@multiplatform.one/wallet 7.7.2

package/src/main/java/com/bitspur/keycloak/siwe/authenticators/browser/SiweBrowserAuthenticator.java

@@ -0,0 +1,109 @@
+/**
+ * File: /src/main/java/com/bitspur/keycloak/siwe/authenticators/browser/SiweBrowserAuthenticator.java
+ * Project: browser
+ * File Created: 20-03-2022 02:51:33
+ * Author: Clay Risser
+ * -----
+ * Last Modified: 10-01-2025 00:06:46
+ * Modified By: Clay Risser
+ * -----
+ * BitSpur (c) Copyright 2022
+ */
+
+package com.bitspur.keycloak.siwe.authenticators.browser;
+
+import jakarta.ws.rs.core.MultivaluedMap;
+
+import org.jboss.logging.Logger;
+import org.keycloak.authentication.AuthenticationFlowContext;
+import org.keycloak.authentication.AuthenticationFlowError;
+import org.keycloak.authentication.authenticators.browser.AbstractUsernameFormAuthenticator;
+import org.keycloak.events.Errors;
+import org.keycloak.forms.login.LoginFormsProvider;
+import org.keycloak.models.KeycloakSession;
+import org.keycloak.models.RealmModel;
+import org.keycloak.models.UserModel;
+import org.keycloak.representations.idm.CredentialRepresentation;
+import org.keycloak.services.managers.AuthenticationManager;
+
+import com.bitspur.keycloak.siwe.SiweCredentials;
+import com.bitspur.keycloak.siwe.SiweUtil;
+import com.bitspur.keycloak.siwe.Errors.SiweKeycloakException;
+
+public class SiweBrowserAuthenticator extends AbstractUsernameFormAuthenticator {
+  private static final Logger logger = Logger.getLogger(SiweBrowserAuthenticator.class);
+
+  @Override
+  public void authenticate(AuthenticationFlowContext context) {
+    LoginFormsProvider form = context.form();
+    context.challenge(SiweUtil.createLoginSiwePage(form));
+  }
+
+  @Override
+  public void action(AuthenticationFlowContext context) {
+    MultivaluedMap<String, String> formData = context.getHttpRequest().getDecodedFormParameters();
+    if (formData.containsKey("cancel")) {
+      context.cancelLogin();
+      return;
+    }
+    String password = this.retrievePassword(context);
+    String username = this.retrieveUsername(context);
+    try {
+      SiweCredentials siweCredentials = new SiweCredentials(username, password);
+      UserModel user = SiweUtil.findOrCreateUser(context, siweCredentials);
+      if (user == null) {
+        return;
+      }
+      context.setUser(user);
+      if (!SiweUtil.verify(context.getSession(), context.getAuthenticatorConfig(), siweCredentials)) {
+        context.attempted();
+        return;
+      }
+    } catch (SiweKeycloakException e) {
+      context.getEvent().user(context.getUser());
+      context.getEvent().error(Errors.INVALID_USER_CREDENTIALS);
+      LoginFormsProvider form = context.form();
+      logger.error(e);
+      context.failureChallenge(AuthenticationFlowError.INVALID_CREDENTIALS,
+          SiweUtil.createLoginSiwePage(form));
+      return;
+    }
+    context.success();
+  }
+
+  @Override
+  public boolean requiresUser() {
+    return false;
+  }
+
+  @Override
+  public boolean configuredFor(KeycloakSession session, RealmModel realm, UserModel user) {
+    return true;
+  }
+
+  @Override
+  public void setRequiredActions(KeycloakSession session, RealmModel realm, UserModel user) {
+  }
+
+  @Override
+  public void close() {
+  }
+
+  protected String retrievePassword(AuthenticationFlowContext context) {
+    MultivaluedMap<String, String> formData = context.getHttpRequest().getDecodedFormParameters();
+    String password = formData.getFirst(CredentialRepresentation.PASSWORD);
+    if (password == null) {
+      return null;
+    }
+    return password.trim();
+  }
+
+  protected String retrieveUsername(AuthenticationFlowContext context) {
+    MultivaluedMap<String, String> formData = context.getHttpRequest().getDecodedFormParameters();
+    String username = formData.getFirst(AuthenticationManager.FORM_USERNAME);
+    if (username == null) {
+      return null;
+    }
+    return username.trim();
+  }
+}

package/src/main/java/com/bitspur/keycloak/siwe/authenticators/browser/SiweBrowserAuthenticatorFactory.java

