diff --git a/apps/passport/app/routes/token.tsx b/apps/passport/app/routes/token.tsx
index 728d636922..59345c0c78 100644
--- a/apps/passport/app/routes/token.tsx
+++ b/apps/passport/app/routes/token.tsx
@@ -1,10 +1,10 @@
import { ActionFunction } from '@remix-run/cloudflare'
import { json } from '@remix-run/cloudflare'
-import { GrantType } from '@proofzero/types/access'
+import { GrantType } from '@proofzero/types/authorization'
import { getRollupReqFunctionErrorWrapper } from '@proofzero/utils/errors'
-import createAccessClient from '@proofzero/platform-clients/access'
+import { getCoreClient } from '../platform.server'
import { generateTraceContextHeaders } from '@proofzero/platform-middleware/trace'
export const action: ActionFunction = getRollupReqFunctionErrorWrapper(
@@ -19,20 +19,17 @@ export const action: ActionFunction = getRollupReqFunctionErrorWrapper(
(formData.get('grant_type') as GrantType.AuthorizationCode) ||
GrantType.RefreshToken
- const accessClient = createAccessClient(
- context.env.Access,
- generateTraceContextHeaders(context.traceSpan)
- )
+ const coreClient = getCoreClient({ context })
const tokens = refreshToken
- ? await accessClient.exchangeToken.mutate({
+ ? await coreClient.authorization.exchangeToken.mutate({
grantType: GrantType.RefreshToken,
refreshToken,
clientId,
clientSecret,
issuer,
})
- : await accessClient.exchangeToken.mutate({
+ : await coreClient.authorization.exchangeToken.mutate({
grantType: GrantType.AuthorizationCode,
code,
clientId,
diff --git a/apps/passport/app/routes/userinfo.tsx b/apps/passport/app/routes/userinfo.tsx
index 647e56dfbb..096fa503e8 100644
--- a/apps/passport/app/routes/userinfo.tsx
+++ b/apps/passport/app/routes/userinfo.tsx
@@ -1,20 +1,23 @@
import type { LoaderFunction } from '@remix-run/cloudflare'
-import createAccessClient from '@proofzero/platform-clients/access'
import { getAuthzTokenFromReq } from '@proofzero/utils'
-import { generateTraceContextHeaders } from '@proofzero/platform-middleware/trace'
import { getRollupReqFunctionErrorWrapper } from '@proofzero/utils/errors'
import { UnauthorizedError } from '@proofzero/errors'
+import { getCoreClient } from '../platform.server'
+
export const loader: LoaderFunction = getRollupReqFunctionErrorWrapper(
async ({ request, context }) => {
const access_token = getAuthzTokenFromReq(request)
if (!access_token)
throw new UnauthorizedError({ message: 'No access token provided' })
- const accessClient = createAccessClient(context.env.Access, {
- ...generateTraceContextHeaders(context.traceSpan),
+ const { origin: issuer } = new URL(request.url)
+
+ const coreClient = getCoreClient({ context })
+ const result = await coreClient.authorization.getUserInfo.query({
+ access_token,
+ issuer,
})
- const result = await accessClient.getUserInfo.query({ access_token })
return result
}
)
diff --git a/apps/passport/app/session.server.ts b/apps/passport/app/session.server.ts
index a649d93fc2..4d729065d2 100644
--- a/apps/passport/app/session.server.ts
+++ b/apps/passport/app/session.server.ts
@@ -16,24 +16,25 @@ import {
import { encryptSession, decryptSession } from '@proofzero/utils/session'
-import { getAccountClient } from './platform.server'
+import { getCoreClient } from './platform.server'
import type { TraceSpan } from '@proofzero/platform-middleware/trace'
import { InternalServerError, UnauthorizedError } from '@proofzero/errors'
-import { AccountURNSpace } from '@proofzero/urns/account'
-import type { AccountURN } from '@proofzero/urns/account'
+import { IdentityURNSpace } from '@proofzero/urns/identity'
+import type { IdentityURN } from '@proofzero/urns/identity'
import { FLASH_MESSAGE, FLASH_MESSAGE_KEY } from './utils/flashMessage.server'
+import { getCookieDomain } from './utils/cookie'
-export const InvalidSessionAccountError = new UnauthorizedError({
- message: 'Session account is not valid',
+export const InvalidSessionIdentityError = new UnauthorizedError({
+ message: 'Session identity is not valid',
})
// FLASH SESSION
-const getFlashSessionStorage = (env: Env) => {
+const getFlashSessionStorage = (request: Request, env: Env) => {
return createCookieSessionStorage({
cookie: {
- domain: env.COOKIE_DOMAIN,
+ domain: getCookieDomain(request, env),
name: '_rollup_flash',
path: '/',
sameSite: 'lax',
@@ -46,18 +47,23 @@ const getFlashSessionStorage = (env: Env) => {
}
export function getFlashSession(request: Request, env: Env) {
- const storage = getFlashSessionStorage(env)
+ const storage = getFlashSessionStorage(request, env)
return storage.getSession(request.headers.get('Cookie'))
}
-export function commitFlashSession(env: Env, session: Session) {
- const storage = getFlashSessionStorage(env)
+export function commitFlashSession(
+ request: Request,
+ env: Env,
+ session: Session
+) {
+ const storage = getFlashSessionStorage(request, env)
return storage.commitSession(session)
}
// USER PARAMS
const getUserSessionStorage = (
+ request: Request,
env: Env,
clientId?: string,
MAX_AGE = 7776000 /*60 * 60 * 24 * 90*/
@@ -68,7 +74,7 @@ const getUserSessionStorage = (
}
return createCookie(cookieName, {
- domain: env.COOKIE_DOMAIN,
+ domain: getCookieDomain(request, env),
path: '/',
sameSite: 'lax',
secure: process.env.NODE_ENV == 'production',
@@ -78,12 +84,13 @@ const getUserSessionStorage = (
}
export async function createUserSession(
+ request: Request,
jwt: string,
redirectTo: string,
env: Env,
clientId?: string
) {
- const cookie = getUserSessionStorage(env, clientId)
+ const cookie = getUserSessionStorage(request, env, clientId)
return redirect(redirectTo, {
headers: {
'Set-Cookie': await cookie.serialize(
@@ -98,7 +105,7 @@ export async function getUserSession(
env: Env,
clientId?: string
) {
- const cookie = getUserSessionStorage(env, clientId)
+ const cookie = getUserSessionStorage(request, env, clientId)
const data = await cookie.parse(request.headers.get('Cookie'))
if (!data) return ''
@@ -122,13 +129,13 @@ export async function destroyUserSession(
) {
const headers = new Headers()
- const cookie = await getUserSessionStorage(env, clientId)
+ const cookie = await getUserSessionStorage(request, env, clientId)
headers.append(
'Set-Cookie',
await cookie.serialize('', { expires: new Date(0) })
)
- const flashStorage = getFlashSessionStorage(env)
+ const flashStorage = getFlashSessionStorage(request, env)
const flashSession = await flashStorage.getSession()
flashSession.flash(FLASH_MESSAGE_KEY, flashMessage)
headers.append('Set-Cookie', await flashStorage.commitSession(flashSession))
@@ -137,6 +144,7 @@ export async function destroyUserSession(
}
const getAuthzCookieParamsSessionStorage = (
+ request: Request,
env: Env,
clientId: string = 'last',
// https://developer.chrome.com/blog/cookie-max-age-expires/
@@ -146,7 +154,7 @@ const getAuthzCookieParamsSessionStorage = (
) => {
return createCookieSessionStorage({
cookie: {
- domain: env.COOKIE_DOMAIN,
+ domain: getCookieDomain(request, env),
name: `_rollup_authz_params_${clientId}`,
path: '/',
sameSite: 'lax',
@@ -162,12 +170,14 @@ const getAuthzCookieParamsSessionStorage = (
* and redirects to the authentication route
*/
export async function createAuthzParamsCookieAndAuthenticate(
+ request: Request,
authzQueryParams: AuthzParams,
env: Env,
qp: URLSearchParams = new URLSearchParams()
) {
let redirectURL = `/authenticate/${authzQueryParams.clientId}${
- ['connect', 'reconnect'].includes(authzQueryParams.rollup_action || '')
+ ['connect', 'reconnect'].includes(authzQueryParams.rollup_action || '') ||
+ authzQueryParams.rollup_action?.startsWith('group')
? ''
: `/account`
}`
@@ -185,6 +195,7 @@ export async function createAuthzParamsCookieAndAuthenticate(
throw redirect(redirectURL, {
headers: await createAuthorizationParamsCookieHeaders(
+ request,
authzQueryParams,
env
),
@@ -192,6 +203,7 @@ export async function createAuthzParamsCookieAndAuthenticate(
}
export async function createAuthorizationParamsCookieHeaders(
+ request: Request,
authzParams: AuthzParams,
env: Env
) {
@@ -204,22 +216,28 @@ export async function createAuthorizationParamsCookieHeaders(
const headers = new Headers()
headers.append(
'Set-Cookie',
- await setAuthzCookieParamsSession(authzParams, env, authzParams.clientId)
+ await setAuthzCookieParamsSession(
+ request,
+ authzParams,
+ env,
+ authzParams.clientId
+ )
)
headers.append(
'Set-Cookie',
- await setAuthzCookieParamsSession(authzParams, env)
+ await setAuthzCookieParamsSession(request, authzParams, env)
)
return headers
}
export async function setAuthzCookieParamsSession(
+ request: Request,
authzParams: AuthzParams,
env: Env,
clientId?: string
) {
- const storage = getAuthzCookieParamsSessionStorage(env, clientId)
+ const storage = getAuthzCookieParamsSessionStorage(request, env, clientId)
const session = await storage.getSession()
//Convert string array scope to space-delimited scope before setting cookie value
@@ -235,7 +253,7 @@ export async function getAuthzCookieParamsSession(
env: Env,
clientId?: string
) {
- const storage = getAuthzCookieParamsSessionStorage(env, clientId)
+ const storage = getAuthzCookieParamsSessionStorage(request, env, clientId)
return storage.getSession(request.headers.get('Cookie'))
}
@@ -245,7 +263,7 @@ export async function destroyAuthzCookieParamsSession(
clientId?: string
) {
const gps = await getAuthzCookieParamsSession(request, env, clientId)
- const storage = getAuthzCookieParamsSessionStorage(env, clientId)
+ const storage = getAuthzCookieParamsSessionStorage(request, env, clientId)
return storage.destroySession(gps)
}
@@ -286,7 +304,7 @@ export function getDefaultAuthzParams(request: Request): AuthzParams {
export type ValidatedSessionContext = {
jwt: string
- accountUrn: AccountURN
+ identityURN: IdentityURN
}
export async function getValidatedSessionContext(
@@ -303,26 +321,40 @@ export async function getValidatedSessionContext(
try {
const payload = checkToken(jwt)
- const accountClient = getAccountClient(jwt, env, traceSpan)
+ const context = { env: { Core: env.Core }, traceSpan: traceSpan }
+ const coreClient = getCoreClient({ context, jwt })
if (
- !AccountURNSpace.is(payload.sub!) ||
- !(await accountClient.isValid.query())
+ !IdentityURNSpace.is(payload.sub!) ||
+ !(await coreClient.identity.isValid.query())
)
- throw InvalidSessionAccountError
+ throw InvalidSessionIdentityError
return {
jwt,
- accountUrn: payload.sub as AccountURN,
+ identityURN: payload.sub as IdentityURN,
}
} catch (error) {
- // TODO: Revise this logic
- const redirectTo = `/authenticate/${authzParams?.clientId}`
+ const url = new URL(request.url)
+ const { href } = url
+
+ const qp = new URLSearchParams()
+ qp.append('client_id', 'passport')
+ qp.append('redirect_uri', `${href}`)
+ qp.append('scope', '')
+ qp.append('state', 'skip')
+
+ const redirectTo = `/authorize?${qp.toString()}`
+
if (error === InvalidTokenError)
if (authzParams.clientId)
- throw await createAuthzParamsCookieAndAuthenticate(authzParams, env)
+ throw await createAuthzParamsCookieAndAuthenticate(
+ request,
+ authzParams,
+ env
+ )
else throw redirect(redirectTo)
else if (
error === ExpiredTokenError ||
- error === InvalidSessionAccountError
+ error === InvalidSessionIdentityError
) {
console.error(
'Session/token error encountered. Invalidating session and redirecting to login page'
diff --git a/apps/passport/app/utils/actions.ts b/apps/passport/app/utils/actions.ts
new file mode 100644
index 0000000000..cd296fe95d
--- /dev/null
+++ b/apps/passport/app/utils/actions.ts
@@ -0,0 +1,19 @@
+export const getConnectRollupActions = (): string[] => {
+ return ['connect', 'create', 'reconnect', 'groupconnect', 'groupemailconnect']
+}
+
+export const getNonConnectRollupActions = (): string[] => {
+ return ['group', 'preview']
+}
+
+export const getSupportedRollupActions = (): string[] => {
+ return [...getConnectRollupActions(), ...getNonConnectRollupActions()]
+}
+
+export const isSupportedRollupAction = (rollupAction: string): boolean => {
+ return getSupportedRollupActions().includes(rollupAction.split('_')[0])
+}
+
+export const isConnectRollupAction = (rollupAction: string): boolean => {
+ return getConnectRollupActions().includes(rollupAction.split('_')[0])
+}
diff --git a/apps/passport/app/utils/authenticate.server.ts b/apps/passport/app/utils/authenticate.server.ts
index b4c1af5dae..2b592f1e7c 100644
--- a/apps/passport/app/utils/authenticate.server.ts
+++ b/apps/passport/app/utils/authenticate.server.ts
@@ -1,18 +1,14 @@
-import { AddressURNSpace } from '@proofzero/urns/address'
-import type { AddressURN } from '@proofzero/urns/address'
+import { AccountURNSpace } from '@proofzero/urns/account'
import type { AccountURN } from '@proofzero/urns/account'
+import type { IdentityURN } from '@proofzero/urns/identity'
-import { JsonError } from '@proofzero/utils/errors'
-import { GrantType, ResponseType } from '@proofzero/types/access'
+import { GrantType, ResponseType } from '@proofzero/types/authorization'
-import {
- getAccessClient,
- getAccountClient,
- getAddressClient,
-} from '~/platform.server'
+import { getCoreClient } from '~/platform.server'
import {
createUserSession,
getAuthzCookieParamsSession,
+ getUserSession,
parseJwt,
} from '~/session.server'
import { generateGradient } from './gradient.server'
@@ -24,9 +20,9 @@ import {
createAuthenticatorSessionStorage,
} from '~/auth.server'
-export const authenticateAddress = async (
- address: AddressURN,
+export const authenticateAccount = async (
account: AccountURN,
+ identity: IdentityURN,
appData: AuthzParams,
request: Request,
env: Env,
@@ -40,27 +36,40 @@ export const authenticateAddress = async (
})
}
+ const jwt = await getUserSession(request, env, appData?.clientId)
if (
appData.rollup_action &&
- ['connect', 'reconnect'].includes(appData?.rollup_action)
+ (['connect', 'reconnect'].includes(appData?.rollup_action) ||
+ appData?.rollup_action.startsWith('groupconnect'))
) {
- const redirectURL = getAuthzRedirectURL(
- appData,
- existing && appData.rollup_action === 'connect'
- ? 'ALREADY_CONNECTED'
- : undefined
- )
+ let result = undefined
+
+ if (
+ existing &&
+ (appData.rollup_action === 'connect' ||
+ appData.rollup_action.startsWith('groupconnect'))
+ ) {
+ const loggedInIdentity = parseJwt(jwt).sub
+ if (identity !== loggedInIdentity) {
+ result = 'ACCOUNT_CONNECT_ERROR'
+ } else {
+ result = 'ALREADY_CONNECTED_ERROR'
+ }
+ }
+
+ const redirectURL = getAuthzRedirectURL(appData, result)
return redirect(redirectURL)
}
- const accessClient = getAccessClient(env, traceSpan)
- const clientId = AddressURNSpace.decode(address)
+ const context = { env: { Core: env.Core }, traceSpan }
+ const coreClient = getCoreClient({ context })
+ const clientId = AccountURNSpace.decode(account)
const redirectUri = env.PASSPORT_REDIRECT_URL
const scope = ['admin']
const state = ''
- const { code } = await accessClient.authorize.mutate({
- account,
+ const { code } = await coreClient.authorization.authorize.mutate({
