wip implement v2 sign message auth

Author: prsvic

packages/blockchain-sdk-solana/src/auth/sign-message-v2/solana-sign-message-v2-authentication-facade-factory.ts

@@ -0,0 +1,37 @@
+import {
+  AuthenticationFacade,
+  AuthenticationFacadeFactory,
+  Authenticator,
+  Ed25519TokenBodyParser,
+  TokenParser,
+} from '@dialectlabs/sdk';
+
+import { SolanaSignMessageV2TokenValidator } from './solana-sign-message-v2-token-validator';
+import { SolanaSignMessageV2TokenGenerator } from './solana-sign-message-v2-token-generator';
+import type { SolanaEd25519TokenSigner } from '../ed25519/solana-ed25519-token-signer';
+
+export class SolanaSignMessageV2AuthenticationFacadeFactory extends AuthenticationFacadeFactory {
+  constructor(
+    private readonly tokenSigner: SolanaEd25519TokenSigner,
+    private readonly baseUrl: string,
+  ) {
+    super();
+  }
+
+  static createAuthenticator(baseUrl: string): Authenticator {
+    return new Authenticator(
+      new TokenParser(new Ed25519TokenBodyParser()),
+      new SolanaSignMessageV2TokenValidator(baseUrl),
+    );
+  }
+
+  get(): AuthenticationFacade {
+    return new AuthenticationFacade(
+      this.tokenSigner,
+      new SolanaSignMessageV2TokenGenerator(this.tokenSigner, this.baseUrl),
+      SolanaSignMessageV2AuthenticationFacadeFactory.createAuthenticator(
+        this.baseUrl,
+      ),
+    );
+  }
+}

packages/blockchain-sdk-solana/src/auth/sign-message-v2/solana-sign-message-v2-token-generator.ts

@@ -0,0 +1,51 @@
+import {
+  jsonParseFromBase64,
+  type Token,
+  type TokenSigner,
+} from '@dialectlabs/sdk';
+import { TokenGenerator } from '@dialectlabs/sdk';
+import axios from 'axios';
+import { Buffer } from 'buffer/';
+import { bytesFromBase64 } from '@dialectlabs/sdk/src';
+
+export class SolanaSignMessageV2TokenGenerator extends TokenGenerator {
+  constructor(signer: TokenSigner, private readonly v2BaseUrl: string) {
+    super(signer);
+  }
+
+  override async generate(ttlSeconds: number): Promise<Token> {
+    const prepareResponse = await axios.post<{ message: string }>(
+      `${this.v2BaseUrl}/v2/auth/solana/prepare`,
+      { walletAddress: this.signer.subject },
+    );
+    const messageToSign = prepareResponse.data.message;
+
+    const { signature } = await this.signer.sign(
+      new TextEncoder().encode(messageToSign),
+    );
+
+    const tokenResponse = await axios.post<{ token: string }>(
+      `${this.v2BaseUrl}/v2/auth/solana/verify`,
+      {
+        message: messageToSign,
+        signature: Buffer.from(signature).toString('base64'),
+      },
+    );
+
+    const tokenStr = tokenResponse.data.token;
+    const [base64Header, base64Body, base64Signature] = tokenStr.split('.');
+    if (!base64Header || !base64Body || !base64Signature) {
+      throw new Error('Invalid token format from backend');
+    }
+
+    return {
+      rawValue: tokenStr,
+      header: jsonParseFromBase64(base64Header),
+      body: jsonParseFromBase64(base64Body),
+      signature: bytesFromBase64(base64Signature),
+      base64Header,
+      base64Body,
+      base64Signature,
+    };
+  }
+}

packages/blockchain-sdk-solana/src/auth/sign-message-v2/solana-sign-message-v2-token-validator.ts