@@ -0,0 +1,93 @@
+/**
+ * File: /src/main/java/com/bitspur/keycloak/siwe/authenticators/browser/SiweBrowserAuthenticatorFactory.java
+ * Project: browser
+ * File Created: 20-03-2022 02:51:14
+ * Author: Clay Risser
+ * -----
+ * Last Modified: 10-08-2023 16:34:52
+ * Modified By: Clay Risser
+ * -----
+ * BitSpur (c) Copyright 2022
+ */
+
+package com.bitspur.keycloak.siwe.authenticators.browser;
+
+import java.util.Arrays;
+import java.util.List;
+
+import org.keycloak.Config;
+import org.keycloak.authentication.Authenticator;
+import org.keycloak.authentication.AuthenticatorFactory;
+import org.keycloak.models.AuthenticationExecutionModel;
+import org.keycloak.models.KeycloakSession;
+import org.keycloak.models.KeycloakSessionFactory;
+import org.keycloak.provider.ProviderConfigProperty;
+
+import com.bitspur.keycloak.siwe.SiweUtil;
+
+public class SiweBrowserAuthenticatorFactory implements AuthenticatorFactory {
+  public static final String ID = "siwe-browser-authenticator";
+
+  @Override
+  public Authenticator create(KeycloakSession keycloakSession) {
+    return new SiweBrowserAuthenticator();
+  }
+
+  @Override
+  public String getDisplayType() {
+    return "Siwe Browser Authenticator";
+  }
+
+  @Override
+  public boolean isConfigurable() {
+    return true;
+  }
+
+  @Override
+  public AuthenticationExecutionModel.Requirement[] getRequirementChoices() {
+    return new AuthenticationExecutionModel.Requirement[] {
+        AuthenticationExecutionModel.Requirement.REQUIRED,
+        AuthenticationExecutionModel.Requirement.ALTERNATIVE,
+        AuthenticationExecutionModel.Requirement.DISABLED,
+    };
+  }
+
+  @Override
+  public boolean isUserSetupAllowed() {
+    return false;
+  }
+
+  @Override
+  public String getHelpText() {
+    return "";
+  }
+
+  @Override
+  public List<ProviderConfigProperty> getConfigProperties() {
+    return Arrays.asList(
+        SiweUtil.getJsonRpcUrlConfigProperty(),
+        SiweUtil.getRequiredTokensConfigProperty());
+  }
+
+  @Override
+  public String getReferenceCategory() {
+    return null;
+  }
+
+  @Override
+  public void init(Config.Scope scope) {
+  }
+
+  @Override
+  public void postInit(KeycloakSessionFactory keycloakSessionFactory) {
+  }
+
+  @Override
+  public void close() {
+  }
+
+  @Override
+  public String getId() {
+    return SiweBrowserAuthenticatorFactory.ID;
+  }
+}

package/src/main/java/com/bitspur/keycloak/siwe/authenticators/directgrant/SiweDirectGrantAuthenticator.java