+ identity,
responseType: ResponseType.Code,
clientId,
redirectUri,
@@ -69,16 +78,17 @@ export const authenticateAddress = async (
})
const grantType = GrantType.AuthenticationCode
- const { accessToken } = await accessClient.exchangeToken.mutate({
+ const { accessToken } = await coreClient.authorization.exchangeToken.mutate({
grantType,
code,
clientId,
issuer: new URL(request.url).origin,
})
- await provisionProfile(accessToken, env, traceSpan, address)
+ await provisionProfile(accessToken, env, traceSpan, account)
return createUserSession(
+ request,
accessToken,
getAuthzRedirectURL(appData),
env,
@@ -114,20 +124,22 @@ const provisionProfile = async (
jwt: string,
env: Env,
traceSpan: TraceSpan,
- address: AddressURN
+ accountURN: AccountURN
) => {
- const accountClient = getAccountClient(jwt, env, traceSpan)
+ const context = { env: { Core: env.Core }, traceSpan }
+ const coreClient = getCoreClient({ context, accountURN, jwt })
const parsedJWT = parseJwt(jwt)
- const account = parsedJWT.sub as AccountURN
+ const identity = parsedJWT.sub as IdentityURN
- const profile = await accountClient.getProfile.query({
- account,
+ const profile = await coreClient.identity.getProfile.query({
+ identity,
})
if (!profile) {
- console.log(`Profile doesn't exist for account ${account}. Creating one...`)
- const addressClient = getAddressClient(address, env, traceSpan)
- const newProfile = await addressClient.getAddressProfile
+ console.log(
+ `Profile doesn't exist for identity ${identity}. Creating one...`
+ )
+ const newProfile = await coreClient.account.getAccountProfile
.query()
.then(async (res) => {
const gradient = await generateGradient(res.address, env, traceSpan)
@@ -139,40 +151,41 @@ const provisionProfile = async (
}
})
// set the default profile
- await accountClient.setProfile.mutate({
- name: account,
- profile: { ...newProfile, primaryAddressURN: address },
+ await coreClient.identity.setProfile.mutate({
+ name: identity,
+ profile: { ...newProfile, primaryAccountURN: accountURN },
})
} else {
- console.log(`Profile for account ${account} found. Continuing...`)
+ console.log(`Profile for identity ${identity} found. Continuing...`)
}
}
-export const setNewPrimaryAddress = async (
+export const setNewPrimaryAccount = async (
jwt: string,
env: Env,
traceSpan: TraceSpan,
- newPrimaryAddress: AddressURN,
+ newPrimaryAccount: AccountURN,
pfp: string,
displayName: string
) => {
- const accountClient = getAccountClient(jwt, env, traceSpan)
+ const context = { env: { Core: env.Core }, traceSpan }
+ const coreClient = getCoreClient({ context, jwt })
const parsedJWT = parseJwt(jwt)
- const account = parsedJWT.sub as AccountURN
+ const identity = parsedJWT.sub as IdentityURN
- const profile = await accountClient.getProfile.query({
- account,
+ const profile = await coreClient.identity.getProfile.query({
+ identity,
})
- // Update the profile with the new primary address if it exists
+ // Update the profile with the new primary account if it exists
if (profile) {
- await accountClient.setProfile.mutate({
- name: account,
+ await coreClient.identity.setProfile.mutate({
+ name: identity,
profile: {
displayName: displayName,
pfp: { ...profile.pfp, image: pfp },
- primaryAddressURN: newPrimaryAddress,
+ primaryAccountURN: newPrimaryAccount,
},
})
}
@@ -189,7 +202,10 @@ export const checkOAuthError = async (request: Request, env: Env) => {
console.error({ error, uri, description })
const authzParams = await getAuthzCookieParamsSession(request, env)
- const authenticatorStorage = await createAuthenticatorSessionStorage(env)
+ const authenticatorStorage = await createAuthenticatorSessionStorage(
+ request,
+ env
+ )
const session = await authenticatorStorage.getSession(
request.headers.get('Cookie')
)
diff --git a/apps/passport/app/utils/authorize.server.ts b/apps/passport/app/utils/authorize.server.ts
index f2885961b8..e739dc09a6 100644
--- a/apps/passport/app/utils/authorize.server.ts
+++ b/apps/passport/app/utils/authorize.server.ts
@@ -1,54 +1,51 @@
-import { getAccountClient, getAddressClient } from '~/platform.server'
+import { getCoreClient } from '~/platform.server'
import {
- getNormalisedConnectedEmails,
- getNormalisedSmartContractWallets,
+ getEmailDropdownItems,
+ getAccountDropdownItems,
} from '@proofzero/utils/getNormalisedConnectedAccounts'
import { BadRequestError, UnauthorizedError } from '@proofzero/errors'
import { createAuthorizationParamsCookieHeaders } from '~/session.server'
-import type { GetAddressProfileResult } from '@proofzero/platform.address/src/jsonrpc/methods/getAddressProfile'
-
import {
SCOPE_CONNECTED_ACCOUNTS,
SCOPE_EMAIL,
SCOPE_SMART_CONTRACT_WALLETS,
} from '@proofzero/security/scopes'
-import type { AccountURN } from '@proofzero/urns/account'
+import type { IdentityURN } from '@proofzero/urns/identity'
import type { PersonaData } from '@proofzero/types/application'
-import type {
- EmailSelectListItem,
- SCWalletSelectListItem,
-} from '@proofzero/utils/getNormalisedConnectedAccounts'
import { redirect } from '@remix-run/cloudflare'
-import { CryptoAddressType } from '@proofzero/types/address'
+import { CryptoAccountType, NodeType } from '@proofzero/types/account'
+import type { DropdownSelectListItem } from '@proofzero/design-system/src/atoms/dropdown/DropdownSelectList'
+import type { AccountURN } from '@proofzero/urns/account'
export type DataForScopes = {
- connectedEmails?: EmailSelectListItem[]
- personaData?: PersonaData
+ connectedEmails: DropdownSelectListItem[]
+ personaData: PersonaData
requestedScope: string[]
- connectedAccounts?: GetAddressProfileResult[]
- connectedSmartContractWallets?: SCWalletSelectListItem[]
+ connectedAccounts: DropdownSelectListItem[]
+ connectedSmartContractWallets: DropdownSelectListItem[]
}
// Deterministically sort scopes so that they are always in the same order
-// when returned to the client. Email is always last.
+// when returned to the client.
// -----------------------------------------------------------------------------
-const orderOfScopes: Record
= {
- openid: 0,
- system_identifiers: 0,
- profile: 1,
- email: 2,
- connected_accounts: 3,
-}
+const orderOfScopes = [
+ 'email',
+ 'erc_4337',
+ 'connected_accounts',
+ 'openid',
+ 'system_identifiers',
+ 'profile',
+]
export const reorderScope = (scopes: string[]): string[] => {
return scopes.sort((a, b) => {
- const aIndex = orderOfScopes[a]
- const bIndex = orderOfScopes[b]
- if (aIndex === undefined) return 1
- if (bIndex === undefined) return -1
+ const aIndex = orderOfScopes.indexOf(a)
+ const bIndex = orderOfScopes.indexOf(b)
+ if (aIndex === -1) return 1
+ if (bIndex === -1) return -1
return aIndex - bIndex
})
}
@@ -56,54 +53,59 @@ export const reorderScope = (scopes: string[]): string[] => {
export const getDataForScopes = async (
requestedScope: string[],
- accountURN: AccountURN,
+ identityURN: IdentityURN,
jwt?: string,
env?: any,
traceSpan?: any
): Promise => {
- if (!accountURN)
- throw new UnauthorizedError({ message: 'Account URN is required' })
+ if (!identityURN)
+ throw new UnauthorizedError({ message: 'Identity URN is required' })
- let connectedSmartContractWallets: SCWalletSelectListItem[] = []
- let connectedEmails: EmailSelectListItem[] = []
- let connectedAddresses: GetAddressProfileResult[] = []
+ let connectedSmartContractWallets: Array = []
+ let connectedEmails: Array = []
+ let connectedAddresses: Array = []
- const accountClient = getAccountClient(jwt || '', env, traceSpan)
+ const context = { env: { Core: env.Core }, traceSpan }
+ const coreClient = getCoreClient({ context, jwt })
- const connectedAccounts = await accountClient.getAddresses.query({
- account: accountURN,
+ const connectedAccounts = await coreClient.identity.getAccounts.query({
+ URN: identityURN,
})
if (connectedAccounts && connectedAccounts.length) {
if (requestedScope.includes(Symbol.keyFor(SCOPE_EMAIL)!)) {
- connectedEmails = getNormalisedConnectedEmails(connectedAccounts)
+ connectedEmails = getEmailDropdownItems(connectedAccounts)
}
if (requestedScope.includes(Symbol.keyFor(SCOPE_CONNECTED_ACCOUNTS)!)) {
- connectedAddresses = await Promise.all(
- connectedAccounts
- .filter((ca) => {
- return ca.rc.addr_type !== CryptoAddressType.Wallet
- })
- .map((ca) => {
- const addressClient = getAddressClient(ca.baseUrn, env, traceSpan)
- return addressClient.getAddressProfile.query()
- })
- )
+ const accounts = connectedAccounts
+ .filter((ca) => {
+ return (
+ (ca.rc.node_type === NodeType.OAuth ||
+ ca.rc.node_type === NodeType.Email ||
+ ca.rc.node_type === NodeType.Crypto ||
+ ca.rc.node_type === NodeType.WebAuthN) &&
+ ca.rc.addr_type !== CryptoAccountType.Wallet
+ )
+ })
+ .map((ca) => {
+ return ca.baseUrn as AccountURN
+ })
+
+ const accountProfiles =
+ await coreClient.account.getAccountProfileBatch.query(accounts)
+ connectedAddresses = getAccountDropdownItems(accountProfiles)
}
if (requestedScope.includes(Symbol.keyFor(SCOPE_SMART_CONTRACT_WALLETS)!)) {
- const scWalletAddresses = await Promise.all(
- connectedAccounts
- .filter((ca) => {
- return ca.rc.addr_type === CryptoAddressType.Wallet
- })
- .map((ca) => {
- const addressClient = getAddressClient(ca.baseUrn, env, traceSpan)
- return addressClient.getAddressProfile.query()
- })
- )
-
- connectedSmartContractWallets =
- getNormalisedSmartContractWallets(scWalletAddresses)
+ const accounts = connectedAccounts
+ .filter((ca) => {
+ return ca.rc.addr_type === CryptoAccountType.Wallet
+ })
+ .map((ca) => {
+ return ca.baseUrn as AccountURN
+ })
+ const accountProfiles =
+ await coreClient.account.getAccountProfileBatch.query(accounts)
+ connectedSmartContractWallets = getAccountDropdownItems(accountProfiles)
}
}
@@ -163,6 +165,31 @@ export async function createAuthzParamCookieAndCreate(
throw new BadRequestError({ message: 'Invalid create_type' })
}
throw redirect(redirectURL, {
- headers: await createAuthorizationParamsCookieHeaders(authzParams, env),
+ headers: await createAuthorizationParamsCookieHeaders(
+ request,
+ authzParams,
+ env
+ ),
})
}
+
+export async function createNewSCWallet({
+ nickname,
+ primaryAccountURN,
+ env,
+ traceSpan,
+}: {
+ nickname: string
+ primaryAccountURN: AccountURN
+ env: Env
+ traceSpan?: any
+}) {
+ const context = { env: { Core: env.Core }, traceSpan }
+ const coreClient = getCoreClient({ context, accountURN: primaryAccountURN })
+ const { accountURN } = await coreClient.account.initSmartContractWallet.query(
+ {
+ nickname,
+ }
+ )
+ return { accountURN }
+}
diff --git a/apps/passport/app/utils/connect-proxy.ts b/apps/passport/app/utils/connect-proxy.ts
new file mode 100644
index 0000000000..7966c3758d
--- /dev/null
+++ b/apps/passport/app/utils/connect-proxy.ts
@@ -0,0 +1,51 @@
+import { redirect } from '@remix-run/cloudflare'
+import type { AppLoadContext } from '@remix-run/cloudflare'
+
+import { getAuthnParams } from '~/auth.server'
+
+export const setCustomDomainOrigin = (
+ request: Request,
+ context: AppLoadContext,
+ authnParams: URLSearchParams
+) => {
+ const referer = request.headers.get('referer')
+ if (!referer) return
+
+ const { host, origin } = new URL(referer)
+ if (context.env.DEFAULT_HOSTS.includes(host)) return
+
+ authnParams.set('origin', origin)
+}
+
+export const redirectToDefaultHost = (
+ request: Request,
+ response: Response,
+ context: AppLoadContext
+) => {
+ const url = new URL(request.url)
+ if (context.env.DEFAULT_HOSTS.includes(url.host)) throw response
+
+ url.host = context.env.DEFAULT_HOSTS[0]
+ const { searchParams } = new URL(response.headers.get('location') as string)
+ searchParams.forEach((value, key) => url.searchParams.set(key, value))
+ throw redirect(url.toString(), {
+ headers: {
+ 'set-cookie': response.headers.get('set-cookie') as string,
+ },
+ })
+}
+
+export const redirectToCustomDomainHost = async (
+ request: Request,
+ context: AppLoadContext
+) => {
+ const authnParams = await getAuthnParams(request, context.env)
+ const origin = authnParams.get('origin')
+ if (!origin) return
+
+ const url = new URL(request.url)
+ if (origin != url.origin) {
+ const { pathname, searchParams } = url
+ throw redirect(`${origin}${pathname}?${searchParams.toString()}`)
+ }
+}
diff --git a/apps/passport/app/utils/cookie.ts b/apps/passport/app/utils/cookie.ts
new file mode 100644
index 0000000000..41835ff6b8
--- /dev/null
+++ b/apps/passport/app/utils/cookie.ts
@@ -0,0 +1,14 @@
+import type { Request as CfRequest } from '@cloudflare/workers-types'
+
+type CfHostMetadata = {
+ clientId: string
+}
+
+export const getCookieDomain = (request: Request, env: Env): string => {
+ const host = request.headers.get('host') as string
+ if (env.DEFAULT_HOSTS.includes(host)) return env.COOKIE_DOMAIN
+ const cfRequest = request as unknown as CfRequest
+ const clientId = cfRequest.cf?.hostMetadata.clientId
+ if (clientId) return host
+ return env.COOKIE_DOMAIN
+}
diff --git a/apps/passport/app/utils/emailOTP.ts b/apps/passport/app/utils/emailOTP.ts
new file mode 100644
index 0000000000..55ef6b77c0
--- /dev/null
+++ b/apps/passport/app/utils/emailOTP.ts
@@ -0,0 +1,20 @@
+import { getErrorCause } from '@proofzero/utils/errors'
+
+export const generateEmailOTP = async (
+ email: string
+): Promise<{ message: string; state: string; status: number } | undefined> => {
+ const reqUrl = `/connect/email/otp?email=${encodeURIComponent(email)}`
+
+ const res = await fetch(reqUrl)
+
+ const resObj = await res.json<{
+ message: string
+ state: string
+ }>()
+
+ if (!res.ok) {
+ throw getErrorCause(resObj)
+ }
+
+ return { message: resObj.message, state: resObj.state, status: res.status }
+}
diff --git a/apps/passport/app/utils/profile.ts b/apps/passport/app/utils/profile.ts
index ceef68eb8c..2eb26b6572 100644
--- a/apps/passport/app/utils/profile.ts
+++ b/apps/passport/app/utils/profile.ts
@@ -1,28 +1,31 @@
import {
- EmailAddressType,
- OAuthAddressType,
- CryptoAddressType,
-} from '@proofzero/types/address'
+ EmailAccountType,
+ OAuthAccountType,
+ CryptoAccountType,
+ WebauthnAccountType,
+} from '@proofzero/types/account'
export const getProfileTypeTitle = (type: string) => {
switch (type) {
- case CryptoAddressType.ETH:
+ case CryptoAccountType.ETH:
return 'Ethereum'
- case CryptoAddressType.Wallet:
+ case CryptoAccountType.Wallet:
return 'Smart Wallet'
- case EmailAddressType.Email:
+ case EmailAccountType.Email:
return 'Email'
- case OAuthAddressType.Apple:
+ case WebauthnAccountType.WebAuthN:
+ return 'Passkey'
+ case OAuthAccountType.Apple:
return 'Apple'
- case OAuthAddressType.Discord:
+ case OAuthAccountType.Discord:
return 'Discord'
- case OAuthAddressType.GitHub:
+ case OAuthAccountType.GitHub:
return 'GitHub'
- case OAuthAddressType.Google:
+ case OAuthAccountType.Google:
return 'Google'
- case OAuthAddressType.Microsoft:
+ case OAuthAccountType.Microsoft:
return 'Microsoft'
- case OAuthAddressType.Twitter:
+ case OAuthAccountType.Twitter:
return 'Twitter'
default:
return ''
diff --git a/apps/passport/app/web3/lazyAuth.tsx b/apps/passport/app/web3/lazyAuth.tsx
new file mode 100644
index 0000000000..fdd20666b0
--- /dev/null
+++ b/apps/passport/app/web3/lazyAuth.tsx
@@ -0,0 +1,43 @@
+import { getDefaultConfig, ConnectKitProvider } from 'connectkit'
+import { useHydrated } from 'remix-utils'
+import { createConfig, WagmiConfig } from 'wagmi'
+import {
+ mainnet,
+ polygon,
+ optimism,
+ filecoin,
+ arbitrum,
+} from '@wagmi/core/chains'
+
+export function LazyAuth({
+ autoConnect = false,
+ children,
+}: {
+ context?: any
+ autoConnect?: boolean
+ children: JSX.Element
+}) {
+ const hydrated = useHydrated()
+ if (!hydrated) return null
+
+ const config = createConfig(
+ getDefaultConfig({
+ appName: 'Rollup',
+ autoConnect,
+ alchemyId: window.ENV.APIKEY_ALCHEMY_PUBLIC,
+ walletConnectProjectId: window.ENV.WALLET_CONNECT_PROJECT_ID,
+ chains: [mainnet, polygon, optimism, filecoin, arbitrum],
+ })
+ )
+ return (
+
+
+ {children}
+
+
+ )
+}
diff --git a/apps/passport/bindings.d.ts b/apps/passport/bindings.d.ts
index 9259fc25ec..bd403058e3 100644
--- a/apps/passport/bindings.d.ts
+++ b/apps/passport/bindings.d.ts
@@ -1,25 +1,25 @@
-import { TraceSpan } from '@proofzero/platform-middleware/trace'
+import type { TraceSpan } from '@proofzero/platform-middleware/trace'
+import type { GetAppPublicPropsResult } from '@proofzero/platform.starbase/src/jsonrpc/methods/getAppPublicProps'
export const seviceBindings = true
declare global {
interface Env {
- Address: Fetcher
- Account: Fetcher
+ Core: Fetcher
Galaxy: Fetcher
- Access: Fetcher
- Starbase: Fetcher
Images: Fetcher
+ DEFAULT_HOSTS: string[]
+ COOKIE_DOMAIN: string
SECRET_SESSION_KEY: string
SECRET_SESSION_SALT: string
- COOKIE_DOMAIN: string
+ SECRET_WEBAUTHN_SIGNING_KEY: string
PROFILE_APP_URL: string
CONSOLE_APP_URL: string
PASSPORT_REDIRECT_URL: string
APIKEY_ALCHEMY_PUBLIC: string
- REMIX_DEV_SERVER_WS_PORT: number
WALLET_CONNECT_PROJECT_ID: string
+ REMIX_DEV_SERVER_WS_PORT: number
INTERNAL_GOOGLE_ANALYTICS_TAG: string
@@ -46,10 +46,16 @@ declare global {
INTERNAL_DISCORD_OAUTH_CLIENT_ID: string
SECRET_DISCORD_OAUTH_CLIENT_SECRET: string
INTERNAL_DISCORD_OAUTH_CALLBACK_URL: string
+
+ POSTHOG_API_KEY: string
+ POSTHOG_PROXY_HOST: string
+ //Needed to make Remix work with Cloudflare module workers
+ __STATIC_CONTENT: string
}
interface AuthzParams {
clientId: string
+ response_type: string
redirectUri: string
scope: string[]
state: string
@@ -67,5 +73,8 @@ declare module '@remix-run/cloudflare' {
authzQueryParams: AuthzParams
env: Env
traceSpan: TraceSpan
+ waitUntil: (promise: Promise) => void
+ // for custom domains only
+ appProps?: GetAppPublicPropsResult
}
}
diff --git a/apps/passport/package.json b/apps/passport/package.json
index e8c1c1f5ce..5984a90791 100644
--- a/apps/passport/package.json
+++ b/apps/passport/package.json
@@ -12,7 +12,7 @@
"dev:css": "npx tailwindcss -o ./app/styles/tailwind.css --watch",
"dev:sass": "sass --watch app/:app/",
"dev:remix": "remix watch",
- "dev:wrangler": "wrangler dev --local --persist",
+ "dev:wrangler": "wrangler dev",
"dev": "echo \"No dev for passport. Please use start.\"",
"start": "env-cmd --file .dev.env run-p 'dev:*'",
"storybook:css": "npx tailwindcss -o ./app/styles/tailwind.css --watch",
@@ -21,9 +21,10 @@
"build-storybook": "npx tailwindcss -o ./app/styles/tailwind.css && build-storybook"
},
"dependencies": {
+ "@ethersproject/keccak256": "5.7.0",
"@proofzero/design-system": "*",
"@proofzero/platform-clients": "workspace:*",
- "@proofzero/platform.access": "workspace:*",
+ "@proofzero/platform.account": "workspace:*",
"@proofzero/utils": "workspace:*",
"@remix-run/cloudflare": "1.14.0",
"@remix-run/cloudflare-workers": "1.14.0",
@@ -31,29 +32,32 @@
"@tailwindcss/forms": "0.5.3",
"connectkit": "1.4.0",
"csp-header": "5.1.0",
+ "fido2-lib": "3.4.1",
"flowbite": "1.6.5",
"flowbite-react": "0.4.3",
"graphql-request": "5.0.0",
"jose": "4.11.0",
+ "posthog-js": "1.71.0",
"react": "18.2.0",
"react-dom": "18.2.0",
- "react-icons": "4.8.0",
+ "react-helmet": "6.1.0",
+ "react-icons": "4.10.1",
"remix-auth": "3.4.0",
"remix-auth-discord": "1.2.1",
"remix-auth-github": "1.3.0",
"remix-auth-google": "1.2.0",
"remix-auth-microsoft": "2.0.0",
"remix-auth-oauth2": "1.5.0",
- "remix-auth-twitter": "1.0.0",
+ "remix-auth-twitter": "2.0.1",
"remix-utils": "6.3.0",
- "viem": "0.3.39",
- "wagmi": "1.0.9"
+ "viem": "1.0.0",
+ "wagmi": "1.1.1"
},
"devDependencies": {
"@babel/core": "^7.20.2",
"@cloudflare/workers-types": "4.20221111.1",
"@mdx-js/react": "^1.6.22",
- "@playwright/test": "1.32.3",
+ "@playwright/test": "1.35.1",
"@remix-run/dev": "1.14.0",
"@remix-run/eslint-config": "1.14.0",
"@remix-run/serve": "1.14.0",
@@ -93,17 +97,17 @@
"eslint-plugin-standard": "5.0.0",
"eslint-plugin-storybook": "0.6.7",
"npm-run-all": "4.1.5",
- "postcss": "8.4.19",
+ "postcss": "8.4.31",
"prettier": "2.7.1",
"prop-types": "15.8.1",
"sass": "1.54.7",
"sass-loader": "13.2.0",
"storybook-addon-sass-postcss": "0.1.3",
"style-loader": "3.3.1",
- "tailwindcss": "3.1.8",
+ "tailwindcss": "3.3.3",
"typescript": "5.0.4",
"webpack": "5.75.0",
- "wrangler": "2.14.0"
+ "wrangler": "3.2.0"
},
"engines": {
"node": ">=16.13"
diff --git a/apps/passport/remix.config.js b/apps/passport/remix.config.js
index 30e4a2b896..555b07db2c 100644
--- a/apps/passport/remix.config.js
+++ b/apps/passport/remix.config.js
@@ -1,9 +1,18 @@
/** @type {import('@remix-run/dev').AppConfig} */
module.exports = {
- serverBuildTarget: 'cloudflare-workers',
server: './server.ts',
devServerBroadcastDelay: 1000,
ignoredRouteFiles: ['**/.*'],
+ // Bundles everything _except_ `__STATIC_CONTENT_MANIFEST`. Be careful if editing.
+ serverDependenciesToBundle: [/^(?!(__STATIC_CONTENT_MANIFEST)$).*$/u],
+ // Optional, but highly recommended for fitting within the Worker bundle size
+ serverMinify: true,
+ serverModuleFormat: 'esm',
+ // YMMV with setting to `node`, most likely anything but simple code won’t work with the CF node compat layer
+ serverPlatform: 'neutral',
+ serverMainFields: ['browser', 'module', 'main'],
+ // Try the `workerd` condition first (this is new and slowly standardising), then `worker`, then `browser` (equivalent of `serverPlatform: browser` but without extra behaviour.
+ serverConditions: ['workerd', 'worker', 'browser'],
// Keycloak rewrites. Needed here for CSR, also done in Cloudflare for SSR.
routes: async (defineRoutes) => {
@@ -11,20 +20,20 @@ module.exports = {
route('/protocol/openid-connect/auth', 'routes/authorize.tsx', {
id: 'keycloakAuthIndex',
caseSensitive: true,
- index: true
+ index: true,
})
-
+
route('/protocol/openid-connect/token', 'routes/token.tsx', {
id: 'keycloakToken',
caseSensitive: true,
- index: true
+ index: true,
})
-
+
route('/protocol/openid-connect/userinfo', 'routes/userinfo.tsx', {
id: 'keycloakUserInfo',
caseSensitive: true,
- index: true
+ index: true,
})
})
- }
+ },
}
diff --git a/apps/passport/server.ts b/apps/passport/server.ts
index 4afde0ec8a..344caa73f4 100644
--- a/apps/passport/server.ts
+++ b/apps/passport/server.ts
@@ -1,16 +1,33 @@
-import {
- generateTraceSpan,
- TraceableFetchEvent,
-} from '@proofzero/platform-middleware/trace'
+import type { Request as CfRequest } from '@cloudflare/workers-types'
import {
createRequestHandler,
handleAsset,
} from '@remix-run/cloudflare-workers'
import * as build from '@remix-run/dev/server-build'
+import createCoreClient from '@proofzero/platform-clients/core'
+import {
+ generateTraceContextHeaders,
+ generateTraceSpan,
+} from '@proofzero/platform-middleware/trace'
+import type { TraceableFetchEvent } from '@proofzero/platform-middleware/trace'
+import type { GetAppPublicPropsResult } from '@proofzero/platform/starbase/src/jsonrpc/methods/getAppPublicProps'
+import manifestJSON from '__STATIC_CONTENT_MANIFEST'
+import { getCoreClient } from '~/platform.server'
+let manifest = JSON.parse(manifestJSON)
+
+type CfHostMetadata = {
+ clientId: string
+}
+
+type CustomDomainRequest = Request & {
+ app_props: GetAppPublicPropsResult
+}
+
export function parseParams(request: Request) {
const url = new URL(request.url)
const clientId = url.searchParams.get('client_id') || ''
+ const responseType = url.searchParams.get('response_type') || ''
const state = url.searchParams.get('state') || ''
const redirectUri = url.searchParams.get('redirect_uri') || ''
const scope = url.searchParams.get('scope')
@@ -28,6 +45,7 @@ export function parseParams(request: Request) {
return {
clientId,
+ responseType,
state,
redirectUri,
scope: decodedScope ? decodedScope.split(' ') : [],
@@ -38,51 +56,88 @@ export function parseParams(request: Request) {
}
}
-const requestHandler = createRequestHandler({
- build,
- mode: process.env.NODE_ENV,
- getLoadContext: (event) => {
- const traceSpan = (event as TraceableFetchEvent).traceSpan
- return {
- authzQueryParams: parseParams(event.request),
- env: globalThis as unknown as Env,
- traceSpan,
- }
- },
-})
+const handleEvent = async (event: FetchEvent, env: Env) => {
+ let response = await handleAsset(event, build, {
+ ASSET_NAMESPACE: env.__STATIC_CONTENT,
+ ASSET_MANIFEST: manifest,
+ })
+ if (response) return response
-const handleEvent = async (event: FetchEvent) => {
- let response = await handleAsset(event, build)
+ //Create a new trace span with no parent
+ const newTraceSpan = generateTraceSpan()
- if (!response) {
- //Create a new trace span with no parent
- const newTraceSpan = generateTraceSpan()
+ const reqURL = new URL(event.request.url)
+ //Have to force injection of new field so it is available in the context setup above
+ const newEvent = Object.assign(event, { traceSpan: newTraceSpan })
- const reqURL = new URL(event.request.url)
- //Have to force injection of new field so it is available in the context setup above
- const newEvent = Object.assign(event, { traceSpan: newTraceSpan })
+ console.debug(
+ `Started HTTP handler for ${reqURL.pathname}/${reqURL.searchParams}`,
+ newTraceSpan.toString()
+ )
- console.debug(
- `Started HTTP handler for ${reqURL.pathname}/${reqURL.searchParams}`,
- newTraceSpan.toString()
+ const request = event.request as unknown as CfRequest
+ const host = request.headers.get('host') as string
+ if (!env.DEFAULT_HOSTS.includes(host)) {
+ const clientId = request.cf?.hostMetadata?.clientId
+ if (!clientId) return new Response(null, { status: 404 })
+ const coreClient = createCoreClient(
+ env.Core,
+ generateTraceContextHeaders(newTraceSpan)
)
+
try {
- response = await requestHandler(newEvent)
- } finally {
- console.debug(
- `Completed HTTP handler ${
- response?.status && response?.status >= 400 && response?.status <= 599
- ? 'with errors '
- : ''
- }for ${reqURL.pathname}/${reqURL.searchParams}`,
- newTraceSpan.toString()
- )
+ const app = await coreClient.starbase.getAppPublicProps.query({
+ clientId,
+ })
+ newEvent.request.app_props = app
+ const { customDomain } = app
+ if (!customDomain) return new Response(null, { status: 404 })
+ if (!customDomain.isActive || host !== customDomain?.hostname)
+ return new Response(null, { status: 404 })
+ } catch (error) {
+ return new Response(null, { status: 500 })
}
}
+ const requestHandler = createRequestHandler({
+ build,
+ mode: process.env.NODE_ENV,
+ getLoadContext: (event) => {
+ const authzQueryParams = parseParams(event.request)
+ const traceSpan = (event as TraceableFetchEvent).traceSpan
+ return {
+ authzQueryParams,
+ appProps: (event.request as CustomDomainRequest).app_props,
+ env,
+ traceSpan,
+ waitUntil: event.waitUntil,
+ }
+ },
+ })
+
+ try {
+ response = await requestHandler(newEvent)
+ } finally {
+ console.debug(
+ `Completed HTTP handler ${
+ response?.status && response?.status >= 400 && response?.status <= 599
+ ? 'with errors '
+ : ''
+ }for ${reqURL.pathname}/${reqURL.searchParams}`,
+ newTraceSpan.toString()
+ )
+ }
+
return response
}
-addEventListener('fetch', async (event: FetchEvent) => {
- event.respondWith(handleEvent(event))
-})
+export default {
+ async fetch(req: Request, env: Env, ctx: ExecutionContext) {
+ //This is the smallest set of event props Remix needs to handle assets correctly
+ const event = {
+ request: req,
+ waitUntil: ctx.waitUntil.bind(ctx),
+ } as FetchEvent
+ return await handleEvent(event, env)
+ },
+}
diff --git a/apps/passport/tailwind.config.js b/apps/passport/tailwind.config.js
index dec84a136a..2621547fd2 100644
--- a/apps/passport/tailwind.config.js
+++ b/apps/passport/tailwind.config.js
@@ -1,12 +1,54 @@
/** @type {import('tailwindcss').Config} */
+
+function withOpacity(variableName) {
+ return ({ opacityValue }) => {
+ if (opacityValue !== undefined) {
+ return `rgba(var(${variableName}), ${opacityValue})`
+ }
+ return `rgb(var(${variableName}))`
+ }
+}
+
module.exports = {
+ darkMode: 'class',
content: [
'./app/**/*.{ts,tsx,jsx,js,mdx}',
'./node_modules/flowbite/**/*.js',
'../../packages/design-system/src/**/*.{ts,tsx,jsx,js}',
],
theme: {
- extend: {},
+ extend: {
+ colors: {
+ 'dull-white': '#f9fafb',
+ },
+ textColor: {
+ skin: {
+ primary: withOpacity('--color-primary'),
+ text: withOpacity('--color-primary-contrast-text'),
+ },
+ },
+ backgroundColor: {
+ skin: {
+ primary: withOpacity('--color-primary'),
+ },
+ },
+ ringColor: {
+ skin: {
+ primary: withOpacity('--color-primary'),
+ },
+ },
+ borderColor: {
+ skin: {
+ primary: withOpacity('--color-primary'),
+ },
+ },
+ boxShadowColor: {
+ skin: {
+ primary: withOpacity('--color-primary'),
+ },
+ },
+ },
},
+ safelist: ['lg:rounded-sm', 'lg:rounded-md', 'lg:rounded-lg'],
plugins: [require('flowbite/plugin')],
}
diff --git a/apps/passport/tests/passport.spec.ts b/apps/passport/tests/passport.spec.ts
index 69058ee709..bb0676f86c 100644
--- a/apps/passport/tests/passport.spec.ts
+++ b/apps/passport/tests/passport.spec.ts
@@ -56,7 +56,7 @@ test('login to passport using Email', async ({ page, request }) => {
await page.getByRole('button').filter({ hasText: 'Verify' }).click()
await page.waitForURL(/.*settings\/dashboard/, {
- timeout: 10000,
+ timeout: 15000,
waitUntil: 'networkidle',
})
await expect(page).toHaveURL(/.*settings\/dashboard/)
diff --git a/apps/passport/wrangler.current.toml b/apps/passport/wrangler.current.toml
new file mode 100644
index 0000000000..c8cf6baed8
--- /dev/null
+++ b/apps/passport/wrangler.current.toml
@@ -0,0 +1,41 @@
+name = "passport"
+main = "./build/index.js"
+compatibility_date = "2022-04-05"
+compatibility_flags = ["streams_enable_constructors"]
+node_compat = true
+workers_dev = false
+logpush = true
+
+[build]
+command = "yarn build"
+
+[site]
+bucket = "./public"
+
+[env.current]
+routes = [
+ { pattern = "passport.rollup.id", custom_domain = true, zone_name = "rollup.id" },
+ { pattern = "passport.pz3r0.com", custom_domain = true, zone_name = "pz3r0.com" },
+]
+
+services = [
+ { binding = "Core", service = "core-current" },
