nathanwoodburn/hns-login
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: Update message to include session uuid
All checks were successful
Build Docker / Build Docker (push) Successful in 37s
Details

Browse Source
This commit is contained in:
Nathan Woodburn 2024-06-21 11:27:07 +10:00
parent 1e09ca64e6
commit 9e1dfcf091
Signed by: nathanwoodburn
GPG Key ID: 203B000478AD0EF1
2 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
website/routes.py
View File

@ -201,6 +201,15 @@ def hnsid():
address = request.json.get("address") address = request.json.get("address")
signature = request.json.get("signature") signature = request.json.get("signature")
message = request.json.get("message") message = request.json.get("message")
# Make sure message is in the correct format
if not message.startswith("I am signing this message to log in to HNS Login as "):
print("Invalid message format")
return jsonify({"success": False})
if not message.endswith(session["uuid"]):
print("Invalid message format")
return jsonify({"success": False})
# Verify the signature # Verify the signature
msg = encode_defunct(text=message) msg = encode_defunct(text=message)
signer = Account.recover_message(msg, signature=signature).lower() signer = Account.recover_message(msg, signature=signature).lower()

2
website/templates/home.html
View File

@ -234,7 +234,7 @@
// Send the address to the server // Send the address to the server
console.log('Sending address to server', address); console.log('Sending address to server', address);
// Sign a message // Sign a message
const message = 'I am signing my one-time nonce: ' + Math.floor(Math.random() * 1000000) + ' to log in to HNS Login as ' + address; const message = 'I am signing this message to log in to HNS Login as ' + address + ': {{uuid}}';
const signature = await ethereum.request({ const signature = await ethereum.request({
method: 'personal_sign', method: 'personal_sign',
params: [message, address], params: [message, address],