@@ -0,0 +1,153 @@
+/**
+ * File: /src/main/java/com/bitspur/keycloak/siwe/authenticators/directgrant/SiweDirectGrantAuthenticator.java
+ * Project: directgrant
+ * File Created: 21-03-2022 09:50:11
+ * Author: Clay Risser
+ * -----
+ * Last Modified: 09-01-2025 23:48:08
+ * Modified By: Clay Risser
+ * -----
+ * BitSpur (c) Copyright 2022
+ */
+
+package com.bitspur.keycloak.siwe.authenticators.directgrant;
+
+import jakarta.ws.rs.core.MediaType;
+import jakarta.ws.rs.core.MultivaluedMap;
+import jakarta.ws.rs.core.Response;
+
+import static org.keycloak.authentication.authenticators.util.AuthenticatorUtils.getDisabledByBruteForceEventError;
+
+import org.jboss.logging.Logger;
+import org.keycloak.authentication.AuthenticationFlowContext;
+import org.keycloak.authentication.AuthenticationFlowError;
+import org.keycloak.authentication.Authenticator;
+import org.keycloak.authentication.authenticators.browser.AbstractUsernameFormAuthenticator;
+import org.keycloak.events.Details;
+import org.keycloak.events.Errors;
+import org.keycloak.http.HttpRequest;
+import org.keycloak.models.KeycloakSession;
+import org.keycloak.models.RealmModel;
+import org.keycloak.models.UserModel;
+import org.keycloak.representations.idm.CredentialRepresentation;
+import org.keycloak.representations.idm.OAuth2ErrorRepresentation;
+import org.keycloak.services.managers.AuthenticationManager;
+
+import com.bitspur.keycloak.siwe.SiweCredentials;
+import com.bitspur.keycloak.siwe.SiweUtil;
+import com.bitspur.keycloak.siwe.Errors.SiweKeycloakException;;
+
+public class SiweDirectGrantAuthenticator implements Authenticator {
+
+  Logger logger = Logger.getLogger(SiweDirectGrantAuthenticator.class);
+
+  @Override
+  public void authenticate(AuthenticationFlowContext context) {
+    String password = retrievePassword(context);
+    String username = retrieveUsername(context);
+    KeycloakSession session = context.getSession();
+    RealmModel realm = context.getRealm();
+    if (username == null) {
+      context.getEvent().error(Errors.USER_NOT_FOUND);
+      Response challengeResponse = this.errorResponse(Response.Status.UNAUTHORIZED, "invalid_request",
+          "Missing parameter: username");
+      context.failure(AuthenticationFlowError.INVALID_USER, challengeResponse);
+      return;
+    }
+    try {
+      SiweCredentials siweCredentials = new SiweCredentials(username, password);
+      String address = siweCredentials.message.getAddress();
+      context.getEvent().detail(Details.USERNAME, address);
+      context.getAuthenticationSession().setAuthNote(AbstractUsernameFormAuthenticator.ATTEMPTED_USERNAME, address);
+      UserModel user = SiweUtil.findOrCreateUser(context, siweCredentials, false);
+      if (user == null) {
+        context.getEvent().error(Errors.USER_NOT_FOUND);
+        Response challengeResponse = this.errorResponse(Response.Status.UNAUTHORIZED, "invalid_grant",
+            "Invalid user credentials");
+        context.failure(AuthenticationFlowError.INVALID_USER, challengeResponse);
+        return;
+      }
+      String bruteForceError = getDisabledByBruteForceEventError(context.getProtector(), session, realm, user);
+      if (bruteForceError != null) {
+        context.getEvent().user(user);
+        context.getEvent().error(bruteForceError);
+        Response challengeResponse = this.errorResponse(Response.Status.UNAUTHORIZED, "invalid_grant",
+            "Invalid user credentials");
+        context.forceChallenge(challengeResponse);
+        return;
+      }
+      if (!user.isEnabled()) {
+        context.getEvent().user(user);
+        context.getEvent().error(Errors.USER_DISABLED);
+        Response challengeResponse = this.errorResponse(Response.Status.BAD_REQUEST, "invalid_grant",
+            "Account disabled");
+        context.forceChallenge(challengeResponse);
+        return;
+      }
+      context.setUser(user);
+      if (!SiweUtil.verify(context.getSession(), context.getAuthenticatorConfig(), siweCredentials)) {
+        context.getEvent().user(context.getUser());
+        context.getEvent().error(Errors.INVALID_USER_CREDENTIALS);
+        Response challengeResponse = this.errorResponse(Response.Status.UNAUTHORIZED, "invalid_grant",
+            "Invalid user credentials");
+        context.failure(AuthenticationFlowError.INVALID_CREDENTIALS, challengeResponse);
+        return;
+      }
+    } catch (SiweKeycloakException e) {
+      logger.error(e);
+      context.getEvent().user(context.getUser());
+      context.getEvent().error(Errors.INVALID_USER_CREDENTIALS);
+      Response challengeResponse = this.errorResponse(Response.Status.UNAUTHORIZED, "invalid_grant",
+          e.getMessage());
+      context.failure(AuthenticationFlowError.INVALID_CREDENTIALS, challengeResponse);
+      return;
+    }
+    context.success();
+  }
+
+  @Override
+  public void action(AuthenticationFlowContext context) {
+  }
+
+  @Override
+  public boolean requiresUser() {
+    return false;
+  }
+
+  @Override
+  public boolean configuredFor(KeycloakSession session, RealmModel realm, UserModel user) {
+    return true;
+  }
+
+  @Override
+  public void setRequiredActions(KeycloakSession session, RealmModel realm, UserModel user) {
+  }
+
+  @Override
+  public void close() {
+  }
+
+  protected String retrieveUsername(AuthenticationFlowContext context) {
+    HttpRequest request = context.getHttpRequest();
+    MultivaluedMap<String, String> formData = request.getDecodedFormParameters();
+    String username = formData.getFirst(AuthenticationManager.FORM_USERNAME);
+    if (username == null) {
+      return null;
+    }
+    return username.trim();
+  }
+
+  protected String retrievePassword(AuthenticationFlowContext context) {
+    MultivaluedMap<String, String> formData = context.getHttpRequest().getDecodedFormParameters();
+    String password = formData.getFirst(CredentialRepresentation.PASSWORD);
+    if (password == null) {
+      return null;
+    }
+    return password.trim();
+  }
+
+  protected Response errorResponse(Response.Status status, String error, String errorDescription) {
+    OAuth2ErrorRepresentation errorRep = new OAuth2ErrorRepresentation(error, errorDescription);
+    return Response.status(status).entity(errorRep).type(MediaType.APPLICATION_JSON_TYPE).build();
+  }
+}