+ { binding = "Images", service = "images-current" },
+]
+
+[env.current.vars]
+DEFAULT_HOSTS = ["passport.rollup.id", "passport.pz3r0.com"]
+COOKIE_DOMAIN = "rollup.id"
+PROFILE_APP_URL = "https://my.rollup.id"
+CONSOLE_APP_URL = "https://console.rollup.id"
+PASSPORT_REDIRECT_URL = "https://passport.rollup.id/connect/token"
+INTERNAL_GOOGLE_OAUTH_CALLBACK_URL = "https://passport.rollup.id/connect/google/callback"
+INTERNAL_GITHUB_OAUTH_CALLBACK_URL = "https://passport.rollup.id/connect/github/callback"
+INTERNAL_TWITTER_OAUTH_CALLBACK_URL = "https://passport.rollup.id/connect/twitter/callback"
+INTERNAL_APPLE_OAUTH_CALLBACK_URL = "https://passport.rollup.id/connect/apple/callback"
+INTERNAL_MICROSOFT_OAUTH_CALLBACK_URL = "https://passport.rollup.id/connect/microsoft/callback"
+INTERNAL_DISCORD_OAUTH_CALLBACK_URL = "https://passport.rollup.id/connect/discord/callback"
+INTERNAL_GOOGLE_ANALYTICS_TAG = "AW-11277204852"
+WALLET_CONNECT_PROJECT_ID = "6f2ebc8aa6a1d5c4d4ac1e700294e35f"
+POSTHOG_API_KEY = "phc_QGmYrKfXcyIAUBBTX3NBDJjNg2MX24ijFemeUuykzWr"
+POSTHOG_PROXY_HOST = "https://analytics.rollup.id"
diff --git a/apps/passport/wrangler.dev.toml b/apps/passport/wrangler.dev.toml
new file mode 100644
index 0000000000..4d0929b3e6
--- /dev/null
+++ b/apps/passport/wrangler.dev.toml
@@ -0,0 +1,41 @@
+name = "passport"
+main = "./build/index.js"
+compatibility_date = "2022-04-05"
+compatibility_flags = ["streams_enable_constructors"]
+node_compat = true
+workers_dev = false
+logpush = true
+
+[build]
+command = "yarn build"
+
+[site]
+bucket = "./public"
+
+[env.dev]
+routes = [
+ { pattern = "passport-dev.rollup.id", custom_domain = true, zone_name = "rollup.id" },
+ { pattern = "passport-dev.pz3r0.com", custom_domain = true, zone_name = "pz3r0.com" },
+]
+
+services = [
+ { binding = "Core", service = "core-dev" },
+ { binding = "Images", service = "images-dev" },
+]
+
+[env.dev.vars]
+DEFAULT_HOSTS = ["passport-dev.rollup.id", "passport-dev.pz3r0.com"]
+COOKIE_DOMAIN = "rollup.id"
+PROFILE_APP_URL = "https://my-dev.rollup.id"
+CONSOLE_APP_URL = "https://console-dev.rollup.id"
+PASSPORT_REDIRECT_URL = "https://passport-dev.rollup.id/connect/token"
+INTERNAL_GOOGLE_OAUTH_CALLBACK_URL = "https://passport-dev.rollup.id/connect/google/callback"
+INTERNAL_GITHUB_OAUTH_CALLBACK_URL = "https://passport-dev.rollup.id/connect/github/callback"
+INTERNAL_TWITTER_OAUTH_CALLBACK_URL = "https://passport-dev.rollup.id/connect/twitter/callback"
+INTERNAL_APPLE_OAUTH_CALLBACK_URL = "https://passport-dev.rollup.id/connect/apple/callback"
+INTERNAL_MICROSOFT_OAUTH_CALLBACK_URL = "https://passport-dev.rollup.id/connect/microsoft/callback"
+INTERNAL_DISCORD_OAUTH_CALLBACK_URL = "https://passport-dev.rollup.id/connect/discord/callback"
+INTERNAL_GOOGLE_ANALYTICS_TAG = "G-NHNH4KRWC3"
+WALLET_CONNECT_PROJECT_ID = "249578b973e49826abb32d2ad263e2a3"
+POSTHOG_API_KEY = "phc_f7q7V62YWsS0FKyIRxO36xyUMFYJ8oahurHPBAXkGe5"
+POSTHOG_PROXY_HOST = "https://analytics.rollup.id"
diff --git a/apps/passport/wrangler.next.toml b/apps/passport/wrangler.next.toml
new file mode 100644
index 0000000000..03eca8fd20
--- /dev/null
+++ b/apps/passport/wrangler.next.toml
@@ -0,0 +1,41 @@
+name = "passport"
+main = "./build/index.js"
+compatibility_date = "2022-04-05"
+compatibility_flags = ["streams_enable_constructors"]
+node_compat = true
+workers_dev = false
+logpush = true
+
+[build]
+command = "yarn build"
+
+[site]
+bucket = "./public"
+
+[env.next]
+routes = [
+ { pattern = "passport-next.rollup.id", custom_domain = true, zone_name = "rollup.id" },
+ { pattern = "passport-next.pz3r0.com", custom_domain = true, zone_name = "pz3r0.com" },
+]
+
+services = [
+ { binding = "Core", service = "core-next" },
+ { binding = "Images", service = "images-next" },
+]
+
+[env.next.vars]
+DEFAULT_HOSTS = ["passport-next.rollup.id", "passport-next.pz3r0.com"]
+COOKIE_DOMAIN = "rollup.id"
+PROFILE_APP_URL = "https://my-next.rollup.id"
+CONSOLE_APP_URL = "https://console-next.rollup.id"
+PASSPORT_REDIRECT_URL = "https://passport-next.rollup.id/connect/token"
+INTERNAL_GOOGLE_OAUTH_CALLBACK_URL = "https://passport-next.rollup.id/connect/google/callback"
+INTERNAL_GITHUB_OAUTH_CALLBACK_URL = "https://passport-next.rollup.id/connect/github/callback"
+INTERNAL_TWITTER_OAUTH_CALLBACK_URL = "https://passport-next.rollup.id/connect/twitter/callback"
+INTERNAL_APPLE_OAUTH_CALLBACK_URL = "https://passport-next.rollup.id/connect/apple/callback"
+INTERNAL_MICROSOFT_OAUTH_CALLBACK_URL = "https://passport-next.rollup.id/connect/microsoft/callback"
+INTERNAL_DISCORD_OAUTH_CALLBACK_URL = "https://passport-next.rollup.id/connect/discord/callback"
+INTERNAL_GOOGLE_ANALYTICS_TAG = "G-X7ZN16M4NB"
+WALLET_CONNECT_PROJECT_ID = "7bce942e261433eb70c2a72d555dd61f"
+POSTHOG_API_KEY = "phc_JsZaA3PKO8jNF6gJ7HusRN3C7yzp56JakJJZfNRI9n7"
+POSTHOG_PROXY_HOST = "https://analytics.rollup.id"
diff --git a/apps/passport/wrangler.toml b/apps/passport/wrangler.toml
index 7c29a5bd46..c7d968ed0b 100644
--- a/apps/passport/wrangler.toml
+++ b/apps/passport/wrangler.toml
@@ -1,36 +1,33 @@
-# https://developers.cloudflare.com/workers/platform/compatibility-dates
-compatibility_date = "2022-04-05"
-main = "./build/index.js"
name = "passport"
-workers_dev = false
+main = "./build/index.js"
+compatibility_date = "2022-04-05"
compatibility_flags = ["streams_enable_constructors"]
+node_compat = true
+workers_dev = false
logpush = true
-# Services binding for local development
services = [
- { binding = "Account", service = "account" },
- { binding = "Access", service = "access" },
- { binding = "Address", service = "address" },
- { binding = "Starbase", service = "starbase" },
+ { binding = "Core", service = "core" },
{ binding = "Images", service = "images" },
]
-[site]
-bucket = "./public"
-
[build]
command = "yarn build -- --sourcemap"
+[site]
+bucket = "./public"
+
[dev]
port = 10001
inspector_port = 11001
local_protocol = "http"
[vars]
+DEFAULT_HOSTS = ["localhost:10001", "127.0.0.1:10001"]
+COOKIE_DOMAIN = "localhost"
PROFILE_APP_URL = "http://localhost:10003"
CONSOLE_APP_URL = "http://localhost:10002"
PASSPORT_REDIRECT_URL = "http://localhost:10001/connect/token"
-COOKIE_DOMAIN = "localhost"
INTERNAL_GOOGLE_OAUTH_CALLBACK_URL = "http://localhost:10001/connect/google/callback"
INTERNAL_GITHUB_OAUTH_CALLBACK_URL = "http://localhost:10001/connect/github/callback"
INTERNAL_TWITTER_OAUTH_CALLBACK_URL = "http://localhost:10001/connect/twitter/callback"
@@ -39,91 +36,5 @@ INTERNAL_APPLE_OAUTH_CALLBACK_URL = "http://localhost:10001/connect/apple/callba
INTERNAL_DISCORD_OAUTH_CALLBACK_URL = "http://localhost:10001/connect/discord/callback"
INTERNAL_GOOGLE_ANALYTICS_TAG = "G-NHNH4KRWC3"
WALLET_CONNECT_PROJECT_ID = "36efbf71d7586e254d72041a15a42078"
-
-[env.dev]
-routes = [
- { pattern = "passport-dev.rollup.id", custom_domain = true, zone_name = "rollup.id" },
- { pattern = "passport-dev.pz3r0.com", custom_domain = true, zone_name = "pz3r0.com" },
-
-]
-services = [
- { binding = "Account", service = "account-dev" },
- { binding = "Access", service = "access-dev" },
- { binding = "Address", service = "address-dev" },
- { binding = "Starbase", service = "starbase-dev" },
- { binding = "Images", service = "images-dev" },
-]
-
-[env.dev.vars]
-PROFILE_APP_URL = "https://my-dev.rollup.id"
-CONSOLE_APP_URL = "https://console-dev.rollup.id"
-PASSPORT_REDIRECT_URL = "https://passport-dev.rollup.id/connect/token"
-COOKIE_DOMAIN = "rollup.id"
-INTERNAL_GOOGLE_OAUTH_CALLBACK_URL = "https://passport-dev.rollup.id/connect/google/callback"
-INTERNAL_GITHUB_OAUTH_CALLBACK_URL = "https://passport-dev.rollup.id/connect/github/callback"
-INTERNAL_TWITTER_OAUTH_CALLBACK_URL = "https://passport-dev.rollup.id/connect/twitter/callback"
-INTERNAL_APPLE_OAUTH_CALLBACK_URL = "https://passport-dev.rollup.id/connect/apple/callback"
-INTERNAL_MICROSOFT_OAUTH_CALLBACK_URL = "https://passport-dev.rollup.id/connect/microsoft/callback"
-INTERNAL_DISCORD_OAUTH_CALLBACK_URL = "https://passport-dev.rollup.id/connect/discord/callback"
-INTERNAL_GOOGLE_ANALYTICS_TAG = "G-NHNH4KRWC3"
-WALLET_CONNECT_PROJECT_ID = "249578b973e49826abb32d2ad263e2a3"
-
-[env.next]
-routes = [
- { pattern = "passport-next.rollup.id", custom_domain = true, zone_name = "rollup.id" },
- { pattern = "passport-next.pz3r0.com", custom_domain = true, zone_name = "pz3r0.com" },
-]
-services = [
- { binding = "Account", service = "account-next" },
- { binding = "Access", service = "access-next" },
- { binding = "Address", service = "address-next" },
- { binding = "Starbase", service = "starbase-next" },
- { binding = "Images", service = "images-next" },
-]
-
-[env.next.vars]
-PROFILE_APP_URL = "https://my-next.rollup.id"
-CONSOLE_APP_URL = "https://console-next.rollup.id"
-PASSPORT_REDIRECT_URL = "https://passport-next.rollup.id/connect/token"
-COOKIE_DOMAIN = "rollup.id"
-INTERNAL_GOOGLE_OAUTH_CALLBACK_URL = "https://passport-next.rollup.id/connect/google/callback"
-INTERNAL_GITHUB_OAUTH_CALLBACK_URL = "https://passport-next.rollup.id/connect/github/callback"
-INTERNAL_TWITTER_OAUTH_CALLBACK_URL = "https://passport-next.rollup.id/connect/twitter/callback"
-INTERNAL_APPLE_OAUTH_CALLBACK_URL = "https://passport-next.rollup.id/connect/apple/callback"
-INTERNAL_MICROSOFT_OAUTH_CALLBACK_URL = "https://passport-next.rollup.id/connect/microsoft/callback"
-INTERNAL_DISCORD_OAUTH_CALLBACK_URL = "https://passport-next.rollup.id/connect/discord/callback"
-INTERNAL_GOOGLE_ANALYTICS_TAG = "G-X7ZN16M4NB"
-WALLET_CONNECT_PROJECT_ID = "7bce942e261433eb70c2a72d555dd61f"
-
-[env.next.build]
-command = "yarn build"
-
-[env.current]
-routes = [
- { pattern = "passport.rollup.id", custom_domain = true, zone_name = "rollup.id" },
- { pattern = "passport.pz3r0.com", custom_domain = true, zone_name = "pz3r0.com" },
-]
-services = [
- { binding = "Account", service = "account-current" },
- { binding = "Access", service = "access-current" },
- { binding = "Address", service = "address-current" },
- { binding = "Starbase", service = "starbase-current" },
- { binding = "Images", service = "images-current" },
-]
-
-[env.current.vars]
-PROFILE_APP_URL = "https://my.rollup.id"
-CONSOLE_APP_URL = "https://console.rollup.id"
-PASSPORT_REDIRECT_URL = "https://passport.rollup.id/connect/token"
-COOKIE_DOMAIN = "rollup.id"
-INTERNAL_GOOGLE_OAUTH_CALLBACK_URL = "https://passport.rollup.id/connect/google/callback"
-INTERNAL_GITHUB_OAUTH_CALLBACK_URL = "https://passport.rollup.id/connect/github/callback"
-INTERNAL_TWITTER_OAUTH_CALLBACK_URL = "https://passport.rollup.id/connect/twitter/callback"
-INTERNAL_APPLE_OAUTH_CALLBACK_URL = "https://passport.rollup.id/connect/apple/callback"
-INTERNAL_MICROSOFT_OAUTH_CALLBACK_URL = "https://passport.rollup.id/connect/microsoft/callback"
-INTERNAL_DISCORD_OAUTH_CALLBACK_URL = "https://passport.rollup.id/connect/discord/callback"
-INTERNAL_GOOGLE_ANALYTICS_TAG = "G-675VJMWSRY"
-WALLET_CONNECT_PROJECT_ID = "6f2ebc8aa6a1d5c4d4ac1e700294e35f"
-
-[env.current.build]
-command = "yarn build"
+POSTHOG_API_KEY = "phc_f7q7V62YWsS0FKyIRxO36xyUMFYJ8oahurHPBAXkGe5"
+POSTHOG_PROXY_HOST = "https://analytics.rollup.id"
diff --git a/apps/profile/app/components/addresses/AddressList.stories.tsx b/apps/profile/app/components/accounts/AccountList.stories.tsx
similarity index 66%
rename from apps/profile/app/components/addresses/AddressList.stories.tsx
rename to apps/profile/app/components/accounts/AccountList.stories.tsx
index 528182e5aa..70eb8a9cd9 100644
--- a/apps/profile/app/components/addresses/AddressList.stories.tsx
+++ b/apps/profile/app/components/accounts/AccountList.stories.tsx
@@ -1,6 +1,6 @@
import React from 'react'
-import { AddressList } from './AddressList'
-import type { AddressListItemProps } from './AddressListItem'
+import { AccountList } from './AccountList'
+import type { AccountListItemProps } from './AccountListItem'
import {
blue,
@@ -9,11 +9,11 @@ import {
} from '@proofzero/design-system/src/placeholders/rollup/b64'
export default {
- title: 'Molecules/Addresses/List',
- component: AddressList,
+ title: 'Molecules/Accounts/List',
+ component: AccountList,
}
-const addresses: AddressListItemProps[] = [
+const accounts: AccountListItemProps[] = [
{
id: '1',
title: 'Ondrej.eth',
@@ -21,7 +21,7 @@ const addresses: AddressListItemProps[] = [
wallet: 'Metamask',
network: 'Ethereum',
chain: 'Mainnet',
- address: '0x3c153bE191088a34bAc04013b511EF538718d645',
+ account: '0x3c153bE191088a34bAc04013b511EF538718d645',
primary: true,
onRenameAccount: (id) => {},
onChangeAvatar: (id) => {},
@@ -36,7 +36,7 @@ const addresses: AddressListItemProps[] = [
wallet: 'Metamask',
network: 'Ethereum',
chain: 'Mainnet',
- address: '0x2062dDb9924991c5CfB6af89A12FB4F405965d3d',
+ account: '0x2062dDb9924991c5CfB6af89A12FB4F405965d3d',
onRenameAccount: (id) => {},
onChangeAvatar: (id) => {},
onDisconnect: (id) => {},
@@ -48,11 +48,11 @@ const addresses: AddressListItemProps[] = [
wallet: 'Metamask',
network: 'Polygon',
chain: 'Mainnet',
- address: '0x012AC2a88F9244f004255b29AFCD349beE097B48',
+ account: '0x012AC2a88F9244f004255b29AFCD349beE097B48',
hidden: true,
},
]
-const Template = () => ({ key: ali.id, val: ali }))}
+ itemRenderer={(item) =>
+
+ No Vaults Account Detected ☹️
+
+
+ )
+}
diff --git a/apps/profile/app/components/addresses/AddressListItem.stories.tsx b/apps/profile/app/components/accounts/AccountListItem.stories.tsx
similarity index 74%
rename from apps/profile/app/components/addresses/AddressListItem.stories.tsx
rename to apps/profile/app/components/accounts/AccountListItem.stories.tsx
index 2225fc136c..3460121f7c 100644
--- a/apps/profile/app/components/addresses/AddressListItem.stories.tsx
+++ b/apps/profile/app/components/accounts/AccountListItem.stories.tsx
@@ -1,11 +1,11 @@
import React from 'react'
-import { AddressListItem } from './AddressListItem'
+import { AccountListItem } from './AccountListItem'
import { blue } from '@proofzero/design-system/src/placeholders/rollup/b64'
export default {
- title: 'Atoms/Addresses/List item',
- component: AddressListItem,
+ title: 'Atoms/Accounts/List item',
+ component: AccountListItem,
argTypes: {
id: {
defaultValue: 'Id String',
@@ -25,12 +25,12 @@ export default {
chain: {
defaultValue: 'Mainnet',
},
- address: {
+ account: {
defaultValue: '0x6c60Da9471181Aa54C548c6e201263A5801363F3',
},
},
}
-const Template = (args: any) =>
)
-export type AddressListItemProps = {
+export type AccountListItemProps = {
id: string
icon: string
title: string
type: string
- address: string
+ account: string
primary?: boolean
hidden?: boolean
wallet?: string
@@ -38,12 +38,12 @@ export type AddressListItemProps = {
onSetPrivate?: (id: string) => void
onDisconnect?: (id: string) => void
}
-export const AddressListItem = ({
+export const AccountListItem = ({
id,
icon,
title,
type,
- address,
+ account,
primary = false,
hidden = false,
onRenameAccount,
@@ -51,7 +51,7 @@ export const AddressListItem = ({
