@multiplatform.one/wallet 7.7.2

package/src/main/java/com/bitspur/keycloak/siwe/jpa/wallet/SiweWalletAddress.java

@@ -0,0 +1,103 @@
+/**
+ * File: /src/main/java/com/bitspur/keycloak/siwe/jpa/wallet/SiweWalletAddress.java
+ * Project: siwe-keycloak
+ * File Created: 13-03-2024
+ * Author: Clay Risser
+ * -----
+ * BitSpur (c) Copyright 2022 - 2024
+ */
+
+package com.bitspur.keycloak.siwe.jpa.wallet;
+
+import java.time.LocalDateTime;
+
+import jakarta.persistence.Column;
+import jakarta.persistence.Entity;
+import jakarta.persistence.GeneratedValue;
+import jakarta.persistence.GenerationType;
+import jakarta.persistence.Id;
+import jakarta.persistence.NamedQueries;
+import jakarta.persistence.NamedQuery;
+import jakarta.persistence.Table;
+
+import org.hibernate.annotations.CreationTimestamp;
+import org.hibernate.annotations.UpdateTimestamp;
+
+@Entity
+@Table(name = "SIWE_WALLET_ADDRESS")
+@NamedQueries({
+    @NamedQuery(name = "findByAddress", query = "from SiweWalletAddress where address = :address"),
+    @NamedQuery(name = "findByUserId", query = "from SiweWalletAddress where userId = :userId"),
+    @NamedQuery(name = "findByRealmAddress", query = "from SiweWalletAddress where realmId = :realmId and address = :address"),
+    @NamedQuery(name = "findByRealmAddressType", query = "from SiweWalletAddress where realmId = :realmId and address = :address and addressType = :addressType")
+})
+public class SiweWalletAddress {
+  @Id
+  @GeneratedValue(strategy = GenerationType.IDENTITY)
+  @Column(name = "ID", nullable = false)
+  private Long id;
+
+  @Column(name = "ADDRESS", nullable = false)
+  private String address;
+
+  @Column(name = "ADDRESS_TYPE", nullable = false)
+  private String addressType;
+
+  @Column(name = "USER_ID", nullable = false)
+  private String userId;
+
+  @Column(name = "REALM_ID", nullable = false)
+  private String realmId;
+
+  @CreationTimestamp
+  @Column(name = "CREATED_AT", nullable = false, updatable = false)
+  private LocalDateTime createdAt;
+
+  @UpdateTimestamp
+  @Column(name = "UPDATED_AT", nullable = false)
+  private LocalDateTime updatedAt;
+
+  public Long getId() {
+    return this.id;
+  }
+
+  public String getAddress() {
+    return this.address;
+  }
+
+  public String getAddressType() {
+    return this.addressType;
+  }
+
+  public String getUserId() {
+    return this.userId;
+  }
+
+  public String getRealmId() {
+    return this.realmId;
+  }
+
+  public LocalDateTime getCreatedAt() {
+    return this.createdAt;
+  }
+
+  public LocalDateTime getUpdatedAt() {
+    return this.updatedAt;
+  }
+
+  public void setAddress(String address) {
+    this.address = address;
+  }
+
+  public void setAddressType(String addressType) {
+    this.addressType = addressType;
+  }
+
+  public void setUserId(String userId) {
+    this.userId = userId;
+  }
+
+  public void setRealmId(String realmId) {
+    this.realmId = realmId;
+  }
+}

package/src/main/java/com/bitspur/keycloak/siwe/jpa/wallet/SiweWalletJpaEntityProvider.java