package/src/main/java/com/bitspur/keycloak/siwe/authenticators/directgrant/SiweDirectGrantAuthenticatorFactory.java

@@ -0,0 +1,93 @@
+/**
+ * File: /src/main/java/com/bitspur/keycloak/siwe/authenticators/directgrant/SiweDirectGrantAuthenticatorFactory.java
+ * Project: directgrant
+ * File Created: 21-03-2022 09:50:49
+ * Author: Clay Risser
+ * -----
+ * Last Modified: 10-08-2023 16:34:52
+ * Modified By: Clay Risser
+ * -----
+ * BitSpur (c) Copyright 2022
+ */
+
+package com.bitspur.keycloak.siwe.authenticators.directgrant;
+
+import java.util.Arrays;
+import java.util.List;
+
+import org.keycloak.Config;
+import org.keycloak.authentication.Authenticator;
+import org.keycloak.authentication.AuthenticatorFactory;
+import org.keycloak.models.AuthenticationExecutionModel;
+import org.keycloak.models.KeycloakSession;
+import org.keycloak.models.KeycloakSessionFactory;
+import org.keycloak.provider.ProviderConfigProperty;
+
+import com.bitspur.keycloak.siwe.SiweUtil;
+
+public class SiweDirectGrantAuthenticatorFactory implements AuthenticatorFactory {
+  public static final String ID = "siwe-direct-grant-authenticator";
+
+  @Override
+  public Authenticator create(KeycloakSession keycloakSession) {
+    return new SiweDirectGrantAuthenticator();
+  }
+
+  @Override
+  public String getDisplayType() {
+    return "Siwe Direct Grant Authenticator";
+  }
+
+  @Override
+  public boolean isConfigurable() {
+    return true;
+  }
+
+  @Override
+  public AuthenticationExecutionModel.Requirement[] getRequirementChoices() {
+    return new AuthenticationExecutionModel.Requirement[] {
+        AuthenticationExecutionModel.Requirement.REQUIRED,
+        AuthenticationExecutionModel.Requirement.ALTERNATIVE,
+        AuthenticationExecutionModel.Requirement.DISABLED,
+    };
+  }
+
+  @Override
+  public boolean isUserSetupAllowed() {
+    return false;
+  }
+
+  @Override
+  public String getHelpText() {
+    return "";
+  }
+
+  @Override
+  public List<ProviderConfigProperty> getConfigProperties() {
+    return Arrays.asList(
+        SiweUtil.getJsonRpcUrlConfigProperty(),
+        SiweUtil.getRequiredTokensConfigProperty());
+  }
+
+  @Override
+  public String getReferenceCategory() {
+    return null;
+  }
+
+  @Override
+  public void init(Config.Scope scope) {
+  }
+
+  @Override
+  public void postInit(KeycloakSessionFactory keycloakSessionFactory) {
+  }
+
+  @Override
+  public void close() {
+  }
+
+  @Override
+  public String getId() {
+    return ID;
+  }
+}