onSetPrimary,
onSetPrivate,
onDisconnect,
-}: AddressListItemProps) => {
+}: AccountListItemProps) => {
const hasBehavior =
onRenameAccount ||
onChangeAvatar ||
@@ -62,7 +62,7 @@ export const AddressListItem = ({
return (
@@ -78,7 +78,7 @@ export const AddressListItem = ({
- {getProfileTypeTitle(type)} • {address}
+ {getProfileTypeTitle(type)} • {account}
diff --git a/apps/profile/app/components/accounts/NoCryptoAddresses.tsx b/apps/profile/app/components/accounts/NoCryptoAccounts.tsx
similarity index 76%
rename from apps/profile/app/components/accounts/NoCryptoAddresses.tsx
rename to apps/profile/app/components/accounts/NoCryptoAccounts.tsx
index c0ea5fb806..11c637ee32 100644
--- a/apps/profile/app/components/accounts/NoCryptoAddresses.tsx
+++ b/apps/profile/app/components/accounts/NoCryptoAccounts.tsx
@@ -1,14 +1,14 @@
import { Button } from '@proofzero/design-system'
import { Text } from '@proofzero/design-system'
-const NoCryptoAddresses = ({
+const NoCryptoAccounts = ({
redirectHandler,
}: {
redirectHandler: () => void
}) => {
return (
@@ -16,7 +16,7 @@ const NoCryptoAddresses = ({
{
redirectHandler()
@@ -28,4 +28,4 @@ const NoCryptoAddresses = ({
)
}
-export default NoCryptoAddresses
+export default NoCryptoAccounts
diff --git a/apps/profile/app/components/accounts/PfpNftModal.tsx b/apps/profile/app/components/accounts/PfpNftModal.tsx
index 961571a5c1..c73c0becc8 100644
--- a/apps/profile/app/components/accounts/PfpNftModal.tsx
+++ b/apps/profile/app/components/accounts/PfpNftModal.tsx
@@ -5,9 +5,10 @@ import FilteredNftGrid from '../nfts/grid/filtered'
import UnfilteredNftGrid from '../nfts/grid/unfiltered'
import SelectableNft from '../nfts/interactible'
import { LoadingGridSquares } from '../nfts/grid/loading'
+import { HiOutlineX } from 'react-icons/hi'
type PfpNftModalProps = {
- text?: string
+ text: string
nfts: any[]
pfp: string
displayName: string
@@ -37,11 +38,11 @@ const PfpNftModal = ({
return (
- {text?.length && (
+
{text}
- )}
+ {
+ handleClose(false)
+ }}
+ >
+
+
{collection.length ? (
{
return (
diff --git a/apps/profile/app/components/accounts/UnsavedChangesModal.tsx b/apps/profile/app/components/accounts/UnsavedChangesModal.tsx
index f1a9a5a5ad..4a087b0c96 100644
--- a/apps/profile/app/components/accounts/UnsavedChangesModal.tsx
+++ b/apps/profile/app/components/accounts/UnsavedChangesModal.tsx
@@ -4,18 +4,36 @@ import SaveButton from './SaveButton'
import { Text } from '@proofzero/design-system'
import warn from '../../assets/warning.svg'
+import { HiOutlineX } from 'react-icons/hi'
-const UnsavedChangesModal = ({ isOpen, handleClose }) => {
+const UnsavedChangesModal = ({
+ isOpen,
+ handleClose,
+}: {
+ isOpen: boolean
+ handleClose: (value: boolean) => void
+}) => {
return (
-
-
+
+
-
- You have Unsaved Changes
-
+
+
+ You have Unsaved Changes
+
+ {
+ handleClose(false)
+ }}
+ >
+
+
You have made some changes. Do you want to discard or save them?
diff --git a/apps/profile/app/components/addresses/AddressList.tsx b/apps/profile/app/components/addresses/AddressList.tsx
deleted file mode 100644
index 67f824f304..0000000000
--- a/apps/profile/app/components/addresses/AddressList.tsx
+++ /dev/null
@@ -1,23 +0,0 @@
-import { List } from '@proofzero/design-system/src/atoms/lists/List'
-import type { AddressListItemProps } from './AddressListItem'
-import { AddressListItem } from './AddressListItem'
-import { Text } from '@proofzero/design-system/src/atoms/text/Text'
-
-export type AddressListProps = {
- addresses: AddressListItemProps[]
-}
-
-export const AddressList = ({ addresses }: AddressListProps) => {
- return addresses.length ? (
-
({ key: ali.id, val: ali }))}
- itemRenderer={(item) =>
-
- No Vaults Account Detected ☹️
-
-
- )
-}
diff --git a/apps/profile/app/components/cta/cta.tsx b/apps/profile/app/components/cta/cta.tsx
index a77d59aab2..2f28552d4a 100644
--- a/apps/profile/app/components/cta/cta.tsx
+++ b/apps/profile/app/components/cta/cta.tsx
@@ -1,8 +1,7 @@
import { Link } from '@remix-run/react'
import { useState, useEffect } from 'react'
-import { Text } from '@proofzero/design-system/src/atoms/text/Text'
-import { Button } from '@proofzero/design-system/src/atoms/buttons/Button'
+import { Button, Text } from '@proofzero/design-system'
import type { FullProfile } from '../../types'
import type { ProfileCompletionStatus } from '../../utils/cta.client'
@@ -10,10 +9,10 @@ import { determineProfileCompletionStatus } from '../../utils/cta.client'
const CTA = ({
profile,
- addresses,
+ accounts,
}: {
profile: FullProfile
- addresses: any[]
+ accounts: any[]
}) => {
const ctaDict: {
[key: string]: {
@@ -68,7 +67,7 @@ const CTA = ({
}
const handleCompletionStatus = () => {
- const pcs = determineProfileCompletionStatus(profile, addresses)
+ const pcs = determineProfileCompletionStatus(profile, accounts)
let ctaKey
ctaKey = handleCTAKey(pcs, 'gallery') || ctaKey
diff --git a/apps/profile/app/components/head-nav/index.tsx b/apps/profile/app/components/head-nav/index.tsx
index f4ed491d4b..0e63f7dc34 100644
--- a/apps/profile/app/components/head-nav/index.tsx
+++ b/apps/profile/app/components/head-nav/index.tsx
@@ -36,7 +36,7 @@ export const ProfileLogo = () => {
type HeadNavProps = {
open: boolean
- accountURN: string
+ identityURN: string
avatarUrl?: string
displayName?: string
isToken?: boolean
@@ -44,7 +44,7 @@ type HeadNavProps = {
}
export default function HeadNav({
- accountURN,
+ identityURN,
avatarUrl,
loggedIn,
displayName,
@@ -126,8 +126,8 @@ export default function HeadNav({
displayName={displayName}
close={close}
profileUrl={
- accountURN
- ? `/p/${accountURN}`
+ identityURN
+ ? `/p/${identityURN}`
: '/account/connections'
}
/>
@@ -204,7 +204,7 @@ export default function HeadNav({
displayName: displayName!,
}}
close={close}
- accountURN={accountURN!}
+ identityURN={identityURN!}
ref={setReferenceElement}
open={open}
/>
diff --git a/apps/profile/app/components/nfts/modal/index.tsx b/apps/profile/app/components/nfts/modal/index.tsx
index 16d14171e2..463d04bb86 100644
--- a/apps/profile/app/components/nfts/modal/index.tsx
+++ b/apps/profile/app/components/nfts/modal/index.tsx
@@ -1,7 +1,7 @@
import { Text } from '@proofzero/design-system/src/atoms/text/Text'
import { Modal } from '@proofzero/design-system/src/molecules/modal/Modal'
-import { HiChevronDown } from 'react-icons/hi'
+import { HiChevronDown, HiOutlineX } from 'react-icons/hi'
import { gatewayFromIpfs } from '@proofzero/utils'
@@ -31,18 +31,9 @@ const NftModal = ({
return (
@@ -50,7 +41,6 @@ const NftModal = ({
{!imgLoaded && (
)}
-
-
- {nft?.collectionTitle}
-
+
+
+ {nft?.collectionTitle}
+
+ {
+ handleClose(false)
+ }}
+ >
+
+
@@ -159,7 +160,7 @@ const NftModal = ({
{
navigator.clipboard.writeText(d.value)
@@ -179,7 +180,7 @@ const NftModal = ({
{d.value}
diff --git a/apps/profile/app/components/nfts/partners.tsx b/apps/profile/app/components/nfts/partners.tsx
index 1b0723ce60..ff5b5d6b39 100644
--- a/apps/profile/app/components/nfts/partners.tsx
+++ b/apps/profile/app/components/nfts/partners.tsx
@@ -45,7 +45,7 @@ const PartnerUrl = ({ title, description, imgSrc, url }: PartnerUrlProps) => {
-
+
Visit website
diff --git a/apps/profile/app/components/profile/links/links.tsx b/apps/profile/app/components/profile/links/links.tsx
index 3bfe66f9a7..966d59edf5 100644
--- a/apps/profile/app/components/profile/links/links.tsx
+++ b/apps/profile/app/components/profile/links/links.tsx
@@ -1,5 +1,5 @@
import { Text } from '@proofzero/design-system/src/atoms/text/Text'
-import { imageFromAddressType } from '../../../helpers'
+import { imageFromAccountType } from '../../../helpers'
type Link = {
name: string
@@ -36,7 +36,7 @@ export const Links = ({ links, isOwner = false, displayName }: LinksProps) => {
{links
.map((link) => ({
...link,
- providerIcon: imageFromAddressType(link.provider),
+ providerIcon: imageFromAccountType(link.provider),
}))
.map((link, i: number) => (
{
return (
)
@@ -59,13 +59,13 @@ export const DesktopSideNav = ({
export const MobileSideNav = ({
profile,
- accountURN,
+ identityURN,
close,
ref,
open,
}: {
profile: { displayName: string; pfp?: { image: string } }
- accountURN: string
+ identityURN: string
close: (
focusableElement?:
| HTMLElement
@@ -101,7 +101,7 @@ export const MobileSideNav = ({
diff --git a/apps/profile/app/helpers/alchemy.ts b/apps/profile/app/helpers/alchemy.ts
index c2233e21aa..3699346ffa 100644
--- a/apps/profile/app/helpers/alchemy.ts
+++ b/apps/profile/app/helpers/alchemy.ts
@@ -13,55 +13,65 @@ import type {
import type { Chain, Gallery, NFT } from '../types'
import { NFTContractNormalizer, NFTNormalizer } from './nfts'
import { sortNftsFn } from './strings'
-import type { AccountURN } from '@proofzero/urns/account'
-import { getAccountCryptoAddresses } from './profile'
+import type { IdentityURN } from '@proofzero/urns/identity'
+import { getIdentityCryptoAddresses } from './profile'
import type { TraceSpan } from '@proofzero/platform-middleware/trace'
// -------------------- TYPES --------------------------------------------------
-const getChainWithNetwork = (chain: AlchemyChain): Chain => {
+const getChainWithNetwork = (chain: AlchemyChain, env: Env): Chain => {
return chain === AlchemyChain.ethereum
? {
chain: AlchemyChain.ethereum,
- network: AlchemyNetwork[ALCHEMY_ETH_NETWORK],
+ network: AlchemyNetwork[env.ALCHEMY_ETH_NETWORK],
}
: {
chain: AlchemyChain.polygon,
- network: AlchemyNetwork[ALCHEMY_POLYGON_NETWORK],
+ network: AlchemyNetwork[env.ALCHEMY_POLYGON_NETWORK],
}
}
-export const getAlchemyClient = (chain: Chain): AlchemyClient => {
+export const getAlchemyClient = (chain: Chain, env: Env): AlchemyClient => {
return new AlchemyClient({
- key: chain.chain === 'eth' ? APIKEY_ALCHEMY_ETH : APIKEY_ALCHEMY_POLYGON,
+ key:
+ chain.chain === 'eth'
+ ? env.APIKEY_ALCHEMY_ETH
+ : env.APIKEY_ALCHEMY_POLYGON,
...chain,
})
}
-export const getAlchemyClients = () => {
+export const getAlchemyClients = (env: Env) => {
return {
ethereumClient: getAlchemyClient(
- getChainWithNetwork(AlchemyChain.ethereum)
+ getChainWithNetwork(AlchemyChain.ethereum, env),
+ env
+ ),
+ polygonClient: getAlchemyClient(
+ getChainWithNetwork(AlchemyChain.polygon, env),
+ env
),
- polygonClient: getAlchemyClient(getChainWithNetwork(AlchemyChain.polygon)),
}
}
// -------------------- ALL NFTS FOR SPECIFIED CONTRACTS -----------------------
-export const getNfts = async ({
- addresses,
- contractAddresses,
- maxRuns = 3,
- chain,
-}: {
- addresses: string[]
- contractAddresses: string[]
- maxRuns?: number
- chain: AlchemyChain
-}) => {
- const chainWithNetwork = getChainWithNetwork(chain)
- const alchemyClient = getAlchemyClient(chainWithNetwork)
+export const getNfts = async (
+ {
+ addresses,
+ contractAddresses,
+ maxRuns = 3,
+ chain,
+ }: {
+ addresses: string[]
+ contractAddresses: string[]
+ maxRuns?: number
+ chain: AlchemyChain
+ },
+ env: Env
+) => {
+ const chainWithNetwork = getChainWithNetwork(chain, env)
+ const alchemyClient = getAlchemyClient(chainWithNetwork, env)
const nfts: NFT[] = []
await Promise.all(
@@ -89,19 +99,22 @@ export const getNfts = async ({
// -------------------- ALL CONTRACTS ------------------------------------------
-export const getContracts = async ({
- addresses,
- excludeFilters,
- maxRuns = 3,
- chain,
-}: {
- addresses: string[]
- excludeFilters: string[]
- maxRuns?: number
- chain: AlchemyChain
-}) => {
- const chainWithNetwork = getChainWithNetwork(chain)
- const alchemyClient = getAlchemyClient(chainWithNetwork)
+export const getContracts = async (
+ {
+ addresses,
+ excludeFilters,
+ maxRuns = 3,
+ chain,
+ }: {
+ addresses: string[]
+ excludeFilters: string[]
+ maxRuns?: number
+ chain: AlchemyChain
+ },
+ env: Env
+) => {
+ const chainWithNetwork = getChainWithNetwork(chain, env)
+ const alchemyClient = getAlchemyClient(chainWithNetwork, env)
let contracts: NFT[] = []
await Promise.all(
@@ -130,28 +143,37 @@ export const getContracts = async ({
return contracts
}
-export const getContractsForAllChains = async ({
- addresses,
- excludeFilters,
-}: {
- addresses: string[]
- excludeFilters: string[]
-}) => {
+export const getContractsForAllChains = async (
+ {
+ addresses,
+ excludeFilters,
+ }: {
+ addresses: string[]
+ excludeFilters: string[]
+ },
+ env: Env
+) => {
// To avoid duplication - if one collection comes from different addresses
const visitedContracts = new Map
()
try {
const [ethereumContracts, polygonContracts] = await Promise.all([
- getContracts({
- addresses,
- excludeFilters,
- chain: AlchemyChain.ethereum,
- }),
- getContracts({
- addresses,
- excludeFilters,
- chain: AlchemyChain.polygon,
- }),
+ getContracts(
+ {
+ addresses,
+ excludeFilters,
+ chain: AlchemyChain.ethereum,
+ },
+ env
+ ),
+ getContracts(
+ {
+ addresses,
+ excludeFilters,
+ chain: AlchemyChain.polygon,
+ },
+ env
+ ),
])
const ownedNfts = ethereumContracts
@@ -174,21 +196,26 @@ export const getContractsForAllChains = async ({
}
}
-export const getValidGallery = async ({
- gallery,
- accountURN,
- traceSpan,
-}: {
- gallery: Gallery
- accountURN: AccountURN
+export const getValidGallery = async (
+ {
+ gallery,
+ identityURN,
+ }: {
+ gallery: Gallery
+ identityURN: IdentityURN
+ },
+ env: Env,
traceSpan: TraceSpan
-}) => {
- const { ethereumClient, polygonClient } = getAlchemyClients()
+) => {
+ const { ethereumClient, polygonClient } = getAlchemyClients(env)
- const cryptoAddresses = await getAccountCryptoAddresses({
- accountURN,
- traceSpan,
- })
+ const cryptoAddresses = await getIdentityCryptoAddresses(
+ {
+ identityURN,
+ },
+ env,
+ traceSpan
+ )
const [ethContractAddressesSet, polyContractAddressesSet] = gallery.reduce(
([ethereum, polygon], nft) => {
diff --git a/apps/profile/app/helpers/clients.ts b/apps/profile/app/helpers/clients.ts
index b7aaf05262..e2e3b7dd31 100644
--- a/apps/profile/app/helpers/clients.ts
+++ b/apps/profile/app/helpers/clients.ts
@@ -3,13 +3,13 @@ import { getSdk } from '@proofzero/galaxy-client'
import { TRACEPARENT_HEADER_NAME } from '@proofzero/platform-middleware/trace'
import { PlatformHeaders } from '@proofzero/platform-clients/base'
-export async function getGalaxyClient(reqHeaders: PlatformHeaders) {
+export async function getGalaxyClient(reqHeaders: PlatformHeaders, env: Env) {
const traceparent = JSON.stringify({
traceparent: reqHeaders ? reqHeaders[TRACEPARENT_HEADER_NAME] : '',
})
const gqlClient = new GraphQLClient('http://127.0.0.1/graphql', {
// @ts-ignore
- fetch: Galaxy.fetch.bind(Galaxy),
+ fetch: env.Galaxy.fetch.bind(env.Galaxy),
requestMiddleware: (r) => {
r.headers = { ...reqHeaders, ...(r.headers as Record) }
console.debug(`Starting GQL client request.`, traceparent)
diff --git a/apps/profile/app/helpers/icons.ts b/apps/profile/app/helpers/icons.ts
index d73a863926..c4114f5c31 100644
--- a/apps/profile/app/helpers/icons.ts
+++ b/apps/profile/app/helpers/icons.ts
@@ -1,8 +1,9 @@
import {
