@multiplatform.one/wallet 7.7.2

package/src/main/java/com/bitspur/keycloak/siwe/siws/SiwsCredentials.java

@@ -0,0 +1,52 @@
+/**
+ * File: /src/main/java/com/bitspur/keycloak/siwe/siws/SiwsCredentials.java
+ * Project: siwe-keycloak
+ * File Created: 24-01-2026
+ * Author: Clay Risser
+ * -----
+ * BitSpur (c) Copyright 2022 - 2026
+ */
+
+package com.bitspur.keycloak.siwe.siws;
+
+import com.bitspur.keycloak.siwe.Errors.SiweKeycloakException;
+import java.util.Base64;
+
+/**
+ * Holds SIWS credentials: the parsed message and the signature.
+ *
+ * The signature is a Base58-encoded ed25519 signature.
+ * The message is a Base64-encoded SIWS message string.
+ */
+public class SiwsCredentials {
+    private static final Base64.Decoder decoder = Base64.getDecoder();
+
+    /**
+     * The parsed SIWS message.
+     */
+    public SiwsMessage message;
+
+    /**
+     * The Base58-encoded ed25519 signature.
+     */
+    public String signature;
+
+    /**
+     * Creates new SIWS credentials.
+     *
+     * @param username The signature (Base58 encoded)
+     * @param password The SIWS message (Base64 encoded)
+     * @throws SiweKeycloakException If the message cannot be parsed
+     */
+    public SiwsCredentials(String username, String password) throws SiweKeycloakException {
+        this.signature = username;
+        try {
+            String decodedMessage = new String(decoder.decode(password));
+            this.message = new SiwsMessage.Parser().parse(decodedMessage);
+        } catch (SiwsParseException e) {
+            throw new SiweKeycloakException(e.getMessage());
+        } catch (IllegalArgumentException e) {
+            throw new SiweKeycloakException("Invalid Base64 encoding for SIWS message");
+        }
+    }
+}

package/src/main/java/com/bitspur/keycloak/siwe/siws/SiwsMessage.java

@@ -0,0 +1,362 @@
+/**
+ * File: /src/main/java/com/bitspur/keycloak/siwe/siws/SiwsMessage.java
+ * Project: siwe-keycloak
+ * File Created: 24-01-2026
+ * Author: Clay Risser
+ * -----
+ * BitSpur (c) Copyright 2022 - 2026
+ *
+ * Sign-In With Solana (SIWS) message parser
+ * Based on EIP-4361 / CAIP-122 specification adapted for Solana
+ */
+
+package com.bitspur.keycloak.siwe.siws;
+
+import java.time.OffsetDateTime;
+import java.time.format.DateTimeFormatter;
+import java.time.format.DateTimeParseException;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.regex.Matcher;
+import java.util.regex.Pattern;
+
+/**
+ * Represents a parsed SIWS (Sign-In With Solana) message.
+ *
+ * SIWS message format follows EIP-4361 / CAIP-122:
+ * <pre>
+ * ${domain} wants you to sign in with your Solana account:
+ * ${address}
+ *
+ * ${statement}
+ *
+ * URI: ${uri}
+ * Version: ${version}
+ * Chain ID: ${chainId}
+ * Nonce: ${nonce}
+ * Issued At: ${issuedAt}
+ * Expiration Time: ${expirationTime}
+ * Not Before: ${notBefore}
+ * Request ID: ${requestId}
+ * Resources:
+ * - ${resource1}
+ * - ${resource2}
+ * </pre>
+ */
+public class SiwsMessage {
+    // Solana address: Base58 encoded, 32-44 characters
+    private static final Pattern SOLANA_ADDRESS_PATTERN = Pattern.compile("^[1-9A-HJ-NP-Za-km-z]{32,44}$");
+
+    private String domain;
+    private String address;
+    private String statement;
+    private String uri;
+    private String version;
+    private String chainId;
+    private String nonce;
+    private OffsetDateTime issuedAt;
+    private OffsetDateTime expirationTime;
+    private OffsetDateTime notBefore;
+    private String requestId;
+    private List<String> resources;
+
+    private SiwsMessage() {
+        this.resources = new ArrayList<>();
+    }
+
+    public String getDomain() {
+        return domain;
+    }
+
+    public String getAddress() {
+        return address;
+    }
+
+    public String getStatement() {
+        return statement;
+    }
+
+    public String getUri() {
+        return uri;
+    }
+
+    public String getVersion() {
+        return version;
+    }
+
+    public String getChainId() {
+        return chainId;
+    }
+
+    public String getNonce() {
+        return nonce;
+    }
+
+    public OffsetDateTime getIssuedAt() {
+        return issuedAt;
+    }
+
+    public OffsetDateTime getExpirationTime() {
+        return expirationTime;
+    }
+
+    public OffsetDateTime getNotBefore() {
+        return notBefore;
+    }
+
+    public String getRequestId() {
+        return requestId;
+    }
+
+    public List<String> getResources() {
+        return resources;
+    }
+
+    /**
+     * Validates that the Solana address is in the correct format.
