SIWE routes

Author: crypdoughdoteth

src/routes/siwe.rs

@@ -0,0 +1,100 @@
+use crate::{database::types::RELATIONAL_DATABASE, eth_rpc::types::ETHEREUM_ENDPOINT};
+use alloy::{primitives::Address, providers::ProviderBuilder};
+use axum::{
+    extract::{Extension, Json},
+    http::StatusCode,
+    response::IntoResponse,
+};
+use jwt_simple::claims::JWTClaims;
+use serde::{Deserialize, Serialize};
+use siwe::{Message, VerificationError, VerificationOpts, generate_nonce};
+use sqlx::prelude::FromRow;
+use thiserror::Error;
+use time::OffsetDateTime;
+
+use super::types::Claims;
+
+#[derive(Debug, Serialize, Deserialize)]
+pub struct Siwe {
+    message: String,
+    signature: Vec<u8>,
+}
+
+#[derive(FromRow)]
+pub struct Nonce {
+    nonce: Option<String>,
+}
+
+pub async fn siwe_add_wallet(
+    Extension(jwt): Extension<JWTClaims<Claims>>,
+    Json(payload): Json<Siwe>,
+) -> Result<impl IntoResponse, SiweError> {
+    let msg: Message = payload.message.parse().unwrap();
+
+    let nonce = sqlx::query_as!(
+        Nonce,
+        "SELECT nonce FROM Customers where email = $1",
+        jwt.custom.email,
+    )
+    .fetch_one(RELATIONAL_DATABASE.get().unwrap())
+    .await?
+    .nonce
+    .ok_or_else(|| SiweError::IncorrectNonce)?;
+
+    let rpc = ProviderBuilder::new().on_http(ETHEREUM_ENDPOINT[0].as_str().parse().unwrap());
+
+    let verification_opts = VerificationOpts {
+        domain: Some("Developer DAO Cloud".parse().unwrap()),
+        nonce: Some(nonce),
+        timestamp: Some(OffsetDateTime::now_utc()),
+        rpc_provider: Some(rpc),
+    };
+
+    msg.verify(&payload.signature, &verification_opts).await?;
+
+    let address = Address::from(msg.address).to_string();
+
+    sqlx::query!(
+        "UPDATE Customers SET wallet = $1 where email = $2",
+        address,
+        jwt.custom.email
+    )
+    .execute(RELATIONAL_DATABASE.get().unwrap())
+    .await?;
+
+    Ok((StatusCode::OK, address).into_response())
+}
+
+pub async fn get_siwe_nonce(
+    Extension(jwt): Extension<JWTClaims<Claims>>,
+) -> Result<impl IntoResponse, SiweError> {
+    let nonce = generate_nonce();
+    sqlx::query!(
+        "UPDATE Customers SET nonce = $1 where email = $2",
+        nonce,
+        jwt.custom.email
+    )
+    .execute(RELATIONAL_DATABASE.get().unwrap())
+    .await?;
+    Ok((StatusCode::OK, nonce).into_response())
+}
+
+#[derive(Debug, Error)]
+pub enum SiweError {
+    #[error(transparent)]
+    VerificationFailed(#[from] VerificationError),
+    #[error("Incorrect siwe nonce for user")]
+    IncorrectNonce,
+    #[error("An error ocurred while querying the database")]
+    QueryError(#[from] sqlx::Error),
+}
+
+impl IntoResponse for SiweError {
+    fn into_response(self) -> axum::response::Response {
+        (
+            axum::http::StatusCode::INTERNAL_SERVER_ERROR,
+            self.to_string(),
+        )
+            .into_response()
+    }
+}