@dapperlabs/dappauth/index.js

A util to prove actionable control ('ownership') over a public Ethereum address using eth_sign

const Web3 = require('web3');
const ethUtil = require('ethereumjs-util');
const ERC1271 = require('./ABIs/ERC1271.js');
const utils = require('./utils.js');

// bytes4(keccak256("isValidSignature(bytes32,bytes)")
const ERC1271_MAGIC_VALUE = '0x1626ba7e';

module.exports = class DappAuth {
  constructor(web3Provider) {
    this.web3 = new Web3(web3Provider);
  }

  async isAuthorizedSigner(challenge, signature, address) {
    const eoaChallengeHash = this._hashEOAPersonalMessage(challenge);
    let isAuthorizedDirectKey;
    let errEOA;

    // try direct-keyed wallet
    try {
      // Get the address of whoever signed this message
      const { v, r, s } = ethUtil.fromRpcSig(signature);
      const recoveredKey = ethUtil.ecrecover(eoaChallengeHash, v, r, s);
      const recoveredAddress = ethUtil.publicToAddress(recoveredKey);

      if (
        address.toLowerCase() ===
        ethUtil.bufferToHex(recoveredAddress).toLowerCase()
      ) {
        isAuthorizedDirectKey = true;
      }
    } catch (err) {
      errEOA = err;
      // if either direct-keyed auth flow threw an error, or it did not conclude to be authorized, proceed to try smart-contract wallet.
    }
    try {
      if (isAuthorizedDirectKey === true) return isAuthorizedDirectKey;
      // try smart-contract wallet
      const erc1271CoreContract = new this.web3.eth.Contract(ERC1271, address);

      const magicValue = await erc1271CoreContract.methods
        .isValidSignature(this._hashSCMessage(challenge), signature)
        .call();

      return magicValue === ERC1271_MAGIC_VALUE;
    } catch (err) {
      throw utils.mergeErrors(errEOA, err);
    }
  }

  _hashEOAPersonalMessage(challenge) {
    return ethUtil.hashPersonalMessage(this._decodeChallenge(challenge));
  }

  // This is a hash just over the challenge. The smart contract takes this result and hashes on top to an erc191 hash.
  _hashSCMessage(challenge) {
    return ethUtil.keccak(this._decodeChallenge(challenge));
  }

  // See https://github.com/MetaMask/eth-sig-util/issues/60
  _decodeChallenge(challenge) {
    return utils.isHexString(challenge)
      ? Buffer.from(utils.removeHexPrefix(challenge), 'hex')
      : Buffer.from(challenge);
  }
};