+     * Solana addresses are Base58-encoded Ed25519 public keys.
+     */
+    public static boolean isValidSolanaAddress(String address) {
+        if (address == null || address.isEmpty()) {
+            return false;
+        }
+        return SOLANA_ADDRESS_PATTERN.matcher(address).matches();
+    }
+
+    /**
+     * Parser for SIWS messages.
+     */
+    public static class Parser {
+        // ABNF grammar patterns based on EIP-4361 / CAIP-122
+        private static final Pattern DOMAIN_PATTERN = Pattern.compile(
+            "^(.+) wants you to sign in with your Solana account:$",
+            Pattern.MULTILINE
+        );
+        private static final Pattern ADDRESS_PATTERN = Pattern.compile(
+            "^([1-9A-HJ-NP-Za-km-z]{32,44})$",
+            Pattern.MULTILINE
+        );
+        private static final Pattern URI_PATTERN = Pattern.compile("^URI: (.+)$", Pattern.MULTILINE);
+        private static final Pattern VERSION_PATTERN = Pattern.compile("^Version: (.+)$", Pattern.MULTILINE);
+        private static final Pattern CHAIN_ID_PATTERN = Pattern.compile("^Chain ID: (.+)$", Pattern.MULTILINE);
+        private static final Pattern NONCE_PATTERN = Pattern.compile("^Nonce: ([A-Za-z0-9]{8,})$", Pattern.MULTILINE);
+        private static final Pattern ISSUED_AT_PATTERN = Pattern.compile("^Issued At: (.+)$", Pattern.MULTILINE);
+        private static final Pattern EXPIRATION_TIME_PATTERN = Pattern.compile("^Expiration Time: (.+)$", Pattern.MULTILINE);
+        private static final Pattern NOT_BEFORE_PATTERN = Pattern.compile("^Not Before: (.+)$", Pattern.MULTILINE);
+        private static final Pattern REQUEST_ID_PATTERN = Pattern.compile("^Request ID: (.+)$", Pattern.MULTILINE);
+        private static final Pattern RESOURCES_PATTERN = Pattern.compile("^Resources:$", Pattern.MULTILINE);
+        private static final Pattern RESOURCE_ITEM_PATTERN = Pattern.compile("^- (.+)$", Pattern.MULTILINE);
+
+        /**
+         * Parses a SIWS message string into a SiwsMessage object.