@@ -0,0 +1,16 @@
+import type { Token, TokenHeader } from '@dialectlabs/sdk';
+import { TokenValidator } from '@dialectlabs/sdk';
+
+export class SolanaSignMessageV2TokenValidator extends TokenValidator {
+  constructor(private readonly baseUrl: string) {
+    super();
+  }
+
+  override canValidate(tokenHeader: TokenHeader): boolean {
+    return tokenHeader.typ === 'JWT' && tokenHeader.alg === 'HS256';
+  }
+
+  override isSignatureValid(token: Token): boolean {
+    return true;
+  }
+}

packages/blockchain-sdk-solana/src/sdk/sdk.ts

@@ -5,21 +5,24 @@ import type {
   Config,
   Environment,
 } from '@dialectlabs/sdk';
-import { EncryptionKeysProvider } from '@dialectlabs/sdk';
+import { EncryptionKeysProvider, IllegalArgumentError } from '@dialectlabs/sdk';
 import type { DialectSolanaWalletAdapter } from '../wallet-adapter/dialect-solana-wallet-adapter.interface';
 import { DialectSolanaWalletAdapterEncryptionKeysProvider } from '../encryption/encryption-keys-provider';
 import { SolanaEd25519AuthenticationFacadeFactory } from '../auth/ed25519/solana-ed25519-authentication-facade-factory';
 import { DialectWalletAdapterSolanaEd25519TokenSigner } from '../auth/ed25519/solana-ed25519-token-signer';
 import { SolanaTxAuthenticationFacadeFactory } from '../auth/tx/solana-tx-authentication-facade-factory';
 import { DialectWalletAdapterSolanaTxTokenSigner } from '../auth/tx/solana-tx-token-signer';
+import { SolanaSignMessageV2AuthenticationFacadeFactory } from '../auth/sign-message-v2/solana-sign-message-v2-authentication-facade-factory';
 import { DIALECT_BLOCKCHAIN_SDK_TYPE_SOLANA } from './constants';
 
 export interface SolanaConfigProps {
   wallet: DialectSolanaWalletAdapter;
+  authVersion?: 1 | 2;
 }
 
 export interface SolanaConfig extends SolanaConfigProps {
   wallet: DialectSolanaWalletAdapterWrapper;
+  authVersion: 1 | 2;
 }
 
 export type SolanaNetwork = 'mainnet-beta' | 'devnet' | 'localnet';
@@ -63,6 +66,7 @@ Solana settings:
       walletAdapterEncryptionKeysProvider,
       config.encryptionKeysStore,
     );
+
     const authenticationFacadeFactory = wallet.canSignMessage()
       ? new SolanaEd25519AuthenticationFacadeFactory(
           new DialectWalletAdapterSolanaEd25519TokenSigner(wallet),
@@ -83,12 +87,37 @@ Solana settings:
     };
   }
 
+  createAuthenticationFacade(solanaConfig: SolanaConfig, config: Config) {
+    if (solanaConfig.authVersion === 1) {
+      if (solanaConfig.wallet.canSignMessage()) {
+        return new SolanaEd25519AuthenticationFacadeFactory(
+          new DialectWalletAdapterSolanaEd25519TokenSigner(solanaConfig.wallet),
+        ).get();
+      }
+      if (solanaConfig.wallet.canSignTransaction()) {
+        return new SolanaTxAuthenticationFacadeFactory(
+          new DialectWalletAdapterSolanaTxTokenSigner(solanaConfig.wallet),
+        ).get();
+      }
+    }
+    if (solanaConfig.authVersion === 2) {
+      if (solanaConfig.wallet.canSignMessage()) {
+        return new SolanaSignMessageV2AuthenticationFacadeFactory(
+          new DialectWalletAdapterSolanaEd25519TokenSigner(solanaConfig.wallet),
+          config.dialectCloud.v2Url,
+        ).get();
+      }
+    }
+    throw new IllegalArgumentError('Unsupported auth version');
+  }
+
   private initializeSolanaConfig(): SolanaConfig {
     const wallet = new DialectSolanaWalletAdapterWrapper(
       this.solanaConfigProps.wallet,
     );
     return {
       wallet,
+      authVersion: this.solanaConfigProps.authVersion ?? 2,
     };
   }
 }