- CryptoAddressType,
- EmailAddressType,
- OAuthAddressType,
-} from '@proofzero/types/address'
+ CryptoAccountType,
+ EmailAccountType,
+ OAuthAccountType,
+ WebauthnAccountType,
+} from '@proofzero/types/account'
import ethereumIcon from '@proofzero/design-system/src/assets/social_icons/ethereum.svg'
import scWalletIcon from '@proofzero/design-system/src/assets/social_icons/sc_wallet.svg'
@@ -10,38 +11,42 @@ import emailIcon from '@proofzero/design-system/src/assets/social_icons/email.sv
import appleIcon from '@proofzero/design-system/src/atoms/providers/Apple'
import discordIcon from '@proofzero/design-system/src/assets/social_icons/discord.svg'
import githubIcon from '@proofzero/design-system/src/atoms/providers/Github'
-import googleIcon from '@proofzero/design-system/src/assets/social_icons/google.svg'
-import microsoftIcon from '@proofzero/design-system/src/assets/social_icons/microsoft.svg'
+import googleIcon from '@proofzero/design-system/src/atoms/providers/Google'
+import microsoftIcon from '@proofzero/design-system/src/atoms/providers/Microsoft'
import twitterIcon from '@proofzero/design-system/src/assets/social_icons/twitter.svg'
+import webauthnIcon from '@proofzero/design-system/src/atoms/providers/Webauthn'
-export const imageFromAddressType = (addressType: string) => {
+export const imageFromAccountType = (accountType: string) => {
let providerIcon = null
- switch (addressType) {
- case CryptoAddressType.ETH:
+ switch (accountType) {
+ case CryptoAccountType.ETH:
providerIcon = ethereumIcon
break
- case CryptoAddressType.Wallet:
+ case CryptoAccountType.Wallet:
providerIcon = scWalletIcon
break
- case EmailAddressType.Email:
+ case EmailAccountType.Email:
providerIcon = emailIcon
break
- case OAuthAddressType.Apple:
+ case WebauthnAccountType.WebAuthN:
+ providerIcon = webauthnIcon
+ break
+ case OAuthAccountType.Apple:
providerIcon = appleIcon
break
- case OAuthAddressType.Discord:
+ case OAuthAccountType.Discord:
providerIcon = discordIcon
break
- case OAuthAddressType.GitHub:
+ case OAuthAccountType.GitHub:
providerIcon = githubIcon
break
- case OAuthAddressType.Google:
+ case OAuthAccountType.Google:
providerIcon = googleIcon
break
- case OAuthAddressType.Microsoft:
+ case OAuthAccountType.Microsoft:
providerIcon = microsoftIcon
break
- case OAuthAddressType.Twitter:
+ case OAuthAccountType.Twitter:
providerIcon = twitterIcon
break
}
diff --git a/apps/profile/app/helpers/index.ts b/apps/profile/app/helpers/index.ts
index 8bab5ca05d..3d31837dac 100644
--- a/apps/profile/app/helpers/index.ts
+++ b/apps/profile/app/helpers/index.ts
@@ -1,6 +1,6 @@
import * as clients from './clients'
import hexStyle from './hex-style'
import * as strings from './strings'
-import { imageFromAddressType } from './icons'
+import { imageFromAccountType } from './icons'
-export { clients, hexStyle, strings, imageFromAddressType }
+export { clients, hexStyle, strings, imageFromAccountType }
diff --git a/apps/profile/app/helpers/ogImage.ts b/apps/profile/app/helpers/ogImage.ts
index 8a3928ea1a..a023c08663 100644
--- a/apps/profile/app/helpers/ogImage.ts
+++ b/apps/profile/app/helpers/ogImage.ts
@@ -4,9 +4,13 @@ import {
TraceSpan,
} from '@proofzero/platform-middleware/trace'
-export const ogImageFromProfile = async (pfp: string, traceSpan: TraceSpan) => {
- const imageClient = createImageClient(Images, {
- imagesURL: IMAGES_URL,
+export const ogImageFromProfile = async (
+ pfp: string,
+ env: Env,
+ traceSpan: TraceSpan
+) => {
+ const imageClient = createImageClient(env.Images, {
+ imagesURL: env.IMAGES_URL,
headers: generateTraceContextHeaders(traceSpan),
})
const ogImage = await imageClient.getOgImage.query({
diff --git a/apps/profile/app/helpers/profile.ts b/apps/profile/app/helpers/profile.ts
index f0fbea02dd..f58ac34bc2 100644
--- a/apps/profile/app/helpers/profile.ts
+++ b/apps/profile/app/helpers/profile.ts
@@ -1,47 +1,56 @@
import {
- CryptoAddressType,
- EmailAddressType,
+ CryptoAccountType,
+ EmailAccountType,
NodeType,
- OAuthAddressType,
-} from '@proofzero/types/address'
-import type { AddressURN } from '@proofzero/urns/address'
+ OAuthAccountType,
+ WebauthnAccountType,
+} from '@proofzero/types/account'
+import type { AccountURN } from '@proofzero/urns/account'
import { getAuthzHeaderConditionallyFromToken } from '@proofzero/utils'
import { getGalaxyClient } from './clients'
-import { imageFromAddressType } from './icons'
+import { imageFromAccountType } from './icons'
import type { FullProfile } from '../types'
-import type { AccountURN } from '@proofzero/urns/account'
+import type { IdentityURN } from '@proofzero/urns/identity'
import type { TraceSpan } from '@proofzero/platform-middleware/trace'
import { generateTraceContextHeaders } from '@proofzero/platform-middleware/trace'
import { getValidGallery } from './alchemy'
-import { GetAddressProfilesQuery } from '@proofzero/galaxy-client'
+import { GetAccountProfilesQuery } from '@proofzero/galaxy-client'
-export const getAccountProfile = async (
+export const getIdentityProfile = async (
{
- accountURN,
+ identityURN,
jwt,
}: {
- accountURN: AccountURN
+ identityURN: IdentityURN
jwt?: string
},
+ env: Env,
traceSpan: TraceSpan
) => {
- // note: jwt is only important for setting profile in profile account settings
-
- const profile = await ProfileKV.get(accountURN, 'json')
+ // note: jwt is only important for setting profile in profile identity settings
+ const profile = await env.ProfileKV.get(identityURN, 'json')
if (profile && profile.gallery)
- profile.gallery = await getValidGallery({
- gallery: profile.gallery,
- accountURN,
- traceSpan,
- })
+ profile.gallery = await getValidGallery(
+ {
+ gallery: profile.gallery,
+ identityURN,
+ },
+ env,
+ traceSpan
+ )
return profile
}
-export const getAuthorizedApps = async (jwt: string, traceSpan: TraceSpan) => {
+export const getAuthorizedApps = async (
+ jwt: string,
+ env: Env,
+ traceSpan: TraceSpan
+) => {
const galaxyClient = await getGalaxyClient(
- generateTraceContextHeaders(traceSpan)
+ generateTraceContextHeaders(traceSpan),
+ env
)
const { authorizedApps } = await galaxyClient.getAuthorizedApps(
@@ -52,84 +61,104 @@ export const getAuthorizedApps = async (jwt: string, traceSpan: TraceSpan) => {
return authorizedApps
}
-export const getAccountAddresses = async ({
- jwt,
- accountURN,
- traceSpan,
-}: {
- jwt?: string
- accountURN?: AccountURN
+export const getIdentityAccounts = async (
+ {
+ jwt,
+ identityURN,
+ }: {
+ jwt?: string
+ identityURN?: IdentityURN
+ },
+ env: Env,
traceSpan: TraceSpan
-}) => {
+) => {
const galaxyClient = await getGalaxyClient(
- generateTraceContextHeaders(traceSpan!)
+ generateTraceContextHeaders(traceSpan!),
+ env
)
- const addressesRes = await galaxyClient.getConnectedAddresses(
- { targetAccountURN: accountURN },
+
+ const accountsRes = await galaxyClient.getConnectedAccounts(
+ { targetIdentityURN: identityURN },
getAuthzHeaderConditionallyFromToken(jwt)
)
- return addressesRes.addresses || []
+ return accountsRes.accounts || []
}
-export const getAccountCryptoAddresses = async ({
- jwt,
- accountURN,
- traceSpan,
-}: {
- jwt?: string
- accountURN?: AccountURN
+export const getIdentityCryptoAddresses = async (
+ {
+ jwt,
+ identityURN,
+ }: {
+ jwt?: string
+ identityURN?: IdentityURN
+ },
+ env: Env,
traceSpan: TraceSpan
-}) => {
- const addresses = await getAccountAddresses({ jwt, accountURN, traceSpan })
+) => {
+ const accounts = await getIdentityAccounts(
+ { jwt, identityURN },
+ env,
+ traceSpan
+ )
// TODO: need to type qc and rc
- const cryptoAddresses =
- addresses
- .filter((e) => [NodeType.Crypto, NodeType.Vault].includes(e.rc.node_type))
- .map((address) => address.qc.alias.toLowerCase() as string) ||
- ([] as string[])
-
- return cryptoAddresses
+ const cryptoAccounts =
+ accounts
+ .filter((e) => {
+ return (
+ [NodeType.Crypto, NodeType.Vault].includes(e.rc.node_type) &&
+ e.rc.addr_type === CryptoAccountType.ETH
+ )
+ })
+ .map((account) => {
+ return account.qc.alias.toLowerCase() as string
+ }) || ([] as string[])
+
+ return cryptoAccounts
}
-export const getAddressProfiles = async (
+export const getAccountProfiles = async (
jwt: string,
- addressURNList: AddressURN[],
+ accountURNList: AccountURN[],
+ env: Env,
traceSpan: TraceSpan
-): Promise => {
+): Promise => {
const galaxyClient = await getGalaxyClient(
- generateTraceContextHeaders(traceSpan)
+ generateTraceContextHeaders(traceSpan),
+ env
)
- const addressProfilesRes = await galaxyClient.getAddressProfiles(
+ const accountProfilesRes = await galaxyClient.getAccountProfiles(
{
- addressURNList,
+ accountURNList,
},
getAuthzHeaderConditionallyFromToken(jwt)
)
- const { addressProfiles } = addressProfilesRes
+ const { accountProfiles } = accountProfilesRes
- return addressProfiles
+ return accountProfiles
}
export const getProfileTypeTitle = (type: string) => {
switch (type) {
- case CryptoAddressType.ETH:
+ case CryptoAccountType.ETH:
return 'Ethereum'
- case EmailAddressType.Email:
+ case EmailAccountType.Email:
return 'Email'
- case OAuthAddressType.Apple:
+ case WebauthnAccountType.WebAuthN:
+ return 'Passkey'
+ case OAuthAccountType.Apple:
return 'Apple'
- case OAuthAddressType.Discord:
+ case OAuthAccountType.Discord:
return 'Discord'
- case OAuthAddressType.GitHub:
+ case OAuthAccountType.GitHub:
return 'GitHub'
- case OAuthAddressType.Google:
+ case OAuthAccountType.Google:
return 'Google'
- case OAuthAddressType.Microsoft:
+ case OAuthAccountType.Microsoft:
return 'Microsoft'
- case OAuthAddressType.Twitter:
+ case OAuthAccountType.Twitter:
return 'Twitter'
default:
return ''
diff --git a/apps/profile/app/root.tsx b/apps/profile/app/root.tsx
index 963ced5daa..2441522816 100644
--- a/apps/profile/app/root.tsx
+++ b/apps/profile/app/root.tsx
@@ -71,7 +71,9 @@ export const links: LinksFunction = () => [
{ rel: 'shortcut icon', type: 'image/svg+xml', href: faviconSvg },
]
-export const loader: LoaderFunction = async ({ request }) => {
+export const loader: LoaderFunction = async ({ request, context }) => {
+ const { INTERNAL_GOOGLE_ANALYTICS_TAG, PASSPORT_URL, PROFILE_CLIENT_ID } =
+ context.env
return json({
ENV: {
INTERNAL_GOOGLE_ANALYTICS_TAG,
diff --git a/apps/profile/app/routes/$type.$address.tsx b/apps/profile/app/routes/$type.$address.tsx
index bdf16fe72e..2556ea3a87 100644
--- a/apps/profile/app/routes/$type.$address.tsx
+++ b/apps/profile/app/routes/$type.$address.tsx
@@ -20,10 +20,9 @@ import { JsonError, getErrorCause } from '@proofzero/utils/errors'
import { getAccessToken, parseJwt } from '~/utils/session.server'
import { getGalaxyClient } from '~/helpers/clients'
import { ogImageFromProfile } from '~/helpers/ogImage'
-import { getAccountProfile } from '~/helpers/profile'
+import { getIdentityProfile } from '~/helpers/profile'
import { Avatar } from '@proofzero/design-system/src/atoms/profile/avatar/Avatar'
-import { Text } from '@proofzero/design-system/src/atoms/text/Text'
import { gatewayFromIpfs } from '@proofzero/utils'
import ProfileTabs from '~/components/profile/tabs/tabs'
@@ -31,11 +30,11 @@ import ProfileLayout from '~/components/profile/layout'
import defaultOG from '~/assets/social.png'
import subtractLogo from '~/assets/subtract-logo.svg'
-import { CryptoAddressType, OAuthAddressType } from '@proofzero/types/address'
-import type { AccountURN } from '@proofzero/urns/account'
-import { AccountURNSpace } from '@proofzero/urns/account'
-import { Button } from '@proofzero/design-system/src/atoms/buttons/Button'
-import { imageFromAddressType } from '~/helpers'
+import { CryptoAccountType, OAuthAccountType } from '@proofzero/types/account'
+import type { IdentityURN } from '@proofzero/urns/identity'
+import { IdentityURNSpace } from '@proofzero/urns/identity'
+import { Button, Text } from '@proofzero/design-system'
+import { imageFromAccountType } from '~/helpers'
import type { FullProfile } from '~/types'
import { generateTraceContextHeaders } from '@proofzero/platform-middleware/trace'
@@ -54,38 +53,43 @@ export const loader: LoaderFunction = async ({ request, params, context }) => {
}
const galaxyClient = await getGalaxyClient(
- generateTraceContextHeaders(context.traceSpan)
+ generateTraceContextHeaders(context.traceSpan),
+ context.env
)
if (!address) throw new Error('No address provided in URL')
if (!type) throw new Error('No provider specified in URL')
- // redirect from any addressURN to its addressURNs
- let accountURN: AccountURN
+ // redirect from any accountURN to its accountURNs
+ let identityURN: IdentityURN
if (type !== 'p') {
try {
- const { accountFromAlias } = await galaxyClient.getAccountUrnFromAlias({
+ const { identityFromAlias } = await galaxyClient.getIdentityURNFromAlias({
provider: type,
alias: address,
})
- if (!accountFromAlias) {
+ if (!identityFromAlias) {
throw json({ message: 'Not Found' }, { status: 404 })
}
- accountURN = accountFromAlias
+ identityURN = identityFromAlias as IdentityURN
} catch (error) {
throw JsonError(error, context.traceSpan.getTraceParent())
}
} else {
- accountURN = AccountURNSpace.urn(address) as AccountURN
+ identityURN = IdentityURNSpace.urn(address) as IdentityURN
}
// if not handle is this let's assume this is an idref
let profile, jwt
try {
- jwt = await getAccessToken(request)
+ jwt = await getAccessToken(request, context.env)
- profile = await getAccountProfile({ jwt, accountURN }, context.traceSpan)
+ profile = await getIdentityProfile(
+ { jwt, identityURN },
+ context.env,
+ context.traceSpan
+ )
if (!profile) {
throw json({ message: 'Profile could not be resolved' }, { status: 404 })
@@ -95,6 +99,7 @@ export const loader: LoaderFunction = async ({ request, params, context }) => {
if (request.cf.botManagement.score < 30) {
ogImage = await ogImageFromProfile(
profile.pfp?.image as string,
+ context.env,
context.traceSpan
)
} else {
@@ -107,20 +112,20 @@ export const loader: LoaderFunction = async ({ request, params, context }) => {
const splittedUrl = request.url.split('/')
const path = splittedUrl[splittedUrl.length - 1]
- // Check if the accountURN in jwt matches with accountURN in URL
- const isOwner = jwt ? parseJwt(jwt).sub === accountURN : false
+ // Check if the identityURN in jwt matches with identityURN in URL
+ const isOwner = jwt ? parseJwt(jwt).sub === identityURN : false
return json({
uname: profile.displayName || address,
ogImage: ogImage || defaultOG,
profile,
- accountURN,
+ identityURN,
path,
isOwner,
})
} catch (error) {
console.log(
- `Galaxy did not return a profile for address ${accountURN}. Moving on.`
+ `Galaxy did not return a profile for address ${identityURN}. Moving on.`
)
console.error(getErrorCause(error))
throw new Response('No address found', { status: 404 })
@@ -166,11 +171,11 @@ export const meta: MetaFunction = ({
const UserAddressLayout = () => {
//TODO: this needs to be optimized so profile isn't fetched from the loader
//but used from context alone.