+         *
+         * @param message The raw SIWS message string
+         * @return Parsed SiwsMessage
+         * @throws SiwsParseException If the message cannot be parsed
+         */
+        public SiwsMessage parse(String message) throws SiwsParseException {
+            if (message == null || message.trim().isEmpty()) {
+                throw new SiwsParseException("Message cannot be null or empty");
+            }
+
+            SiwsMessage siws = new SiwsMessage();
+            String[] lines = message.split("\n");
+
+            if (lines.length < 2) {
+                throw new SiwsParseException("Invalid SIWS message format: too few lines");
+            }
+
+            // Parse domain from first line
+            Matcher domainMatcher = DOMAIN_PATTERN.matcher(lines[0]);
+            if (!domainMatcher.matches()) {
+                throw new SiwsParseException("Invalid SIWS message: missing or invalid domain line");
+            }
+            siws.domain = domainMatcher.group(1).trim();
+
+            // Parse address from second line
+            if (lines.length < 2 || !ADDRESS_PATTERN.matcher(lines[1].trim()).matches()) {
+                throw new SiwsParseException("Invalid SIWS message: missing or invalid Solana address");
+            }
+            siws.address = lines[1].trim();
+
+            // Parse statement (optional, between address and first field)
+            StringBuilder statementBuilder = new StringBuilder();
+            int fieldStartIndex = -1;
+            for (int i = 2; i < lines.length; i++) {
+                String line = lines[i];
+                if (line.startsWith("URI:") || line.startsWith("Version:") ||
+                    line.startsWith("Chain ID:") || line.startsWith("Nonce:") ||
+                    line.startsWith("Issued At:") || line.startsWith("Expiration Time:") ||
+                    line.startsWith("Not Before:") || line.startsWith("Request ID:") ||
+                    line.startsWith("Resources:")) {
+                    fieldStartIndex = i;
+                    break;
+                }
+                // Skip empty lines at the start/end of statement
+                if (statementBuilder.length() > 0 || !line.trim().isEmpty()) {
+                    if (statementBuilder.length() > 0) {
+                        statementBuilder.append("\n");
+                    }
+                    statementBuilder.append(line);
+                }
+            }
+            String statement = statementBuilder.toString().trim();
+            if (!statement.isEmpty()) {
+                siws.statement = statement;
+            }
+
+            // Parse remaining fields
+            String remainingMessage = fieldStartIndex > 0
+                ? String.join("\n", java.util.Arrays.copyOfRange(lines, fieldStartIndex, lines.length))
+                : "";
+
+            // Required fields
+            siws.uri = extractField(remainingMessage, URI_PATTERN, "URI");
+            siws.version = extractField(remainingMessage, VERSION_PATTERN, "Version");
+            siws.nonce = extractField(remainingMessage, NONCE_PATTERN, "Nonce");
+            siws.issuedAt = parseDateTime(extractField(remainingMessage, ISSUED_AT_PATTERN, "Issued At"));
+
+            // Optional fields
+            String chainIdStr = extractFieldOptional(remainingMessage, CHAIN_ID_PATTERN);
+            if (chainIdStr != null) {
+                siws.chainId = chainIdStr;
+            }
+
+            String expirationTimeStr = extractFieldOptional(remainingMessage, EXPIRATION_TIME_PATTERN);
+            if (expirationTimeStr != null) {
+                siws.expirationTime = parseDateTime(expirationTimeStr);
+            }
+
+            String notBeforeStr = extractFieldOptional(remainingMessage, NOT_BEFORE_PATTERN);
+            if (notBeforeStr != null) {
+                siws.notBefore = parseDateTime(notBeforeStr);
+            }
+
+            String requestIdStr = extractFieldOptional(remainingMessage, REQUEST_ID_PATTERN);
+            if (requestIdStr != null) {
+                siws.requestId = requestIdStr;
+            }
+
+            // Parse resources (optional)
+            Matcher resourcesMatcher = RESOURCES_PATTERN.matcher(remainingMessage);
+            if (resourcesMatcher.find()) {
+                int resourcesStart = resourcesMatcher.end();
+                String resourcesSection = remainingMessage.substring(resourcesStart);
+                Matcher resourceItemMatcher = RESOURCE_ITEM_PATTERN.matcher(resourcesSection);
+                while (resourceItemMatcher.find()) {
+                    siws.resources.add(resourceItemMatcher.group(1).trim());
+                }
+            }
+
+            // Validate the message
+            validate(siws);
+
+            return siws;
+        }
+
+        private String extractField(String message, Pattern pattern, String fieldName) throws SiwsParseException {