@@ -0,0 +1,43 @@
+/**
+ * File: /src/main/java/com/bitspur/keycloak/siwe/jpa/wallet/SiweWalletJpaEntityProvider.java
+ * Project: siwe-keycloak
+ * File Created: 13-03-2024
+ * Author: Clay Risser
+ * -----
+ * BitSpur (c) Copyright 2022 - 2024
+ */
+
+package com.bitspur.keycloak.siwe.jpa.wallet;
+
+import org.keycloak.connections.jpa.entityprovider.JpaEntityProvider;
+import org.keycloak.models.KeycloakSession;
+
+import java.util.Collections;
+import java.util.List;
+
+public class SiweWalletJpaEntityProvider implements JpaEntityProvider {
+  KeycloakSession session;
+
+  SiweWalletJpaEntityProvider(KeycloakSession session) {
+    this.session = session;
+  }
+
+  @Override
+  public List<Class<?>> getEntities() {
+    return Collections.<Class<?>>singletonList(SiweWalletAddress.class);
+  }
+
+  @Override
+  public String getChangelogLocation() {
+    return "META-INF/siwe-wallet-changelog.xml";
+  }
+
+  @Override
+  public void close() {
+  }
+
+  @Override
+  public String getFactoryId() {
+    return SiweWalletJpaEntityProviderFactory.ID;
+  }
+}

package/src/main/java/com/bitspur/keycloak/siwe/jpa/wallet/SiweWalletJpaEntityProviderFactory.java

@@ -0,0 +1,46 @@
+/**
+ * File: /src/main/java/com/bitspur/keycloak/siwe/jpa/wallet/SiweWalletJpaEntityProviderFactory.java
+ * Project: siwe-keycloak
+ * File Created: 20-01-2025 07:52:54
+ * Author: Clay Risser
+ * -----
+ * Last Modified: 20-01-2025 08:04:48
+ * Modified By: Clay Risser
+ * -----
+ * BitSpur (c) Copyright 2022 - 2025
+ */
+
+package com.bitspur.keycloak.siwe.jpa.wallet;
+
+import org.keycloak.Config.Scope;
+import org.keycloak.connections.jpa.entityprovider.JpaEntityProvider;
+import org.keycloak.connections.jpa.entityprovider.JpaEntityProviderFactory;
+import org.keycloak.models.KeycloakSession;
+import org.keycloak.models.KeycloakSessionFactory;
+
+public class SiweWalletJpaEntityProviderFactory implements JpaEntityProviderFactory {
+
+  protected static final String ID = "siwe-wallet-entity-provider";
+
+  @Override
+  public JpaEntityProvider create(KeycloakSession session) {
+    return new SiweWalletJpaEntityProvider(session);
+  }
+
+  @Override
+  public String getId() {
+    return ID;
+  }
+
+  @Override
+  public void init(Scope config) {
+  }
+
+  @Override
+  public void postInit(KeycloakSessionFactory factory) {
+  }
+
+  @Override
+  public void close() {
+  }
+}

package/src/main/java/com/bitspur/keycloak/siwe/protocol/SiweWalletProtocolMapper.java

