Skip to content

Releases: aerilabs/custom-rainbowkit-backend

Bump dependencies

26 Jan 10:10

Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v1.0.0...v1.0.1

v1.0.0

10 Jan 18:26
814cf82

Choose a tag to compare

Custom RainbowKit-SIWE Backend — v1.0.0

Overview

Initial stable release of the backend service responsible for Sign-In With Ethereum (SIWE) authentication for RainbowKit-based frontends.

This backend provides nonce generation, SIWE message verification, and session handling via HTTP cookies. It is designed to act as the authentication authority for frontend dApps that require wallet-based login without relying on third-party auth providers.


Features

SIWE Authentication

  • Fully SIWE-compliant authentication flow
  • Secure nonce generation endpoint
  • Signature verification using the siwe library
  • Ethereum address validation during login

Session Management

  • Cookie-based session persistence
  • Authenticated session lifecycle management
  • Explicit logout endpoint to invalidate sessions

API Endpoints

  • GET /siwe/nonce
    Generates and returns a unique nonce used for SIWE message creation

  • POST /siwe/verify
    Verifies signed SIWE messages and establishes an authenticated session

  • GET /siwe/logout
    Clears the active authentication session

Server Architecture

  • Express.js-based HTTP server
  • Clear route and controller separation
  • Environment-driven configuration via .env
  • ESLint and Prettier for consistent code quality

Dependency Relationship

This backend is intended to be consumed by:

  • Custom-RainbowKit-Frontend v1.0.0

The frontend authentication flow will not function without this service running and reachable.


Breaking Changes

None. This is the first stable release.


Known Limitations

  • Implemented in JavaScript (TypeScript migration pending)
  • No automated test suite
  • No role-based authorization or permission system
  • Minimal structured error handling

Planned Improvements

  • Migrate codebase to TypeScript
  • Add request validation and consistent API error responses
  • Introduce automated tests and CI pipelines
  • Support extended authentication features (roles, scopes, refresh logic)

Version

v1.0.0