ETHAuth -- self-signed authorization proofs
npm install @0xsequence/ethauth``
____ ____ ____ ____ ____ ____ ____
||e |||t |||h |||a |||u |||t |||h ||
||__|||__|||__|||__|||__|||__|||__||
|/__\|/__\|/__\|/__\|/__\|/__\|/__\|
pnpm add @0xsequence/ethauth (or yarn add ... or npm install ...)
proof = eth.
.
$3
The account address in hex encoding, ie. '0x9e63b5BF4b31A7F8d5D8b4f54CD361344Eb744C5'.
Note, you should not take the account address in the ethauth proof at face value -- you must parse the Proof
and validate it with the library methods provided. The address is included when used to verify
smart wallet based accounts (aka contract-based accounts).
$3
a base64 encoded JSON object of
typescript
interface Claims {
app: string
exp: number
iat?: number
n?: number
typ?: string
ogn?: string
}
`Fields:
*
(required) - App identifier requesting the issuance of the ethauth proof
* exp (required) - Expired at unix timestamp of when the ethauth proof is valid until
* iat (optonal) - Issued at unix timestamp of when the ethauth proof has been signed/issued
* n (optional) - Nonce value which can be used as a challenge number for added security
* typ (optional) - Type of authorization for this ethauth proof
* ogn (optional) - Domain origin requesting the issuance of the ethauth proof
$3
Signature value of the claims message payload. The signature is computed by the EIP712
eth_signTypedData call of the claims object. The signature may be recoverable with ECRecover to
determine the EOA address, or you may have a different encoding such as one used with EIP-1271,
to validate the contract-based account signature.
Example ETHAuth encoding / decoding
$3
ethauth-proof =
eth.0x89d9f8f31817badb5d718cd6fb483b71dbd2dfed.eyJhcHAiOiJFV1RUZXN0IiwiaWF0IjoxNTk1NTMwODQwLCJleHAiOjE1OTU1MzExNDB9.0x233ab9164a677a41acc8d52c9e1d1a621acebf9bc8d956c8474618b589acebe10cc350deb4b02bf6951cec8bd23507170f204ca326a5a264b8f6f67fa2619c251cdecodes & verifies to:
* account address:
* claims:
* signature:
$3
ethauth-proof =
decodes & verifies to:
* account address:
* message:
* signature: MIT