@@ -0,0 +1,85 @@
+/**
+ * File: /src/main/java/com/bitspur/keycloak/siwe/protocol/SiweWalletProtocolMapper.java
+ * Project: siwe-keycloak
+ * File Created: 20-01-2025 16:31:23
+ * Author: Clay Risser
+ * -----
+ * Last Modified: 20-01-2025 16:47:30
+ * Modified By: Clay Risser
+ * -----
+ * BitSpur (c) Copyright 2022 - 2025
+ */
+
+package com.bitspur.keycloak.siwe.protocol;
+
+import com.bitspur.keycloak.siwe.SiweUtil;
+
+import org.keycloak.models.ClientSessionContext;
+import org.keycloak.models.KeycloakSession;
+import org.keycloak.models.ProtocolMapperModel;
+import org.keycloak.models.UserSessionModel;
+import org.keycloak.protocol.oidc.mappers.AbstractOIDCProtocolMapper;
+import org.keycloak.protocol.oidc.mappers.OIDCAccessTokenMapper;
+import org.keycloak.protocol.oidc.mappers.OIDCIDTokenMapper;
+import org.keycloak.protocol.oidc.mappers.OIDCAttributeMapperHelper;
+import org.keycloak.protocol.oidc.mappers.UserInfoTokenMapper;
+import org.keycloak.provider.ProviderConfigProperty;
+import org.keycloak.representations.IDToken;
+
+import java.util.ArrayList;
+import java.util.List;
+
+public class SiweWalletProtocolMapper extends AbstractOIDCProtocolMapper
+    implements OIDCAccessTokenMapper, OIDCIDTokenMapper, UserInfoTokenMapper {
+
+  public static final String PROVIDER_ID = "siwe-wallet-mapper";
+  public static final String CLAIM_NAME = "wallets";
+
+  private static final List<ProviderConfigProperty> configProperties = new ArrayList<>();
+
+  static {
+    ProviderConfigProperty property = new ProviderConfigProperty();
+    property.setName(CLAIM_NAME);
+    property.setLabel("Wallet Addresses Claim Name");
+    property.setType(ProviderConfigProperty.STRING_TYPE);
+    property.setDefaultValue(CLAIM_NAME);
+    property.setHelpText("Name of the claim to add to the token");
+    configProperties.add(property);
+    OIDCAttributeMapperHelper.addIncludeInTokensConfig(configProperties, SiweWalletProtocolMapper.class);
+  }
+
+  @Override
+  public String getDisplayCategory() {
+    return "Token mapper";
+  }
+
+  @Override
+  public String getDisplayType() {
+    return "SIWE Wallet Addresses";
+  }
+
+  @Override
+  public String getHelpText() {
+    return "Adds wallet addresses to the token in a structured format";
+  }
+
+  @Override
+  public List<ProviderConfigProperty> getConfigProperties() {
+    return configProperties;
+  }
+
+  @Override
+  public String getId() {
+    return PROVIDER_ID;
+  }
+
+  @Override
+  protected void setClaim(IDToken token, ProtocolMapperModel mappingModel, UserSessionModel userSession,
+      KeycloakSession keycloakSession, ClientSessionContext clientSessionCtx) {
+    String claimName = mappingModel.getConfig().get(CLAIM_NAME);
+    if (claimName == null) {
+      claimName = CLAIM_NAME;
+    }
+    SiweUtil.addWalletsToToken(keycloakSession, userSession.getUser(), token.getOtherClaims());
+  }
+}

