+
diff --git a/web/src/auth/Web3Auth.js b/web/src/auth/Web3Auth.js
new file mode 100644
index 00000000..5c59cd8c
--- /dev/null
+++ b/web/src/auth/Web3Auth.js
@@ -0,0 +1,149 @@
+// // Copyright 2023 The Casdoor Authors. All Rights Reserved.
+// //
+// // Licensed under the Apache License, Version 2.0 (the "License");
+// // you may not use this file except in compliance with the License.
+// // You may obtain a copy of the License at
+// //
+// // http://www.apache.org/licenses/LICENSE-2.0
+// //
+// // Unless required by applicable law or agreed to in writing, software
+// // distributed under the License is distributed on an "AS IS" BASIS,
+// // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// // See the License for the specific language governing permissions and
+// // limitations under the License.
+
+import {goToLink, showMessage} from "../Setting";
+import i18next from "i18next";
+import {v4 as uuidv4} from "uuid";
+import {SignTypedDataVersion, recoverTypedSignature} from "@metamask/eth-sig-util";
+import {getAuthUrl} from "./Provider";
+import {Buffer} from "buffer";
+// import {toChecksumAddress} from "ethereumjs-util";
+global.Buffer = Buffer;
+
+export function generateNonce() {
+ const nonce = uuidv4();
+ return nonce;
+}
+
+export function getWeb3AuthTokenKey(address) {
+ return `Web3AuthToken_${address}`;
+}
+
+export function setWeb3AuthToken(token) {
+ const key = getWeb3AuthTokenKey(token.address);
+ localStorage.setItem(key, JSON.stringify(token));
+}
+
+export function getWeb3AuthToken(address) {
+ const key = getWeb3AuthTokenKey(address);
+ return JSON.parse(localStorage.getItem(key));
+}
+
+export function delWeb3AuthToken(address) {
+ const key = getWeb3AuthTokenKey(address);
+ localStorage.removeItem(key);
+}
+
+export function clearWeb3AuthToken() {
+ const keys = Object.keys(localStorage);
+ keys.forEach(key => {
+ if (key.startsWith("Web3AuthToken_")) {
+ localStorage.removeItem(key);
+ }
+ });
+}
+
+export function detectMetaMaskPlugin() {
+ // check if ethereum extension MetaMask is installed
+ return window.ethereum && window.ethereum.isMetaMask;
+}
+
+export function requestEthereumAccount() {
+ const method = "eth_requestAccounts";
+ const selectedAccount = window.ethereum.request({method})
+ .then((accounts) => {
+ return accounts[0];
+ });
+ return selectedAccount;
+}
+
+export function signEthereumTypedData(from, nonce) {
+ // https://docs.metamask.io/wallet/how-to/sign-data/
+ const date = new Date();
+ const typedData = JSON.stringify({
+ domain: {
+ chainId: window.ethereum.chainId,
+ name: "Casdoor",
+ version: "1",
+ },
+ message: {
+ prompt: "In order to authenticate to this website, sign this request and your public address will be sent to the server in a verifiable way.",
+ nonce: nonce,
+ createAt: `${date.toLocaleString()}`,
+ },
+ primaryType: "AuthRequest",
+ types: {
+ EIP712Domain: [
+ {name: "name", type: "string"},
+ {name: "version", type: "string"},
+ {name: "chainId", type: "uint256"},
+ ],
+ AuthRequest: [
+ {name: "prompt", type: "string"},
+ {name: "nonce", type: "string"},
+ {name: "createAt", type: "string"},
+ ],
+ },
+ });
+
+ const method = "eth_signTypedData_v4";
+ const params = [from, typedData];
+
+ return window.ethereum.request({method, params})
+ .then((sign) => {
+ return {
+ address: from,
+ createAt: Math.floor(date.getTime() / 1000),
+ typedData: typedData,
+ signature: sign,
+ };
+ });
+}
+
+export function checkEthereumSignedTypedData(token) {
+ if (token === undefined || token === null) {
+ return false;
+ }
+ if (token.address && token.typedData && token.signature) {
+ const recoveredAddr = recoverTypedSignature({
+ data: JSON.parse(token.typedData),
+ signature: token.signature,
+ version: SignTypedDataVersion.V4,
+ });
+ // const recoveredAddr = token.address;
+ return recoveredAddr === token.address;
+ // return toChecksumAddress(recoveredAddr) === toChecksumAddress(token.address);
+ }
+ return false;
+}
+
+export async function authViaMetaMask(application, provider, method) {
+ if (!detectMetaMaskPlugin()) {
+ showMessage("error", `${i18next.t("login:MetaMask plugin not detected")}`);
+ return;
+ }
+ try {
+ const account = await requestEthereumAccount();
+ let token = getWeb3AuthToken(account);
+ if (!checkEthereumSignedTypedData(token)) {
+ const nonce = generateNonce();
+ token = await signEthereumTypedData(account, nonce);
+ setWeb3AuthToken(token);
+ }
+ const redirectUri = `${getAuthUrl(application, provider, method)}&web3AuthTokenKey=${getWeb3AuthTokenKey(account)}`;
+ goToLink(redirectUri);
+ } catch (err) {
+ showMessage("error", `${i18next.t("login:Failed to obtain MetaMask authorization")}: ${err.message}`);
+ }
+}
diff --git a/web/src/common/OAuthWidget.js b/web/src/common/OAuthWidget.js
index 5c93ea56..d61fc97f 100644
--- a/web/src/common/OAuthWidget.js
+++ b/web/src/common/OAuthWidget.js
@@ -19,6 +19,9 @@ import * as UserBackend from "../backend/UserBackend";
import * as Setting from "../Setting";
import * as Provider from "../auth/Provider";
import * as AuthBackend from "../auth/AuthBackend";
+import {goToWeb3Url} from "../auth/ProviderButton";
+import {delWeb3AuthToken} from "../auth/Web3Auth";
+import AccountAvatar from "../account/AccountAvatar";
class OAuthWidget extends React.Component {
constructor(props) {
@@ -88,12 +91,15 @@ class OAuthWidget extends React.Component {
return user.properties[key];
}
- unlinkUser(providerType) {
+ unlinkUser(providerType, linkedValue) {
const body = {
providerType: providerType,
// should add the unlink user's info, cause the user may not be logged in, but a admin want to unlink the user.
user: this.props.user,
};
+ if (providerType === "MetaMask") {
+ delWeb3AuthToken(linkedValue);
+ }
AuthBackend.unlink(body)
.then((res) => {
if (res.status === "ok") {
@@ -151,7 +157,7 @@ class OAuthWidget extends React.Component {
+