package/src/main/java/com/bitspur/keycloak/siwe/jpa/nonce/SiweNonce.java

@@ -0,0 +1,95 @@
+/**
+ * File: /src/main/java/com/bitspur/keycloak/siwe/jpa/nonce/SiweNonce.java
+ * Project: jpa
+ * File Created: 09-04-2023 10:40:57
+ * Author: Clay Risser
+ * -----
+ * Last Modified: 12-02-2024 12:32:34
+ * Modified By: Clay Risser
+ * -----
+ * BitSpur (c) Copyright 2022 - 2023
+ */
+
+package com.bitspur.keycloak.siwe.jpa.nonce;
+
+import java.time.LocalDateTime;
+
+import jakarta.persistence.Column;
+import jakarta.persistence.Entity;
+import jakarta.persistence.GeneratedValue;
+import jakarta.persistence.GenerationType;
+import jakarta.persistence.Id;
+import jakarta.persistence.NamedQueries;
+import jakarta.persistence.NamedQuery;
+import jakarta.persistence.Table;
+
+import org.hibernate.annotations.CreationTimestamp;
+import org.hibernate.annotations.UpdateTimestamp;
+
+@Entity
+@Table(name = "SIWE_NONCE")
+@NamedQueries({
+    @NamedQuery(name = "findByRealm", query = "from SiweNonce where realmId = :realmId"),
+    @NamedQuery(name = "findByKey", query = "from SiweNonce where key = :key"),
+    @NamedQuery(name = "findByRealmKey", query = "from SiweNonce where realmId = :realmId and key = :key"),
+    @NamedQuery(name = "findOlderThan", query = "from SiweNonce where createdAt < :createdAt")
+})
+public class SiweNonce {
+  @Id
+  @GeneratedValue(strategy = GenerationType.IDENTITY)
+  @Column(name = "ID", nullable = false)
+  private Long id;
+
+  @Column(name = "NONCE_KEY", nullable = false)
+  private String key;
+
+  @Column(name = "NONCE", nullable = true)
+  private String nonce;
+
+  @Column(name = "REALM_ID", nullable = false)
+  private String realmId;
+
+  @CreationTimestamp
+  @Column(name = "CREATED_AT", nullable = false, updatable = false)
+  private LocalDateTime createdAt;
+
+  @UpdateTimestamp
+  @Column(name = "UPDATED_AT", nullable = false)
+  private LocalDateTime updatedAt;
+
+  public Long getId() {
+    return this.id;
+  }
+
+  public String getKey() {
+    return this.key;
+  }
+
+  public String getNonce() {
+    return this.nonce;
+  }
+
+  public String getRealmId() {
+    return this.realmId;
+  }
+
+  public LocalDateTime getCreatedAt() {
+    return this.createdAt;
+  }
+
+  public LocalDateTime getUpdatedAt() {
+    return this.updatedAt;
+  }
+
+  public void setKey(String key) {
+    this.key = key;
+  }
+
+  public void setNonce(String nonce) {
+    this.nonce = nonce;
+  }
+
+  public void setRealmId(String realmId) {
+    this.realmId = realmId;
+  }
+}

package/src/main/java/com/bitspur/keycloak/siwe/jpa/nonce/SiweNonceJpaEntityProvider.java