- const { profile, path, isOwner, accountURN } = useLoaderData<{
+ const { profile, path, isOwner, identityURN } = useLoaderData<{
profile: FullProfile
path: string
isOwner: boolean
- accountURN: string
+ identityURN: string
}>()
const finalProfile = profile
@@ -251,7 +256,7 @@ const UserAddressLayout = () => {
>
{
const { profile, isOwner } = useOutletContext<{
profile: FullProfile
isOwner: boolean
- accountURN: AccountURN
+ identityURN: IdentityURN
}>()
const { displayName, pfp } = profile
diff --git a/apps/profile/app/routes/account.tsx b/apps/profile/app/routes/account.tsx
index 004b5d7599..cd620ab1bd 100644
--- a/apps/profile/app/routes/account.tsx
+++ b/apps/profile/app/routes/account.tsx
@@ -11,22 +11,22 @@ import { parseJwt, requireJWT } from '~/utils/session.server'
import styles from '~/styles/account.css'
-import type { AccountURN } from '@proofzero/urns/account'
-import { AccountURNSpace } from '@proofzero/urns/account'
+import type { IdentityURN } from '@proofzero/urns/identity'
+import { IdentityURNSpace } from '@proofzero/urns/identity'
import HeadNav, { links as headNavLink } from '~/components/head-nav'
import { DesktopSideNav } from '~/components/side-nav'
import {
- getAccountAddresses,
- getAccountProfile,
- getAddressProfiles,
+ getIdentityAccounts,
+ getIdentityProfile,
+ getAccountProfiles,
} from '~/helpers/profile'
import type {
- GetAddressProfilesQuery,
+ GetAccountProfilesQuery,
Node,
Profile,
} from '@proofzero/galaxy-client'
-import type { AddressURN } from '@proofzero/urns/address'
+import type { AccountURN } from '@proofzero/urns/account'
import type { FullProfile } from '~/types'
import {
toast,
@@ -51,53 +51,54 @@ export const loader: LoaderFunction = async ({ request, context }) => {
if (url.pathname === '/account') {
return redirect('/account/dashboard')
}
- const jwt = await requireJWT(request)
+ const jwt = await requireJWT(request, context.env)
// We go through this because
// the context had connected addresses
// but don't have the profiles
// and it's complex to send them to a loader / action
- const accountURN = parseJwt(jwt).sub as AccountURN
+ const identityURN = parseJwt(jwt).sub as IdentityURN
try {
- const [loggedInUserProfile, addresses] = await Promise.all([
- getAccountProfile({ jwt, accountURN }, context.traceSpan),
- getAccountAddresses({ jwt, traceSpan: context.traceSpan }),
+ const [loggedInUserProfile, accounts] = await Promise.all([
+ getIdentityProfile({ jwt, identityURN }, context.env, context.traceSpan),
+ getIdentityAccounts({ jwt }, context.env, context.traceSpan),
])
- const addressTypeUrns = addresses.map((a) => ({
+ const accountTypeUrns = accounts.map((a) => ({
urn: a.baseUrn,
nodeType: a.rc.node_type,
}))
- let connectedProfiles: GetAddressProfilesQuery['addressProfiles'] = []
+ let connectedProfiles: GetAccountProfilesQuery['accountProfiles'] = []
// We get the full profiles
connectedProfiles =
- (await getAddressProfiles(
+ (await getAccountProfiles(
jwt,
- addressTypeUrns.map((atu) => atu.urn as AddressURN),
+ accountTypeUrns.map((atu) => atu.urn as AccountURN),
+ context.env,
context.traceSpan
)) ?? []
// This mapps to a new structure that contains urn also;
- // useful for list keys as well as for address context actions as param
+ // useful for list keys as well as for account context actions as param
const normalizedConnectedProfiles = connectedProfiles.map((p, i) => ({
- ...addressTypeUrns[i],
+ ...accountTypeUrns[i],
...p,
}))
- const cryptoAddresses =
- addresses?.filter((e) => {
+ const cryptoAccounts =
+ accounts?.filter((e) => {
if (!e.rc) return false
return e?.rc?.node_type === 'crypto'
}) || []
return json({
connectedProfiles: normalizedConnectedProfiles,
- cryptoAddresses,
- accountURN,
+ cryptoAccounts,
+ identityURN,
profile: loggedInUserProfile,
})
} catch (error) {
@@ -124,12 +125,12 @@ const notify = (success: boolean = true) => {
}
export default function AccountLayout() {
- const { profile, accountURN, connectedProfiles, cryptoAddresses } =
+ const { profile, identityURN, connectedProfiles, cryptoAccounts } =
useLoaderData<{
profile: FullProfile
- accountURN: AccountURN
+ identityURN: IdentityURN
connectedProfiles: Node & Profile[]
- cryptoAddresses: Node[]
+ cryptoAccounts: Node[]
}>()
return (
@@ -144,7 +145,7 @@ export default function AccountLayout() {
>
{
rounded-lg transition-opacity ${
activeId ? 'opacity-0' : 'opacity-100'
}`}
- disabled={!cryptoAddresses?.length}
- onClick={() => setIsOpen(!!cryptoAddresses?.length)}
+ disabled={!cryptoAccounts?.length}
+ onClick={() => setIsOpen(!!cryptoAccounts?.length)}
>
- {/* Links that are already in account DO */}
+ {/* Links that are already in identity DO */}
({
@@ -454,9 +467,8 @@ export default function AccountSettingsLinks() {
itemRenderer={(item) => {
return (
- {}} />
+ { }} />
diff --git a/apps/profile/app/routes/account/profile.tsx b/apps/profile/app/routes/account/profile.tsx
index b05207d4c0..739c29178a 100644
--- a/apps/profile/app/routes/account/profile.tsx
+++ b/apps/profile/app/routes/account/profile.tsx
@@ -5,11 +5,10 @@ import {
useTransition,
useFetcher,
} from '@remix-run/react'
-import { Button } from '@proofzero/design-system/src/atoms/buttons/Button'
+import { Button, Text } from '@proofzero/design-system'
import { FaBriefcase, FaMapMarkerAlt } from 'react-icons/fa'
import InputText from '~/components/inputs/InputText'
import { getAccessToken, parseJwt } from '~/utils/session.server'
-import { Text } from '@proofzero/design-system/src/atoms/text/Text'
import { Avatar } from '@proofzero/design-system/src/atoms/profile/avatar/Avatar'
import { Spinner } from '@proofzero/design-system/src/atoms/spinner/Spinner'
@@ -27,7 +26,9 @@ import { FullProfileSchema } from '~/validation'
import InputTextarea from '@proofzero/design-system/src/atoms/form/InputTextarea'
export const action: ActionFunction = async ({ request, context }) => {
- const { sub: accountURN } = parseJwt(await getAccessToken(request))
+ const { sub: identityURN } = parseJwt(
+ await getAccessToken(request, context.env)
+ )
const formData = await request.formData()
@@ -39,7 +40,10 @@ export const action: ActionFunction = async ({ request, context }) => {
let computedIsToken =
formData.get('pfp_isToken')?.toString() === '1' ? true : false
- const currentProfile = await ProfileKV.get
(accountURN!, 'json')
+ const currentProfile = await context.env.ProfileKV.get(
+ identityURN!,
+ 'json'
+ )
const updatedProfile = Object.assign(currentProfile || {}, {
displayName,
pfp: {
@@ -60,20 +64,25 @@ export const action: ActionFunction = async ({ request, context }) => {
}
}
- await ProfileKV.put(accountURN!, JSON.stringify(zodValidation.data))
+ await context.env.ProfileKV.put(
+ identityURN!,
+ JSON.stringify(zodValidation.data)
+ )
return null
}
export default function AccountSettingsProfile() {
- const { notify, profile, accountURN } = useOutletContext<{
+ const { notify, profile, identityURN } = useOutletContext<{
profile: FullProfile
notify: (success: boolean) => void
- accountURN: string
+ identityURN: string
}>()
const { displayName, pfp, bio, job, location } = profile
+ const [bioInput, setBioInput] = useState(bio || '')
+
const [pfpUrl, setPfpUrl] = useState(pfp?.image || undefined)
const [isToken, setIsToken] = useState(false)
@@ -162,7 +171,7 @@ export default function AccountSettingsProfile() {
(nft: NFT) => nft.contract.address === collection
)[0].chain.chain
: null
- getMoreNftsModal(modalFetcher, accountURN, collection, chain)
+ getMoreNftsModal(modalFetcher, identityURN, collection, chain)
}, [collection])
// --------------------- END OF MODAL PART ---------------------- //
@@ -317,7 +326,8 @@ export default function AccountSettingsProfile() {
heading="Bio"
charLimit={256}
rows={3}
- defaultValue={bio || ''}
+ value={bioInput}
+ onChange={setBioInput}
error={actionData?.errors.bio}
/>
diff --git a/apps/profile/app/routes/account/profile/image-upload-url.tsx b/apps/profile/app/routes/account/profile/image-upload-url.tsx
index b11ab6a11b..d38a3a6bc7 100644
--- a/apps/profile/app/routes/account/profile/image-upload-url.tsx
+++ b/apps/profile/app/routes/account/profile/image-upload-url.tsx
@@ -5,15 +5,15 @@ import { requireJWT } from '~/utils/session.server'
import createImageClient from '@proofzero/platform-clients/image'
import { generateTraceContextHeaders } from '@proofzero/platform-middleware/trace'
-export const loader: LoaderFunction = async ({ request }) => {
- await requireJWT(request)
+export const loader: LoaderFunction = async ({ request, context }) => {
+ await requireJWT(request, context.env)
return redirect('/account/profile')
}
export const action: ActionFunction = async ({ request, context }) => {
- await requireJWT(request)
+ await requireJWT(request, context.env)
- const imageClient = createImageClient(Images, {
+ const imageClient = createImageClient(context.env.Images, {
headers: generateTraceContextHeaders(context.traceSpan),
})
const { uploadURL } = await imageClient.upload.mutate()
diff --git a/apps/profile/app/routes/api/nfts/collection.tsx b/apps/profile/app/routes/api/nfts/collection.tsx
index 0b89a2175c..be8c2f36b1 100644
--- a/apps/profile/app/routes/api/nfts/collection.tsx
+++ b/apps/profile/app/routes/api/nfts/collection.tsx
@@ -1,19 +1,19 @@
-import type { AccountURN } from '@proofzero/urns/account'
+import type { IdentityURN } from '@proofzero/urns/identity'
import type { LoaderFunction } from '@remix-run/cloudflare'
import { json } from '@remix-run/cloudflare'
import { getAccessToken } from '~/utils/session.server'
import { getNfts } from '~/helpers/alchemy'
-import { getAccountCryptoAddresses } from '~/helpers/profile'
+import { getIdentityCryptoAddresses } from '~/helpers/profile'
import type { AlchemyChain } from '@proofzero/packages/alchemy-client'
import { JsonError } from '@proofzero/utils/errors'
export const loader: LoaderFunction = async ({ request, context }) => {
const srcUrl = new URL(request.url)
- const jwt = await getAccessToken(request)
+ const jwt = await getAccessToken(request, context.env)
- const owner = srcUrl.searchParams.get('owner') as AccountURN
+ const owner = srcUrl.searchParams.get('owner') as IdentityURN
if (!owner) {
throw new Error('Owner is required')
}
@@ -29,19 +29,25 @@ export const loader: LoaderFunction = async ({ request, context }) => {
}
try {
- const addresses = await getAccountCryptoAddresses({
- jwt,
- traceSpan: context.traceSpan,
- })
-
- const nftsForAccount = await getNfts({
- addresses,
- contractAddresses: [collection],
- chain,
- })
+ const addresses = await getIdentityCryptoAddresses(
+ {
+ jwt,
+ },
+ context.env,
+ context.traceSpan
+ )
+
+ const nftsForIdentity = await getNfts(
+ {
+ addresses,
+ contractAddresses: [collection],
+ chain,
+ },
+ context.env
+ )
return json({
- ownedNfts: nftsForAccount,
+ ownedNfts: nftsForIdentity,
})
} catch (error) {
throw JsonError(error, context.traceSpan.getTraceParent())
diff --git a/apps/profile/app/routes/api/nfts/index.tsx b/apps/profile/app/routes/api/nfts/index.tsx
index 050eb4334b..b103977f01 100644
--- a/apps/profile/app/routes/api/nfts/index.tsx
+++ b/apps/profile/app/routes/api/nfts/index.tsx
@@ -1,4 +1,4 @@
-import type { AccountURN } from '@proofzero/urns/account'
+import type { IdentityURN } from '@proofzero/urns/identity'
import type { LoaderFunction } from '@remix-run/cloudflare'
import { json } from '@remix-run/cloudflare'
@@ -6,31 +6,37 @@ import { JsonError } from '@proofzero/utils/errors'
import { getAccessToken } from '~/utils/session.server'
import { getContractsForAllChains } from '~/helpers/alchemy'
-import { getAccountCryptoAddresses } from '~/helpers/profile'
+import { getIdentityCryptoAddresses } from '~/helpers/profile'
export const loader: LoaderFunction = async ({ request, context }) => {
const srcUrl = new URL(request.url)
- const jwt = await getAccessToken(request)
+ const jwt = await getAccessToken(request, context.env)
- const owner = srcUrl.searchParams.get('owner') as AccountURN
+ const owner = srcUrl.searchParams.get('owner') as IdentityURN
if (!owner) {
throw new Error('Owner is required')
}
try {
- const addresses = await getAccountCryptoAddresses({
- jwt,
- traceSpan: context.traceSpan,
- })
-
- const nftsForAccount = await getContractsForAllChains({
- addresses,
- excludeFilters: ['SPAM'],
- })
+ const addresses = await getIdentityCryptoAddresses(
+ {
+ jwt,
+ },
+ context.env,
+ context.traceSpan
+ )
+
+ const nftsForIdentity = await getContractsForAllChains(
+ {
+ addresses,
+ excludeFilters: ['SPAM'],
+ },
+ context.env
+ )
return json({
- ...nftsForAccount,
+ ...nftsForIdentity,
})
} catch (error) {
throw JsonError(error, context.traceSpan.getTraceParent())
diff --git a/apps/profile/app/routes/auth/callback.tsx b/apps/profile/app/routes/auth/callback.tsx
index 2e557f4a4b..dec1814f2f 100644
--- a/apps/profile/app/routes/auth/callback.tsx
+++ b/apps/profile/app/routes/auth/callback.tsx
@@ -1,8 +1,8 @@
import type { LoaderFunction } from '@remix-run/cloudflare'
import { getRollupAuthenticator } from '~/utils/session.server'
-export const loader: LoaderFunction = async ({ request }) => {
- const authenticator = getRollupAuthenticator()
+export const loader: LoaderFunction = async ({ request, context }) => {
+ const authenticator = getRollupAuthenticator(context.env)
await authenticator.authenticate('rollup', request, {
successRedirect: '/account',
})
diff --git a/apps/profile/app/routes/auth/index.tsx b/apps/profile/app/routes/auth/index.tsx
index c1dc1ded84..cbe9b94cfd 100644
--- a/apps/profile/app/routes/auth/index.tsx
+++ b/apps/profile/app/routes/auth/index.tsx
@@ -1,8 +1,8 @@
import type { LoaderFunction } from '@remix-run/cloudflare'
import { getRollupAuthenticator } from '~/utils/session.server'
-export const loader: LoaderFunction = async ({ request }) => {