package/src/main/java/com/bitspur/keycloak/siwe/resource/SiweResource.java

@@ -0,0 +1,210 @@
+/**
+ * File: /src/main/java/com/bitspur/keycloak/siwe/resource/SiweResource.java
+ * Project: siwe-keycloak
+ * File Created: 04-11-2024 22:05:52
+ * Author: Clay Risser
+ * -----
+ * Last Modified: 24-01-2026 00:40:00
+ * Modified By: Clay Risser
+ * -----
+ * BitSpur (c) Copyright 2022 - 2026
+ */
+
+package com.bitspur.keycloak.siwe.resource;
+
+import jakarta.json.Json;
+import jakarta.json.JsonObject;
+import jakarta.ws.rs.GET;
+import jakarta.ws.rs.OPTIONS;
+import jakarta.ws.rs.POST;
+import jakarta.ws.rs.Path;
+import jakarta.ws.rs.Produces;
+import jakarta.ws.rs.core.MediaType;
+import jakarta.ws.rs.core.Response;
+
+import org.jboss.logging.Logger;
+import org.keycloak.models.KeycloakSession;
+import org.keycloak.models.UserModel;
+import org.keycloak.services.managers.AuthenticationManager.AuthResult;
+
+import com.bitspur.keycloak.siwe.SiweUtil;
+import com.bitspur.keycloak.siwe.LiteAuthenticationService;
+import com.bitspur.keycloak.siwe.SiweSession;
+import com.bitspur.keycloak.siwe.SiweCredentials;
+
+import java.io.StringReader;
+import java.util.Base64;
+
+public class SiweResource {
+  private static final Logger logger = Logger.getLogger(SiweResource.class);
+  private final KeycloakSession session;
+  private LiteAuthenticationService liteAuthenticationService;
+
+  public SiweResource(KeycloakSession session) {
+    this.session = session;
+    this.liteAuthenticationService = new LiteAuthenticationService(this.session);
+  }
+
+  @OPTIONS
+  @Path("nonce")
+  public Response optionsNonce() {
+    return createCorsPreflightResponse();
+  }
+
+  @OPTIONS
+  @Path("session")
+  public Response optionsSession() {
+    return createCorsPreflightResponse();
+  }
+
+  @OPTIONS
+  @Path("register")
+  public Response optionsRegister() {
+    return createCorsPreflightResponse();
+  }
+
+  @OPTIONS
+  @Path("unregister")
+  public Response optionsUnregister() {
+    return createCorsPreflightResponse();
+  }
+
+  @GET
+  @Path("nonce")
+  @Produces({ MediaType.TEXT_PLAIN })
+  public Response getNonce() {
+    SiweSession siweSession = SiweUtil.generateSiweSession(this.session);
+    // cannot use Cookie and NewCookie because it does not support SameSite=None
+    String cookieString = String.format("%s=%s; Path=/; Secure; HttpOnly; SameSite=None",
+        SiweUtil.KEYCLOAK_SESSION_SIWE, siweSession.getKey());
+    return addCorsHeaders(Response.ok(siweSession.getNonce(), MediaType.TEXT_PLAIN)
+        .header("Set-Cookie", cookieString))
+        .build();
+  }
+
+  @GET
+  @Path("session")
+  @Produces({ MediaType.APPLICATION_JSON })
+  public Response getSession() {
+    UserModel user = this.getCurrentUser();
+    if (user == null) {
+      return this.createErrorResponse(new Exception("No user"), Response.Status.UNAUTHORIZED);
+    }
+    JsonObject json = Json.createObjectBuilder()
+        .add("address", user.getUsername())
+        .add("chainId", "1").build();
+    return this.createResponse(json.toString(), Response.Status.OK);
+  }
+
+  private Response createErrorResponse(Exception e, Response.Status status) {
+    JsonObject json = Json.createObjectBuilder().add("message", e.getMessage()).build();
+    return this.createResponse(json.toString(), status);
+  }
+
+  private Response createResponse(String body, Response.Status status) {
+    return this.createResponse(body, status, MediaType.APPLICATION_JSON);
+  }
+
+  private Response createResponse(String body, Response.Status status, String type) {
+    return addCorsHeaders(Response.ok(body, type).status(status)).build();
+  }
+
+  private Response.ResponseBuilder addCorsHeaders(Response.ResponseBuilder builder) {
+    return builder
+        .header("Access-Control-Allow-Origin", "*")
+        .header("Access-Control-Allow-Credentials", "true")
+        .header("Access-Control-Allow-Headers", "Authorization, Content-Type")
+        .header("Access-Control-Allow-Methods", "GET, POST, OPTIONS")
+        .header("Access-Control-Expose-Headers", "Authorization");
