@prosopo/client-example-server 0.1.17

package/src/controllers/auth.ts

@@ -0,0 +1,134 @@
+// Copyright 2021-2023 Prosopo (UK) Ltd.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+import { ApiParams } from '@prosopo/types'
+import { Connection } from 'mongoose'
+import { ProcaptchaResponse } from '@prosopo/types'
+import { ProsopoServer } from '@prosopo/server'
+import { UserInterface } from '../models/user'
+import { blake2b } from '@noble/hashes/blake2b'
+import { randomAsHex } from '@polkadot/util-crypto'
+import { u8aToHex } from '@polkadot/util'
+import { z } from 'zod'
+import jwt from 'jsonwebtoken'
+
+const SubscribeBodySpec = ProcaptchaResponse.merge(
+    z.object({
+        email: z.string().email(),
+        password: z.string(),
+    })
+)
+
+function hashPassword(password: string): string {
+    return u8aToHex(blake2b(password))
+}
+
+const signup = async (mongoose: Connection, prosopoServer: ProsopoServer, req, res, next) => {
+    try {
+        const User = mongoose.model<UserInterface>('User')
+        // checks if email exists
+        const dbUser = await User.findOne({
+            email: req.body.email,
+        })
+        const payload = SubscribeBodySpec.parse(req.body)
+        await prosopoServer.isReady()
+        if (dbUser) {
+            return res.status(409).json({ message: 'email already exists' })
+        }
+
+        if (await prosopoServer.isVerified(payload[ApiParams.procaptchaResponse])) {
+            // salt
+            const salt = randomAsHex(32)
+            // !!!DUMMY CODE!!! - Do not use in production. Use bcrypt or similar for password hashing.
+            const passwordHash = hashPassword(`${req.body.password}${salt}`)
+
+            if (passwordHash) {
+                return User.create({
+                    email: req.body.email,
+                    name: req.body.name,
+                    password: passwordHash,
+                    salt: salt,
+                })
+                    .then(() => {
+                        res.status(200).json({ message: 'user created' })
+                    })
+                    .catch((err) => {
+                        console.log(err)
+                        res.status(502).json({ message: 'error while creating the user' })
+                    })
+            }
+        } else {
+            res.status(401).json({ message: 'user has not completed a captcha' })
+        }
+    } catch (err) {
+        console.error('error', err)
+        res.status(500).json({ message: err.message || 'internal server error' })
+    }
+}
+
+const login = async (mongoose: Connection, prosopoServer: ProsopoServer, req, res) => {
+    const User = mongoose.model<UserInterface>('User')
+    await prosopoServer.isReady()
+    // checks if email exists
+    await User.findOne({
+        email: req.body.email,
+    })
+        .then(async (dbUser) => {
+            if (!dbUser) {
+                return res.status(404).json({ message: 'user not found' })
+            } else {
+                const payload = SubscribeBodySpec.parse(req.body)
+
+                if (await prosopoServer.isVerified(payload[ApiParams.procaptchaResponse])) {
+                    // password hash
+                    // !!!DUMMY CODE!!! - Do not use in production. Use bcrypt or similar for password hashing.
+                    const passwordHash = hashPassword(`${req.body.password}${dbUser.salt}`)
+                    if (passwordHash !== dbUser.password) {
+                        // password doesnt match
+                        res.status(401).json({ message: 'invalid credentials' })
+                    } else {
+                        // password match
+                        const token = jwt.sign({ email: req.body.email }, 'secret', { expiresIn: '1h' })
+                        res.status(200).json({ message: 'user logged in', token: token })
+                    }
+                }
+            }
+        })
+        .catch((err) => {
+            console.error('error', err)
+            res.status(500).json({ message: err.message || 'internal server error' })
+        })
+}
+
+const isAuth = (req, res) => {
+    const authHeader = req.get('Authorization')
+    if (!authHeader) {
+        return res.status(401).json({ message: 'not authenticated' })
+    }
+
+    const token = authHeader.split(' ')[1]
+    let decodedToken
+    try {
+        decodedToken = jwt.verify(token, 'secret')
+    } catch (err) {
+        return res.status(500).json({ message: err.message || 'could not decode the token' })
+    }
+
+    if (!decodedToken) {
+        res.status(401).json({ message: 'unauthorized' })
+    } else {
+        res.status(200).json({ message: 'here is your resource' })
+    }
+}
+
+export { signup, login, isAuth }

package/src/models/user.ts

@@ -0,0 +1,41 @@
+// Copyright 2021-2023 Prosopo (UK) Ltd.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+import mongoose, { Schema } from 'mongoose'
+
+export interface UserInterface {
+    id: number
+    email: string
+    name: string
+    password: string
+    salt: string
+}
+
+const UserSchema = new Schema<UserInterface>({
+    email: {
+        type: mongoose.SchemaTypes.String,
+        required: true,
+    },
+    name: {
+        type: mongoose.SchemaTypes.String,
+    },
+    password: {
+        type: mongoose.SchemaTypes.String,
+        required: true,
+    },
+    id: {
+        type: mongoose.SchemaTypes.Number,
+    },
+})
+
+export default UserSchema

