@multiplatform.one/wallet 7.7.2

package/src/main/resources/META-INF/services/org.keycloak.authentication.AuthenticatorFactory

@@ -0,0 +1,6 @@
+com.bitspur.keycloak.siwe.authenticators.browser.SiweBrowserAuthenticatorFactory
+com.bitspur.keycloak.siwe.authenticators.directgrant.SiweDirectGrantAuthenticatorFactory
+com.bitspur.keycloak.siwe.siws.authenticators.browser.SiwsBrowserAuthenticatorFactory
+com.bitspur.keycloak.siwe.siws.authenticators.directgrant.SiwsDirectGrantAuthenticatorFactory
+com.bitspur.keycloak.siwe.siu.authenticators.browser.SiuBrowserAuthenticatorFactory
+com.bitspur.keycloak.siwe.siu.authenticators.directgrant.SiuDirectGrantAuthenticatorFactory

package/src/main/resources/META-INF/services/org.keycloak.connections.jpa.entityprovider.JpaEntityProviderFactory

@@ -0,0 +1,2 @@
+com.bitspur.keycloak.siwe.jpa.nonce.SiweNonceJpaEntityProviderFactory
+com.bitspur.keycloak.siwe.jpa.wallet.SiweWalletJpaEntityProviderFactory

package/src/main/resources/META-INF/services/org.keycloak.protocol.ProtocolMapper

@@ -0,0 +1 @@
+com.bitspur.keycloak.siwe.protocol.SiweWalletProtocolMapper

package/src/main/resources/META-INF/services/org.keycloak.services.resource.RealmResourceProviderFactory

@@ -0,0 +1,3 @@
+com.bitspur.keycloak.siwe.resource.SiweResourceProviderFactory
+com.bitspur.keycloak.siwe.siws.resource.SiwsResourceProviderFactory
+com.bitspur.keycloak.siwe.siu.resource.SiuResourceProviderFactory

package/src/main/resources/META-INF/siwe-nonce-changelog.xml

@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<databaseChangeLog xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
+  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+  xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-3.1.xsd">
+  <changeSet author="erik.mulder@docdatapayments.com" id="example-1.0">
+
+    <createTable tableName="SIWE_NONCE">
+      <column name="ID" type="BIGINT" autoIncrement="true">
+        <constraints nullable="false" primaryKey="true" />
+      </column>
+      <column name="NONCE_KEY" type="VARCHAR(255)">
+        <constraints nullable="false" />
+      </column>
+      <column name="NONCE" type="VARCHAR(255)">
+        <constraints nullable="true" />
+      </column>
+      <column name="REALM_ID" type="VARCHAR(36)">
+        <constraints nullable="false" />
+      </column>
+      <column name="CREATED_AT" type="TIMESTAMP DEFAULT CURRENT_TIMESTAMP">
+        <constraints nullable="false" />
+      </column>
+      <column name="UPDATED_AT" type="TIMESTAMP DEFAULT CURRENT_TIMESTAMP">
+        <constraints nullable="false" />
+      </column>
+    </createTable>
+
+  </changeSet>
+</databaseChangeLog>

package/src/main/resources/META-INF/siwe-wallet-changelog.xml

@@ -0,0 +1,46 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<databaseChangeLog xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
+  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+  xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-3.1.xsd">
+  <changeSet author="clay.risser" id="siwe-wallet-1.0">
+    <createTable tableName="SIWE_WALLET_ADDRESS">
+      <column name="ID" type="BIGINT" autoIncrement="true">
+        <constraints nullable="false" primaryKey="true" />
+      </column>
+      <column name="ADDRESS" type="VARCHAR(255)">
+        <constraints nullable="false" />
+      </column>
+      <column name="ADDRESS_TYPE" type="VARCHAR(50)">
+        <constraints nullable="false" />
+      </column>
+      <column name="USER_ID" type="VARCHAR(36)">
+        <constraints nullable="false" />
+      </column>
+      <column name="REALM_ID" type="VARCHAR(36)">
+        <constraints nullable="false" />
+      </column>
+      <column name="CREATED_AT" type="TIMESTAMP DEFAULT CURRENT_TIMESTAMP">
+        <constraints nullable="false" />
+      </column>
+      <column name="UPDATED_AT" type="TIMESTAMP DEFAULT CURRENT_TIMESTAMP">
+        <constraints nullable="false" />
+      </column>
+    </createTable>
+
+    <addUniqueConstraint
+      tableName="SIWE_WALLET_ADDRESS"
+      columnNames="ADDRESS,REALM_ID"
+      constraintName="UK_SIWE_WALLET_ADDRESS_UNIQUE" />
+
+    <createIndex tableName="SIWE_WALLET_ADDRESS" indexName="IDX_SIWE_WALLET_ADDRESS">
+      <column name="ADDRESS" />
+      <column name="ADDRESS_TYPE" />
+      <column name="REALM_ID" />
+    </createIndex>
+
+    <createIndex tableName="SIWE_WALLET_ADDRESS" indexName="IDX_SIWE_WALLET_USER">
+      <column name="USER_ID" />
+      <column name="REALM_ID" />
+    </createIndex>
+  </changeSet>
+</databaseChangeLog>