+  }
+
+  private Response createCorsPreflightResponse() {
+    return addCorsHeaders(Response.ok()).build();
+  }
+
+  @POST
+  @Path("register")
+  @Produces(MediaType.APPLICATION_JSON)
+  public Response register(String body) {
+    UserModel user = this.getCurrentUser();
+    if (user == null) {
+      return this.createErrorResponse(new Exception("no user"), Response.Status.UNAUTHORIZED);
+    }
+    try {
+      logger.info("Register request body: " + body);
+      JsonObject jsonBody = Json.createReader(new StringReader(body)).readObject();
+      String message = jsonBody.getString("message");
+      String signature = jsonBody.getString("signature");
+      logger.info("Parsed message: " + message);
+      logger.info("Parsed signature: " + signature);
+
+      try {
+        SiweCredentials siweCredentials = new SiweCredentials(signature,
+            Base64.getEncoder().encodeToString(message.getBytes()));
+        logger.info("Successfully created SiweCredentials");
+        logger.info("Parsed SIWE message details:");
+        logger.info("- Domain: " + siweCredentials.message.getDomain());
+        logger.info("- Address: " + siweCredentials.message.getAddress());
+        logger.info("- URI: " + siweCredentials.message.getUri());
+        logger.info("- Version: " + siweCredentials.message.getVersion());
+        logger.info("- Chain ID: " + siweCredentials.message.getChainId());
+        logger.info("- Nonce: " + siweCredentials.message.getNonce());
+        logger.info("- Issued At: " + siweCredentials.message.getIssuedAt());
+
+        String address = siweCredentials.message.getAddress();
+        UserModel existingUser = SiweUtil.findUserByWalletAddress(session, address);
+        if (existingUser != null) {
+          return this.createErrorResponse(new Exception("wallet already registered"), Response.Status.CONFLICT);
+        }
+        JsonObject result = Json.createObjectBuilder()
+            .add("registered", SiweUtil.addWalletAddress(session, user, address))
+            .build();
+        return this.createResponse(result.toString(), Response.Status.OK);
+      } catch (Exception e) {
+        logger.error("SIWE message parsing failed:", e);
+        return this.createErrorResponse(new Exception("invalid siwe message: " + e.getMessage()),
+            Response.Status.BAD_REQUEST);
+      }
+    } catch (Exception e) {
+      logger.error("Request processing failed:", e);
+      return this.createErrorResponse(e, Response.Status.BAD_REQUEST);
+    }
+  }
+
+  @POST
+  @Path("unregister")
+  @Produces(MediaType.APPLICATION_JSON)
+  public Response unregister(String body) {
+    UserModel user = this.getCurrentUser();
+    if (user == null) {
+      return this.createErrorResponse(new Exception("no user"), Response.Status.UNAUTHORIZED);
+    }
+    try {
+      JsonObject bodyJson = Json.createReader(new StringReader(body)).readObject();
+      String address = bodyJson.getString("address");
+      if (address == null || address.isEmpty()) {
+        return this.createErrorResponse(new Exception("no address provided"), Response.Status.BAD_REQUEST);
+      }
+      UserModel existingUser = SiweUtil.findUserByWalletAddress(session, address);
+      if (existingUser == null || !existingUser.getId().equals(user.getId())) {
+        return this.createErrorResponse(new Exception("wallet not found"), Response.Status.NOT_FOUND);
+      }
+      JsonObject result = Json.createObjectBuilder()
+          .add("unregistered", SiweUtil.removeWalletAddress(session, address))
+          .build();
+      return this.createResponse(result.toString(), Response.Status.OK);
+    } catch (Exception e) {
+      return this.createErrorResponse(e, Response.Status.BAD_REQUEST);
+    }
+  }
+
+  private UserModel getCurrentUser() {
+    AuthResult authResult = this.liteAuthenticationService.resolveAuthentication(
+        this.session.getContext().getRequestHeaders(),
+        this.session.getContext().getConnection());
+    if (authResult == null) {
+      return null;
+    }
+    return authResult.getUser();
+  }
+}