package/src/prosopo.config.ts

@@ -0,0 +1,60 @@
+// Copyright 2021-2022 Prosopo (UK) Ltd.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+// import {ProsopoConfig} from './types';
+
+import { EnvironmentTypesSchema, ProsopoServerConfig } from '@prosopo/types'
+import { LogLevelSchema } from '@prosopo/common'
+
+export default () =>
+    ({
+        logLevel: process.env.LOG_LEVEL || LogLevelSchema.enum.Debug,
+        defaultEnvironment: process.env.DEFAULT_ENVIRONMENT || EnvironmentTypesSchema.enum.development, // enviromental variables
+        web2: process.env.REACT_APP_WEB2 || true,
+        serverUrl:
+            process.env.REACT_APP_SERVER_URL && process.env.REACT_APP_SERVER_PORT
+                ? `${process.env.REACT_APP_SERVER_URL}:${process.env.REACT_APP_SERVER_PORT}`
+                : 'http://localhost:9228',
+        solutionThreshold: process.env.REACT_APP_SOLUTION_THRESHOLD || 0.5,
+        dappName: process.env.REACT_APP_DAPP_NAME || 'client-example-server',
+        account: {
+            password: '',
+            address: process.env.REACT_APP_SERVER_ACCOUNT_ADDRESS || '',
+        },
+        networks: {
+            development: {
+                endpoint: process.env.REACT_APP_SUBSTRATE_NODE_URL || 'ws://localhost:9944',
+                contract: {
+                    address: process.env.REACT_APP_PROSOPO_CONTRACT_ADDRESS,
+                    name: 'prosopo',
+                },
+                dappAccount: {
+                    address: process.env.REACT_APP_DAPP_SITE_KEY,
+                    name: 'dapp',
+                },
+                accounts: ['//Alice', '//Bob', '//Charlie', '//Dave', '//Eve', '//Ferdie'],
+            },
+            shiden: {
+                endpoint: 'wss://shiden.public.blastapi.io',
+                contract: {
+                    address: process.env.REACT_APP_PROSOPO_CONTRACT_ADDRESS,
+                    name: 'prosopo',
+                },
+                dappAccount: {
+                    address: process.env.REACT_APP_DAPP_SITE_KEY,
+                    name: 'dapp',
+                },
+                accounts: [],
+            },
+        },
+    } as ProsopoServerConfig)

package/src/routes/routes.ts

@@ -0,0 +1,39 @@
+// Copyright 2021-2023 Prosopo (UK) Ltd.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+import { Connection } from 'mongoose'
+import { ProsopoServer } from '@prosopo/server'
+import { isAuth, login, signup } from '../controllers/auth'
+import express from 'express'
+
+const router = express.Router()
+
+function getRoutes(mongoose: Connection, prosopoServer: ProsopoServer): express.Router {
+    router.post('/login', login.bind(null, mongoose, prosopoServer))
+
+    router.post('/signup', signup.bind(null, mongoose, prosopoServer))
+
+    router.get('/private', isAuth)
+
+    router.get('/public', (req, res) => {
+        res.status(200).json({ message: 'here is your public resource' })
+    })
+
+    // will match any other path
+    router.use('/', (req, res) => {
+        res.status(404).json({ error: 'page not found' })
+    })
+    return router
+}
+
+export default getRoutes

package/src/utils/connection.ts

@@ -0,0 +1,26 @@
+// Copyright 2021-2023 Prosopo (UK) Ltd.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+import { AutoIncrementID, AutoIncrementIDOptions } from '@typegoose/auto-increment'
+import UserSchema from '../models/user'
+import mongoose, { Connection } from 'mongoose'
+
+function connectionFactory(uri: string): Connection {
+    const conn = mongoose.createConnection(uri)
+    if (!conn.models.user) {
+        UserSchema.plugin(AutoIncrementID, { field: 'id' } as AutoIncrementIDOptions)
+        conn.model('User', UserSchema)
+    }
+    return conn
+}
+export default connectionFactory

package/src/utils/database.ts

@@ -0,0 +1,20 @@
+// Copyright 2021-2023 Prosopo (UK) Ltd.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+import { MongoMemoryServer } from 'mongodb-memory-server'
+export async function memoryServerSetup(): Promise<string> {
+    const mongod = MongoMemoryServer.create()
+    const memoryServer = await mongod
+    return memoryServer.getUri()
+}
+export default memoryServerSetup

package/tsconfig.json

@@ -0,0 +1,50 @@
+{
+  "extends": "../../tsconfig.build.json",
+  "compilerOptions": {
+    "target": "esnext",
+    "rootDir": "./src",
+    "outDir": "./dist",
+    "lib": [
+      "dom",
+      "dom.iterable",
+      "esnext"
+    ],
+    "allowJs": true,
+    "skipLibCheck": true,
+    "esModuleInterop": true,
+    "allowSyntheticDefaultImports": true,
+    // "strict": true,
+    "forceConsistentCasingInFileNames": true,
+    "noFallthroughCasesInSwitch": true,
+    "moduleResolution": "node",
+    "resolveJsonModule": true,
+    // "isolatedModules": true,
+    // "noEmit": true,
+    "jsx": "react-jsx"
+  },
+  "include": [
+    "./src/**/*.ts",
+    "./src/**/*.js"
+  ],
+  "exclude": ["node_modules", "dist"],
+  "references": [
+    {
+      "path": "../../packages/api"
+    },
+    {
+      "path": "../../packages/cli"
+    },
+    {
+      "path": "../../packages/contract"
+    },
+    {
+      "path": "../../packages/procaptcha"
+    },
+    {
+      "path": "../../packages/server"
+    },
+    {
+      "path": "../../packages/types"
+    }
+  ]
+}