package/src/render.tsx

@@ -0,0 +1,47 @@
+import React from "react";
+import { createRoot } from "react-dom/client";
+import { SiweKeycloakProvider } from ".";
+import type { SiweProps } from "./siwe";
+import { Siwe } from "./siwe";
+import type { SiweKeycloakProviderProps } from "./index";
+
+export interface RenderOptions extends SiweKeycloakProviderProps, SiweProps {
+  element?: HTMLElement | null;
+}
+
+export function render({
+  element,
+  onAddresses,
+  onSetClient,
+  onSetConnect,
+  onSetOpenAbout,
+  onSetOpenOnboarding,
+  onSetOpenProfile,
+  onSetOpenSIWE,
+  onSetOpenSwitchNetworks,
+  onSetSignOut,
+  onSetWalletClient,
+  setTokens: _setTokens,
+  ...props
+}: RenderOptions) {
+  if (!element) element = document.createElement("div");
+  if (!element) return;
+  window.React = React;
+  const root = createRoot(element);
+  root.render(
+    <SiweKeycloakProvider {...props}>
+      <Siwe
+        onAddresses={onAddresses}
+        onSetClient={onSetClient}
+        onSetConnect={onSetConnect}
+        onSetOpenAbout={onSetOpenAbout}
+        onSetOpenOnboarding={onSetOpenOnboarding}
+        onSetOpenProfile={onSetOpenProfile}
+        onSetOpenSIWE={onSetOpenSIWE}
+        onSetOpenSwitchNetworks={onSetOpenSwitchNetworks}
+        onSetSignOut={onSetSignOut}
+        onSetWalletClient={onSetWalletClient}
+      />
+    </SiweKeycloakProvider>,
+  );
+}

package/src/siwe.tsx

@@ -0,0 +1,57 @@
+import type { GetWalletClientData } from "@wagmi/core/query";
+import { useEffect } from "react";
+import type { Address } from "viem";
+import { type UseClientReturnType, useAccount, useClient, useWalletClient } from "wagmi";
+import { useSiweKeycloak } from "./hooks/useSiweKeycloak";
+
+export interface SiweProps {
+  onSetOpenAbout: (openAbout: () => void) => void;
+  onSetOpenOnboarding: (openOnboarding: () => void) => void;
+  onSetOpenProfile: (openProfile: () => void) => void;
+  onSetOpenSIWE: (openSIWE: (triggerSIWE?: boolean) => void) => void;
+  onSetOpenSwitchNetworks: (openSwitchNetworks: () => void) => void;
+  onSetSignOut: (signOut: () => void) => void;
+  onSetClient: (client: UseClientReturnType) => void;
+  onSetConnect: (connect: () => void) => void;
+  onSetWalletClient: (walletClient: GetWalletClientData<any, any>) => void;
+  onAddresses?: (addresses: readonly [Address, ...Address[]] | readonly Address[]) => void;
+}
+
+export function Siwe({
+  onSetOpenAbout,
+  onSetOpenOnboarding,
+  onSetOpenProfile,
+  onSetOpenSIWE,
+  onSetOpenSwitchNetworks,
+  onSetSignOut,
+  onSetClient,
+  onSetWalletClient,
+  onSetConnect,
+  onAddresses,
+}: SiweProps) {
+  const { addresses } = useAccount();
+  const { data: walletClient } = useWalletClient();
+  const client = useClient();
+  const { openAbout, openOnboarding, openProfile, openSIWE, openSwitchNetworks, signOut, connect } =
+    useSiweKeycloak();
+  useEffect(() => onSetOpenAbout(openAbout), [onSetOpenAbout, openAbout]);
+  useEffect(() => onSetOpenOnboarding(openOnboarding), [onSetOpenOnboarding, openOnboarding]);
+  useEffect(() => onSetOpenProfile(openProfile), [onSetOpenProfile, openProfile]);
+  useEffect(() => onSetOpenSIWE(openSIWE), [onSetOpenSIWE, openSIWE]);
+  useEffect(
+    () => onSetOpenSwitchNetworks(openSwitchNetworks),
+    [onSetOpenSwitchNetworks, openSwitchNetworks],
+  );
+  useEffect(() => onSetSignOut(signOut), [onSetSignOut, signOut]);
+  useEffect(() => {
+    if (walletClient) onSetWalletClient(walletClient);
+  }, [onSetWalletClient, walletClient]);
+  useEffect(() => {
+    if (client) onSetClient(client);
+  }, [onSetClient, client]);
+  useEffect(() => {
+    onSetConnect(connect);
+  }, [onSetConnect, connect]);
+  useEffect(() => onAddresses?.(addresses || []), [onAddresses, addresses?.length]);
+  return null;
+}