package/src/main/java/com/bitspur/keycloak/siwe/resource/SiweResourceProvider.java

@@ -0,0 +1,34 @@
+/**
+ * File: /src/main/java/com/bitspur/keycloak/siwe/resource/SiweResourceProvider.java
+ * Project: authenticators
+ * File Created: 08-04-2023 11:27:18
+ * Author: Clay Risser
+ * -----
+ * Last Modified: 10-08-2023 16:34:52
+ * Modified By: Clay Risser
+ * -----
+ * BitSpur (c) Copyright 2022 - 2023
+ */
+
+package com.bitspur.keycloak.siwe.resource;
+
+import org.keycloak.models.KeycloakSession;
+import org.keycloak.services.resource.RealmResourceProvider;
+
+public class SiweResourceProvider implements RealmResourceProvider {
+
+  private final KeycloakSession session;
+
+  public SiweResourceProvider(KeycloakSession session) {
+    this.session = session;
+  }
+
+  @Override
+  public Object getResource() {
+    return new SiweResource(this.session);
+  }
+
+  @Override
+  public void close() {
+  }
+}

package/src/main/java/com/bitspur/keycloak/siwe/resource/SiweResourceProviderFactory.java

@@ -0,0 +1,46 @@
+/**
+ * File: /src/main/java/com/bitspur/keycloak/siwe/resource/SiweResourceProviderFactory.java
+ * Project: authenticators
+ * File Created: 08-04-2023 11:25:27
+ * Author: Clay Risser
+ * -----
+ * Last Modified: 10-08-2023 16:34:52
+ * Modified By: Clay Risser
+ * -----
+ * BitSpur (c) Copyright 2022 - 2023
+ */
+
+package com.bitspur.keycloak.siwe.resource;
+
+import org.keycloak.models.KeycloakSession;
+import org.keycloak.models.KeycloakSessionFactory;
+import org.keycloak.services.resource.RealmResourceProvider;
+import org.keycloak.services.resource.RealmResourceProviderFactory;
+import static org.keycloak.Config.Scope;
+
+public class SiweResourceProviderFactory implements RealmResourceProviderFactory {
+  public static final String ID = "siwe";
+
+  @Override
+  public RealmResourceProvider create(KeycloakSession session) {
+    return new SiweResourceProvider(session);
+  }
+
+  @Override
+  public void init(Scope scope) {
+  }
+
+  @Override
+  public void postInit(KeycloakSessionFactory keycloakSessionFactory) {
+
+  }
+
+  @Override
+  public void close() {
+  }
+
+  @Override
+  public String getId() {
+    return ID;
+  }
+}

package/src/main/java/com/bitspur/keycloak/siwe/siu/SiuCredentials.java

@@ -0,0 +1,52 @@
+/**
+ * File: /src/main/java/com/bitspur/keycloak/siwe/siu/SiuCredentials.java
+ * Project: siwe-keycloak
+ * File Created: 24-01-2026
+ * Author: Clay Risser
+ * -----
+ * BitSpur (c) Copyright 2022 - 2026
+ */
+
+package com.bitspur.keycloak.siwe.siu;
+
+import com.bitspur.keycloak.siwe.Errors.SiweKeycloakException;
+import java.util.Base64;
+
+/**
+ * Holds SIU credentials: the parsed message and the signature.
+ *
+ * The signature is a Base64-encoded ed25519 signature.
+ * The message is a Base64-encoded SIU message string.
+ */
+public class SiuCredentials {
+    private static final Base64.Decoder decoder = Base64.getDecoder();
+
+    /**
+     * The parsed SIU message.
+     */
+    public SiuMessage message;
+
+    /**
+     * The Base64-encoded ed25519 signature.
+     */
+    public String signature;
+
+    /**
+     * Creates new SIU credentials.
+     *
+     * @param username The signature (Base64 encoded)
+     * @param password The SIU message (Base64 encoded)
+     * @throws SiweKeycloakException If the message cannot be parsed
+     */
+    public SiuCredentials(String username, String password) throws SiweKeycloakException {
+        this.signature = username;
+        try {
+            String decodedMessage = new String(decoder.decode(password));
+            this.message = new SiuMessage.Parser().parse(decodedMessage);
+        } catch (SiuParseException e) {
+            throw new SiweKeycloakException(e.getMessage());
+        } catch (IllegalArgumentException e) {
+            throw new SiweKeycloakException("Invalid Base64 encoding for SIU message");
+        }
+    }
+}