+            Matcher matcher = pattern.matcher(message);
+            if (!matcher.find()) {
+                throw new SiwsParseException("Missing required field: " + fieldName);
+            }
+            return matcher.group(1).trim();
+        }
+
+        private String extractFieldOptional(String message, Pattern pattern) {
+            Matcher matcher = pattern.matcher(message);
+            if (matcher.find()) {
+                return matcher.group(1).trim();
+            }
+            return null;
+        }
+
+        private OffsetDateTime parseDateTime(String dateTimeStr) throws SiwsParseException {
+            if (dateTimeStr == null || dateTimeStr.isEmpty()) {
+                return null;
+            }
+            try {
+                return OffsetDateTime.parse(dateTimeStr, DateTimeFormatter.ISO_OFFSET_DATE_TIME);
+            } catch (DateTimeParseException e) {
+                // Try parsing without timezone offset
+                try {
+                    return OffsetDateTime.parse(dateTimeStr + "Z", DateTimeFormatter.ISO_OFFSET_DATE_TIME);
+                } catch (DateTimeParseException e2) {
+                    throw new SiwsParseException("Invalid datetime format: " + dateTimeStr);
+                }
+            }
+        }
+
+        private void validate(SiwsMessage siws) throws SiwsParseException {
+            // Validate Solana address format
+            if (!SiwsMessage.isValidSolanaAddress(siws.address)) {
+                throw new SiwsParseException("Invalid Solana address format: " + siws.address);
+            }
+
+            // Validate version is "1"
+            if (!"1".equals(siws.version)) {
+                throw new SiwsParseException("Unsupported SIWS version: " + siws.version + " (expected: 1)");
+            }
+
+            // Validate nonce length (at least 8 alphanumeric characters)
+            if (siws.nonce == null || siws.nonce.length() < 8) {
+                throw new SiwsParseException("Nonce must be at least 8 alphanumeric characters");
+            }
+
+            // Validate expiration time if present
+            if (siws.expirationTime != null && siws.expirationTime.isBefore(OffsetDateTime.now())) {
+                throw new SiwsParseException("Message has expired");
+            }
+
+            // Validate not before if present
+            if (siws.notBefore != null && siws.notBefore.isAfter(OffsetDateTime.now())) {
+                throw new SiwsParseException("Message is not yet valid (notBefore is in the future)");
+            }
+        }
+    }
+
+    /**
+     * Reconstructs the SIWS message from its components.
+     * Used for signature verification to ensure message integrity.
+     */
+    public String toMessage() {
+        StringBuilder sb = new StringBuilder();
+        sb.append(domain).append(" wants you to sign in with your Solana account:\n");
+        sb.append(address).append("\n");
+
+        if (statement != null && !statement.isEmpty()) {
+            sb.append("\n").append(statement).append("\n");
+        }
+
+        sb.append("\n");
+        sb.append("URI: ").append(uri).append("\n");
+        sb.append("Version: ").append(version).append("\n");
+
+        if (chainId != null) {
+            sb.append("Chain ID: ").append(chainId).append("\n");
+        }
+
+        sb.append("Nonce: ").append(nonce).append("\n");
+        sb.append("Issued At: ").append(issuedAt.format(DateTimeFormatter.ISO_OFFSET_DATE_TIME)).append("\n");
+
+        if (expirationTime != null) {
+            sb.append("Expiration Time: ").append(expirationTime.format(DateTimeFormatter.ISO_OFFSET_DATE_TIME)).append("\n");
+        }
+
+        if (notBefore != null) {
+            sb.append("Not Before: ").append(notBefore.format(DateTimeFormatter.ISO_OFFSET_DATE_TIME)).append("\n");
+        }
+
+        if (requestId != null) {
+            sb.append("Request ID: ").append(requestId).append("\n");
+        }
+
+        if (resources != null && !resources.isEmpty()) {
+            sb.append("Resources:\n");
+            for (String resource : resources) {
+                sb.append("- ").append(resource).append("\n");
+            }
+        }
+
+        return sb.toString();
+    }
+}

package/src/main/java/com/bitspur/keycloak/siwe/siws/SiwsParseException.java

@@ -0,0 +1,23 @@
+/**
+ * File: /src/main/java/com/bitspur/keycloak/siwe/siws/SiwsParseException.java
+ * Project: siwe-keycloak
+ * File Created: 24-01-2026
+ * Author: Clay Risser
+ * -----
+ * BitSpur (c) Copyright 2022 - 2026
+ */
+
+package com.bitspur.keycloak.siwe.siws;
+
+/**
+ * Exception thrown when parsing a SIWS message fails.
+ */
+public class SiwsParseException extends Exception {
+    public SiwsParseException(String message) {
+        super(message);
+    }
+
+    public SiwsParseException(String message, Throwable cause) {
+        super(message, cause);
+    }
+}