package/src/types.ts

@@ -0,0 +1,6 @@
+export interface KeycloakConfig {
+  baseUrl: string;
+  clientId: string;
+  realm: string;
+  scope: string | string[];
+}

package/src/util.spec.ts

@@ -0,0 +1,72 @@
+import { describe, expect, it, vi, beforeEach, afterEach } from "vitest";
+import { getNonce, createMessage } from "./util";
+
+describe("getNonce", () => {
+  beforeEach(() => {
+    vi.stubGlobal(
+      "fetch",
+      vi.fn().mockResolvedValue({
+        ok: true,
+        text: () => Promise.resolve("abc123nonce"),
+      }),
+    );
+  });
+
+  afterEach(() => {
+    vi.restoreAllMocks();
+  });
+
+  it("fetches nonce from the keycloak SIWE URL", async () => {
+    const nonce = await getNonce("https://auth.example.com/siwe");
+    expect(fetch).toHaveBeenCalledWith("https://auth.example.com/siwe/nonce", {
+      credentials: "include",
+    });
+    expect(nonce).toBe("abc123nonce");
+  });
+
+  it("throws when response is not ok", async () => {
+    vi.stubGlobal(
+      "fetch",
+      vi.fn().mockResolvedValue({
+        ok: false,
+        text: () => Promise.resolve(""),
+      }),
+    );
+    await expect(getNonce("https://auth.example.com/siwe")).rejects.toThrow("failed to get nonce");
+  });
+
+  it("throws when response body is empty", async () => {
+    vi.stubGlobal(
+      "fetch",
+      vi.fn().mockResolvedValue({
+        ok: true,
+        text: () => Promise.resolve(""),
+      }),
+    );
+    await expect(getNonce("https://auth.example.com/siwe")).rejects.toThrow("failed to get nonce");
+  });
+});
+
+describe("createMessage", () => {
+  it("throws when window is undefined (non-browser)", async () => {
+    const origWindow = globalThis.window;
+    // @ts-expect-error simulating SSR
+    delete globalThis.window;
+    try {
+      await expect(
+        createMessage("nonce123", "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045", 1),
+      ).rejects.toThrow("createMessage requires browser context");
+    } finally {
+      globalThis.window = origWindow;
+    }
+  });
+
+  it("creates a SIWE message using browser location", async () => {
+    const addr = "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045" as `0x${string}`;
+    const message = await createMessage("nonce123", addr, 1);
+    expect(message).toContain("Sign in With Ethereum.");
+    expect(message).toContain("nonce123");
+    expect(message).toContain(addr);
+    expect(message).toContain("Chain ID: 1");
+  });
+});

package/src/util.ts

@@ -0,0 +1,28 @@
+import { SiweMessage } from "siwe";
+import type { Address } from "viem";
+
+export async function getNonce(keycloakSiweUrl: string) {
+  const res = await fetch(`${keycloakSiweUrl}/nonce`, {
+    credentials: "include",
+  });
+  if (res.ok) {
+    const data = await res.text();
+    if (data?.length) return data;
+  }
+  throw new Error("failed to get nonce");
+}
+
+export async function createMessage(nonce: string, address: Address, chainId: number) {
+  if (typeof window === "undefined") {
+    throw new Error("createMessage requires browser context");
+  }
+  return new SiweMessage({
+    version: "1",
+    domain: window.location.host,
+    uri: window.location.origin,
+    address,
+    chainId,
+    nonce,
+    statement: "Sign in With Ethereum.",
+  }).prepareMessage();
+}