@@ -0,0 +1,82 @@
+
+/**
+ * File: /src/main/java/com/bitspur/keycloak/siwe/jpa/nonce/SiweNonceJpaEntityProvider.java
+ * Project: authenticators
+ * File Created: 09-04-2023 10:30:42
+ * Author: Clay Risser
+ * -----
+ * Last Modified: 12-02-2024 12:33:17
+ * Modified By: Clay Risser
+ * -----
+ * BitSpur (c) Copyright 2022 - 2023
+ */
+
+package com.bitspur.keycloak.siwe.jpa.nonce;
+
+import org.jboss.logging.Logger;
+import org.keycloak.connections.jpa.JpaConnectionProvider;
+import org.keycloak.connections.jpa.entityprovider.JpaEntityProvider;
+import org.keycloak.models.KeycloakSession;
+import org.keycloak.services.scheduled.ScheduledTaskRunner;
+import org.keycloak.timer.ScheduledTask;
+import org.keycloak.timer.TimerProvider;
+
+import java.time.Duration;
+import java.time.LocalDateTime;
+import java.util.Collections;
+import java.util.List;
+
+import jakarta.persistence.EntityManager;
+
+public class SiweNonceJpaEntityProvider implements JpaEntityProvider {
+  KeycloakSession session;
+  private final Logger logger = Logger.getLogger(SiweNonceJpaEntityProvider.class);
+
+  SiweNonceJpaEntityProvider(KeycloakSession session) {
+    this.session = session;
+    this.scheduleTask();
+  }
+
+  @Override
+  public List<Class<?>> getEntities() {
+    return Collections.<Class<?>>singletonList(SiweNonce.class);
+  }
+
+  @Override
+  public String getChangelogLocation() {
+    return "META-INF/siwe-nonce-changelog.xml";
+  }
+
+  @Override
+  public void close() {
+  }
+
+  @Override
+  public String getFactoryId() {
+    return SiweNonceJpaEntityProviderFactory.ID;
+  }
+
+  public void scheduleTask() {
+    TimerProvider timer = session.getProvider(TimerProvider.class);
+    ScheduledTask task = new ScheduledTask() {
+      public void run(KeycloakSession session) {
+        Integer removedCount = removeOlderThan(LocalDateTime.now().minus(Duration.ofMinutes(10)));
+        if (removedCount > 0) {
+          logger.info("Cleaned up " + removedCount + " nonces");
+        }
+      }
+    };
+    ScheduledTaskRunner runner = new ScheduledTaskRunner(session.getKeycloakSessionFactory(), task);
+    timer.schedule(runner, Duration.ofMinutes(5).toMillis(), "siwe-cleanup");
+  }
+
+  private Integer removeOlderThan(LocalDateTime createdAt) {
+    EntityManager entityManager = session.getProvider(JpaConnectionProvider.class).getEntityManager();
+    List<SiweNonce> nonces = entityManager.createNamedQuery("findOlderThan", SiweNonce.class)
+        .setParameter("createdAt", createdAt).getResultList();
+    for (SiweNonce nonce : nonces) {
+      entityManager.remove(nonce);
+    }
+    return nonces.size();
+  }
+}

package/src/main/java/com/bitspur/keycloak/siwe/jpa/nonce/SiweNonceJpaEntityProviderFactory.java

@@ -0,0 +1,46 @@
+/**
+ * File: /src/main/java/com/bitspur/keycloak/siwe/jpa/nonce/SiweNonceJpaEntityProviderFactory.java
+ * Project: jpa
+ * File Created: 09-04-2023 10:33:19
+ * Author: Clay Risser
+ * -----
+ * Last Modified: 10-08-2023 16:34:52
+ * Modified By: Clay Risser
+ * -----
+ * BitSpur (c) Copyright 2022 - 2023
+ */
+
+package com.bitspur.keycloak.siwe.jpa.nonce;
+
+import org.keycloak.Config.Scope;
+import org.keycloak.connections.jpa.entityprovider.JpaEntityProvider;
+import org.keycloak.connections.jpa.entityprovider.JpaEntityProviderFactory;
+import org.keycloak.models.KeycloakSession;
+import org.keycloak.models.KeycloakSessionFactory;
+
+public class SiweNonceJpaEntityProviderFactory implements JpaEntityProviderFactory {
+
+  protected static final String ID = "siwe-nonce-entity-provider";
+
+  @Override
+  public JpaEntityProvider create(KeycloakSession session) {
+    return new SiweNonceJpaEntityProvider(session);
+  }
+
+  @Override
+  public String getId() {
+    return ID;
+  }
+
+  @Override
+  public void init(Scope config) {
+  }
+
+  @Override
+  public void postInit(KeycloakSessionFactory factory) {
+  }
+
+  @Override
+  public void close() {
+  }
+}