Releases: aerilabs/custom-rainbowkit-backend
Bump dependencies
What's Changed
- Bump express from 4.16.4 to 5.2.1 by @dependabot[bot] in #7
- Bump http-errors from 1.6.3 to 2.0.1 by @dependabot[bot] in #6
- Bump debug from 2.6.9 to 4.4.3 by @dependabot[bot] in #5
- Bump globals from 16.5.0 to 17.1.0 by @dependabot[bot] in #4
- Bump the minor-and-patch group with 5 updates by @dependabot[bot] in #3
New Contributors
- @dependabot[bot] made their first contribution in #7
Full Changelog: v1.0.0...v1.0.1
v1.0.0
Custom RainbowKit-SIWE Backend — v1.0.0
Overview
Initial stable release of the backend service responsible for Sign-In With Ethereum (SIWE) authentication for RainbowKit-based frontends.
This backend provides nonce generation, SIWE message verification, and session handling via HTTP cookies. It is designed to act as the authentication authority for frontend dApps that require wallet-based login without relying on third-party auth providers.
Features
SIWE Authentication
- Fully SIWE-compliant authentication flow
- Secure nonce generation endpoint
- Signature verification using the
siwelibrary - Ethereum address validation during login
Session Management
- Cookie-based session persistence
- Authenticated session lifecycle management
- Explicit logout endpoint to invalidate sessions
API Endpoints
-
GET /siwe/nonce
Generates and returns a unique nonce used for SIWE message creation -
POST /siwe/verify
Verifies signed SIWE messages and establishes an authenticated session -
GET /siwe/logout
Clears the active authentication session
Server Architecture
- Express.js-based HTTP server
- Clear route and controller separation
- Environment-driven configuration via
.env - ESLint and Prettier for consistent code quality
Dependency Relationship
This backend is intended to be consumed by:
Custom-RainbowKit-Frontend v1.0.0
The frontend authentication flow will not function without this service running and reachable.
Breaking Changes
None. This is the first stable release.
Known Limitations
- Implemented in JavaScript (TypeScript migration pending)
- No automated test suite
- No role-based authorization or permission system
- Minimal structured error handling
Planned Improvements
- Migrate codebase to TypeScript
- Add request validation and consistent API error responses
- Introduce automated tests and CI pipelines
- Support extended authentication features (roles, scopes, refresh logic)
Version
v1.0.0