC,MAAI,OAAO,WAAW,KAAK,OAAO,OAAO,WAAW;AAClD,WAAQ,KAAK,mCAAmC,UAAU;AAC1D,UAAO;;EAIT,MAAM,iBAAiB,WAAW,OAAO,GAAG;AAC5C,MAAI,eAAe,WAAW,IAAI;AAChC,WAAQ,KAAK,mCAAmC,eAAe,OAAO;AACtE,UAAO;;EAIT,MAAM,iBAAiB,UAAU,UAAU;EAG3C,MAAM,gBAAgB,IAAI,SAAS,eAAe,OAAO,CAAC,UAAU,GAAG,MAAM;EAC7E,MAAM,eAAe,eAAe,MAAM,GAAG,IAAI,cAAc;EAC/D,MAAM,kBAAkB,eAAe,MAAM,IAAI,cAAc;AAE/D,MAAI,gBAAgB,WAAW,IAAI;AACjC,WAAQ,KAAK,6BAA6B,gBAAgB,OAAO;AACjE,UAAO;;EAIT,MAAM,gBAAgB,EACpB,QAAQ;GACN,KAAK;GACL,SAAS;GACT,OAAO,EAAE,OAAO;IAAE,MAAM;IAAM,KAAK;IAAI,EAAE;GACzC,WAAW;GACX,aAAa,EAAE,QAAQ,UAAU;GAClC,EACF;EAED,MAAM,sBAAsB,iBAAiB,eAAe,aAAa;EAczE,MAAM,OAAO,WAFY,eAAe,eATI;GAC1C,KAAK;GACI;GACT,OAAO,oBAAoB;GAC3B,WAAW,oBAAoB;GAC/B,aAAa,oBAAoB;GAClC,CAG2E,CAEnC;AAIzC,SAFgB,KAAK,KAAK,SAAS,OAAO,MAAM,iBAAiB,eAAe;UAGzE,OAAO;AACd,UAAQ,KAAK,uCAAuC,MAAM;AAC1D,SAAO;;;;;AChFX,MAAa,wBAAwB,OACnC,SACA,WACA,cACqB;CACrB,IAAI;AAEJ,KAAI;AACF,eAAa,MAAM,OAAO;UACnB,GAAG;AACV,QAAM,IAAI,MAAM,gCAAgC,EAAE,OAAO,GAAG,CAAC;;CAG/D,MAAM,aAAa,UAAU,WAAW,QAAQ,CAAC;AACjD,QAAO,WAAW,OAAO,YAAY,WAAW,UAAU;;;;AChB5D,MAAa,qBAAqB,OAChC,SACA,WACA,YACqB;CACrB,IAAI;AAEJ,KAAI;AACF,UAAQ,MAAM,OAAO;UACd,IAAI;AACX,QAAM,IAAI,MAAM,yBAAyB;;CAG3C,IAAI;AACJ,KAAI;AACF,WAAS,MAAM,OAAO;UACf,IAAI;AACX,QAAM,IAAI,MAAM,gCAAgC;;CAGlD,MAAM,cAAc,MAAM,aAAa;EACrC,QAAQ,CAAC,OAAO,QAAQ;EACxB,YAAY,GACT,OAAO,QAAQ,KAAK,MAAM,MAAM,EAClC;EACF,CAAC;AAEF,QAAO,MAAM,cAAc,aAAa;EACtC;EACA;EACA;EACD,CAAC;;;;AC5BJ,MAAa,2BACX,SACA,WACA,cACY;AACZ,KAAI;AACF,SAAO,KAAK,KAAK,SAAS,OACxB,WAAW,QAAQ,EACnB,UAAU,UAAU,EACpB,UAAU,UAAU,CACrB;UACM,OAAO;AACd,UAAQ,KAAK,2CAA2C,MAAM;AAC9D,SAAO;;;;;AChBX,MAAa,yBAAyB,OACpC,SACA,WACA,cACqB;CACrB,IAAI;AAEJ,KAAI;AACF,YAAU,MAAM,OAAO;UAChB,GAAG;AACV,QAAM,IAAI,MAAM,qCAAqC,EAAE,OAAO,GAAG,CAAC;;AAGpE,KAAI;EAEF,MAAM,kBAAkB,OAAO,KAAK,WAAW,MAAM;EAGrD,MAAM,kBAAkB,OAAO,KAAK,WAAW,MAAM;EACrD,MAAM,gBAAgB,QAAQ,OAAO,uBAAuB,gBAAgB;AAM5E,SAJgB,QAAQ,QAAQ,cAAc,cAAc,CAErC,OAAO,OAAO,KAAK,QAAQ,EAAE,gBAAgB;UAG7D,OAAO;AACd,UAAQ,KAAK,0CAA0C,MAAM;AAC7D,SAAO;;;;;ACVX,MAAa,kBAAkB,OAAO,kBAAqD;AACzF,WAAU,cAAc,SAAS,6BAA6B;AAC9D,WAAU,cAAc,SAAS,6BAA6B;AAC9D,WAAU,cAAc,WAAW,+BAA+B;AAClE,WAAU,cAAc,aAAa,0BAA0B;AAE/D,KAAI,cAAc,gBAAgB,MAChC,WAAU,cAAc,aAAa,IAAI,oDAAoD;AAG/F,KAAI;AACF,UAAQ,cAAc,aAAtB;GACE,KAAK,MACH,QAAO,mBACL,cAAc,SACd,cAAc,WACd,cAAc,QACf;GACH,KAAK,OACH,QAAO,oBACL,cAAc,SACd,cAAc,WAEd,cAAc,WAAW,GAC1B;GACH,KAAK,OACH,QAAO,sBACL,cAAc,SACd,cAAc,WAEd,cAAc,WAAW,GAC1B;GACH,KAAK,UACH,QAAO,MAAM,uBACX,cAAc,SACd,cAAc,WAEd,cAAc,WAAW,GAC1B;GACH,KAAK,WACH,QAAO,wBACL,cAAc,SACd,cAAc,WAEd,cAAc,WAAW,GAC1B;GACH,QACE,OAAM,IAAI,MAAM,4BAA4B,cAAc,cAAc;;UAErE,OAAO;AACd,UAAQ,KAAK,6BAA6B,MAAM;AAChD,SAAO"}