- const authenticator = getRollupAuthenticator()
+export const loader: LoaderFunction = async ({ request, context }) => {
+ const authenticator = getRollupAuthenticator(context.env)
await authenticator.isAuthenticated(request, {
successRedirect: '/account',
// failureRedirect: 'https://rollup.id/profiles',
diff --git a/apps/profile/app/routes/signout.tsx b/apps/profile/app/routes/signout.tsx
index 3c5f5194fa..24d49c9b7a 100644
--- a/apps/profile/app/routes/signout.tsx
+++ b/apps/profile/app/routes/signout.tsx
@@ -1,17 +1,17 @@
import type { ActionFunction, LoaderFunction } from '@remix-run/cloudflare'
import { initAuthenticator } from '~/utils/session.server'
-const signOut = (request: Request) => {
- const authenticator = initAuthenticator()
+const signOut = (request: Request, env: Env) => {
+ const authenticator = initAuthenticator(env)
return authenticator.logout(request, {
redirectTo: `/auth`,
})
}
-export const loader: LoaderFunction = async ({ request }) => {
- return signOut(request)
+export const loader: LoaderFunction = async ({ request, context }) => {
+ return signOut(request, context.env)
}
-export const action: ActionFunction = async ({ request }) => {
- return signOut(request)
+export const action: ActionFunction = async ({ request, context }) => {
+ return signOut(request, context.env)
}
diff --git a/apps/profile/app/utils/session.server.tsx b/apps/profile/app/utils/session.server.tsx
index e998f939d6..a3bc5cdd96 100644
--- a/apps/profile/app/utils/session.server.tsx
+++ b/apps/profile/app/utils/session.server.tsx
@@ -22,32 +22,22 @@ import {
import type { FullProfile, RollupAuth } from '~/types'
-const sessionKey = SECRET_SESSION_KEY
-if (!sessionKey) {
- throw new Error('SECRET_SESSION_KEY must be set')
-}
-
-const sessionSecret = SECRET_SESSION_SALT
-if (!sessionSecret) {
- throw new Error('SECRET_SESSION_SALT must be set')
-}
-
-const getProfileSessionStorage = () =>
+const getProfileSessionStorage = (env: Env) =>
createCookieSessionStorage({
cookie: {
- domain: COOKIE_DOMAIN,
+ domain: env.COOKIE_DOMAIN,
httpOnly: true,
name: '_rollup_profile_oauth',
path: '/',
sameSite: 'lax',
secure: process.env.NODE_ENV === 'production',
maxAge: 7776000 /*60 * 60 * 24 * 90*/,
- secrets: [sessionSecret],
+ secrets: [env.SECRET_SESSION_SALT],
},
})
-export const initAuthenticator = () => {
- const oauthStorage = getProfileSessionStorage()
+export const initAuthenticator = (env: Env) => {
+ const oauthStorage = getProfileSessionStorage(env)
return new Authenticator(oauthStorage)
}
@@ -63,21 +53,21 @@ export class RollupAuthStrategy extends OAuth2Strategy<
}
}
-export const getRollupAuthenticator = () => {
- const authenticator = initAuthenticator()
+export const getRollupAuthenticator = (env: Env) => {
+ const authenticator = initAuthenticator(env)
const rollupStrategy = new RollupAuthStrategy(
{
- authorizationURL: PASSPORT_AUTH_URL,
- tokenURL: PASSPORT_TOKEN_URL,
- clientID: PROFILE_CLIENT_ID,
- clientSecret: PROFILE_CLIENT_SECRET,
- callbackURL: REDIRECT_URI,
+ authorizationURL: env.PASSPORT_AUTH_URL,
+ tokenURL: env.PASSPORT_TOKEN_URL,
+ clientID: env.PROFILE_CLIENT_ID,
+ clientSecret: env.PROFILE_CLIENT_SECRET,
+ callbackURL: env.REDIRECT_URI,
},
async ({ accessToken, refreshToken, extraParams }) => {
const parsedId = parseJwt(extraParams.id_token)
const { sub, name, picture } = parsedId
- const profile = await ProfileKV.get(sub!, 'json')
+ const profile = await env.ProfileKV.get(sub!, 'json')
if (!profile) {
const newProfile = {
displayName: name,
@@ -85,14 +75,14 @@ export const getRollupAuthenticator = () => {
image: picture,
},
} as FullProfile
- await ProfileKV.put(sub!, JSON.stringify(newProfile))
+ await env.ProfileKV.put(sub!, JSON.stringify(newProfile))
}
return {
accessToken: JSON.stringify(
- await encryptSession(sessionKey, accessToken)
+ await encryptSession(env.SECRET_SESSION_KEY, accessToken)
),
refreshToken: JSON.stringify(
- await encryptSession(sessionKey, refreshToken)
+ await encryptSession(env.SECRET_SESSION_KEY, refreshToken)
),
extraParams: {},
}
@@ -105,15 +95,19 @@ export const getRollupAuthenticator = () => {
// our authenticate function receives the Request, the Session and a Headers
// we make the headers optional so loaders don't need to pass one
// https://sergiodxa.com/articles/working-with-refresh-tokens-in-remix
-export async function requireJWT(request: Request, headers = new Headers()) {
- const session = await getProfileSession(request)
+export async function requireJWT(
+ request: Request,
+ env: Env,
+ headers = new Headers()
+) {
+ const session = await getProfileSession(request, env)
const { user } = session.data
if (!user) throw redirect('/auth')
try {
const { cipher, iv } = JSON.parse(user.accessToken)
if (!cipher || !iv) throw redirect('/auth')
- const accessToken = await decryptSession(sessionKey, cipher, iv)
+ const accessToken = await decryptSession(env.SECRET_SESSION_KEY, cipher, iv)
checkToken(accessToken)
return accessToken
} catch (error) {
@@ -124,16 +118,22 @@ export async function requireJWT(request: Request, headers = new Headers()) {
const { cipher, iv } = JSON.parse(user.refreshToken)
if (!cipher || !iv) throw redirect('/auth')
const accessToken = await refreshAccessToken({
- tokenURL: PASSPORT_TOKEN_URL,
- refreshToken: await decryptSession(sessionKey, cipher, iv),
- clientId: PROFILE_CLIENT_ID,
- clientSecret: PROFILE_CLIENT_SECRET,
+ tokenURL: env.PASSPORT_TOKEN_URL,
+ refreshToken: await decryptSession(
+ env.SECRET_SESSION_KEY,
+ cipher,
+ iv
+ ),
+ clientId: env.PROFILE_CLIENT_ID,
+ clientSecret: env.PROFILE_CLIENT_SECRET,
})
user.accessToken = JSON.stringify(
- await encryptSession(sessionKey, accessToken)
+ await encryptSession(env.SECRET_SESSION_KEY, accessToken)
)
session.set('user', user)
- const cookie = await getProfileSessionStorage().commitSession(session)
+ const cookie = await getProfileSessionStorage(env).commitSession(
+ session
+ )
headers.append('Set-Cookie', cookie)
if (request.method === 'GET') throw redirect(request.url, { headers })
@@ -155,12 +155,12 @@ export async function requireJWT(request: Request, headers = new Headers()) {
}
}
-export async function isValidJWT(request: Request): Promise {
- const session = await getProfileSession(request)
+export async function isValidJWT(request: Request, env: Env): Promise {
+ const session = await getProfileSession(request, env)
const user = session.get('user')
const { cipher, iv } = JSON.parse(user.accessToken)
- const jwt = await decryptSession(sessionKey, cipher, iv)
+ const jwt = await decryptSession(env.SECRET_SESSION_KEY, cipher, iv)
if (!jwt || typeof jwt !== 'string') {
return false
@@ -183,18 +183,21 @@ export function parseJwt(token: string): JWTPayload {
}
// TODO: reset cookie maxAge if valid
-export async function getProfileSession(request: Request) {
- const storage = getProfileSessionStorage()
+export async function getProfileSession(request: Request, env: Env) {
+ const storage = getProfileSessionStorage(env)
return storage.getSession(request.headers.get('Cookie'))
}
-export async function commitProfileSession(session: Session) {
- const storage = getProfileSessionStorage()
+export async function commitProfileSession(session: Session, env: Env) {
+ const storage = getProfileSessionStorage(env)
return storage.commitSession(session)
}
-export const getAccessToken = async (request: Request): Promise => {
- const session = await getProfileSession(request)
+export const getAccessToken = async (
+ request: Request,
+ env: Env
+): Promise => {
+ const session = await getProfileSession(request, env)
const { cipher, iv } = JSON.parse(session.get('user').accessToken)
- return decryptSession(sessionKey, cipher, iv)
+ return decryptSession(env.SECRET_SESSION_KEY, cipher, iv)
}
diff --git a/apps/profile/app/validation.ts b/apps/profile/app/validation.ts
index ebab2d837f..4b57f1b33f 100644
--- a/apps/profile/app/validation.ts
+++ b/apps/profile/app/validation.ts
@@ -54,7 +54,7 @@ export const NFTDetailSchema = z.object({
export const NFTPropertySchema = z.object({
display: z.string(),
name: z.string(),
- value: z.string(),
+ value: z.string().or(z.number()),
})
export const NFTSchema = z.object({
diff --git a/apps/profile/bindings.d.ts b/apps/profile/bindings.d.ts
new file mode 100644
index 0000000000..54328a6408
--- /dev/null
+++ b/apps/profile/bindings.d.ts
@@ -0,0 +1,28 @@
+interface Env {
+ NODE_ENV: string
+ COOKIE_DOMAIN: string
+ SECRET_SESSION_KEY: string
+ SECRET_SESSION_SALT: string
+ PASSPORT_URL: string
+ IMAGES_URL: string
+ PASSPORT_AUTH_URL: string
+ PASSPORT_TOKEN_URL: string
+ INTERNAL_GOOGLE_ANALYTICS_TAG: string
+
+ PROFILE_CLIENT_ID: string
+ PROFILE_CLIENT_SECRET: string
+ REDIRECT_URI: string
+
+ Galaxy: Fetcher
+ Address: Fetcher
+ Images: Fetcher
+
+ ProfileKV: KVNamespace
+ PROFILE_VERSION: number
+ ALCHEMY_ETH_NETWORK: 'mainnet' | 'goerli'
+ APIKEY_ALCHEMY_ETH: string
+ ALCHEMY_POLYGON_NETWORK: 'mainnet' | 'mumbai'
+ APIKEY_ALCHEMY_POLYGON: string
+ //Needed to make Remix work with Cloudflare module workers
+ __STATIC_CONTENT: string
+}
diff --git a/apps/profile/global.d.ts b/apps/profile/global.d.ts
deleted file mode 100644
index f73ecccaed..0000000000
--- a/apps/profile/global.d.ts
+++ /dev/null
@@ -1,28 +0,0 @@
-export const seviceBindings = true
-
-declare global {
- const NODE_ENV: string
- const COOKIE_DOMAIN: string
- const SECRET_SESSION_KEY: string
- const SECRET_SESSION_SALT: string
- const PASSPORT_URL: string
- const IMAGES_URL: string
- const PASSPORT_AUTH_URL: string
- const PASSPORT_TOKEN_URL: string
- const INTERNAL_GOOGLE_ANALYTICS_TAG: string
-
- const PROFILE_CLIENT_ID: string
- const PROFILE_CLIENT_SECRET: string
- const REDIRECT_URI: string
-
- const Galaxy: Fetcher
- const Address: Fetcher
- const Images: Fetcher
-
- const ProfileKV: KVNamespace
- const PROFILE_VERSION: number
- const ALCHEMY_ETH_NETWORK: 'mainnet' | 'goerli'
- const APIKEY_ALCHEMY_ETH: string
- const ALCHEMY_POLYGON_NETWORK: 'mainnet' | 'mumbai'
- const APIKEY_ALCHEMY_POLYGON: string
-}
diff --git a/apps/profile/globals.d.ts b/apps/profile/globals.d.ts
new file mode 100644
index 0000000000..5b61595d7f
--- /dev/null
+++ b/apps/profile/globals.d.ts
@@ -0,0 +1,4 @@
+declare module '__STATIC_CONTENT_MANIFEST' {
+ const value: string
+ export default value
+}
diff --git a/apps/profile/package.json b/apps/profile/package.json
index 11ea44ce23..8941f46888 100644
--- a/apps/profile/package.json
+++ b/apps/profile/package.json
@@ -13,7 +13,7 @@
"dev:css": "npx tailwindcss -o ./app/styles/tailwind.css --watch",
"dev:sass": "sass --watch app/:app/",
"dev:remix": "remix watch",
- "dev:wrangler": "wrangler dev --local --persist",
+ "dev:wrangler": "wrangler dev ",
"dev": "echo \"No dev for profile. Please use start.\"",
"start": "env-cmd --file .dev.env run-p 'dev:*'",
"e2e": "cross-env NODE_ENV=test npx playwright test",
@@ -41,14 +41,14 @@
"ethers": "5.7.2",
"flowbite": "1.6.5",
"flowbite-react": "0.4.3",
- "graphql": "16.6.0",
+ "graphql": "16.8.1",
"graphql-request": "5.0.0",
"graphql-tag": "2.12.6",
"history": "5.3.0",
"qs": "6.11.0",
"react": "18.2.0",
"react-dom": "18.2.0",
- "react-icons": "4.8.0",
+ "react-icons": "4.10.1",
"react-infinite-scroll-component": "6.1.0",
"react-masonry-css": "1.0.16",
"react-popper": "2.3.0",
@@ -57,13 +57,13 @@
"remix-auth-oauth2": "1.5.0",
"tw-elements": "1.0.0-alpha12",
"urns": "0.6.0",
- "wagmi": "1.0.9"
+ "wagmi": "1.1.1"
},
"devDependencies": {
"@babel/core": "7.20.2",
"@cloudflare/workers-types": "4.20221111.1",
"@mdx-js/react": "2.1.5",
- "@playwright/test": "1.32.3",
+ "@playwright/test": "1.35.1",
"@remix-run/dev": "1.14.0",
"@remix-run/eslint-config": "1.14.0",
"@remix-run/serve": "1.14.0",
@@ -109,10 +109,10 @@
"sass-loader": "13.2.0",
"storybook-addon-sass-postcss": "0.1.3",
"style-loader": "3.3.1",
- "tailwindcss": "3.2.4",
+ "tailwindcss": "3.3.3",
"typescript": "5.0.4",
"webpack": "5.75.0",
- "wrangler": "2.14.0"
+ "wrangler": "3.2.0"
},
"engines": {
"node": ">=16.13"
diff --git a/apps/profile/remix.config.js b/apps/profile/remix.config.js
index 5dda68be85..88e95e88b3 100644
--- a/apps/profile/remix.config.js
+++ b/apps/profile/remix.config.js
@@ -1,11 +1,16 @@
/** @type {import('@remix-run/dev').AppConfig} */
module.exports = {
- serverBuildTarget: 'cloudflare-workers',
server: './server.ts',
devServerBroadcastDelay: 1000,
ignoredRouteFiles: ['**/.*'],
- // appDirectory: "app",
- // assetsBuildDirectory: "public/build",
- // serverBuildPath: "build/index.js",
- // publicPath: "/build/",
+ // Bundles everything _except_ `__STATIC_CONTENT_MANIFEST`. Be careful if editing.
+ serverDependenciesToBundle: [/^(?!(__STATIC_CONTENT_MANIFEST)$).*$/u],
+ // Optional, but highly recommended for fitting within the Worker bundle size
+ serverMinify: true,
+ serverModuleFormat: 'esm',
+ // YMMV with setting to `node`, most likely anything but simple code won’t work with the CF node compat layer
+ serverPlatform: 'neutral',
+ serverMainFields: ['browser', 'module', 'main'],
+ // Try the `workerd` condition first (this is new and slowly standardising), then `worker`, then `browser` (equivalent of `serverPlatform: browser` but without extra behaviour.
+ serverConditions: ['workerd', 'worker', 'browser'],
}
diff --git a/apps/profile/server.ts b/apps/profile/server.ts
index 5d9ded210d..cbdeb106af 100644
--- a/apps/profile/server.ts
+++ b/apps/profile/server.ts
@@ -8,26 +8,21 @@ import {
handleAsset,
} from '@remix-run/cloudflare-workers'
import * as build from '@remix-run/dev/server-build'
+import manifestJSON from '__STATIC_CONTENT_MANIFEST'
+let manifest = JSON.parse(manifestJSON)
declare module '@remix-run/server-runtime' {
interface AppLoadContext {
traceSpan: TraceSpan
+ env: Env
}
}
-const requestHandler = createRequestHandler({
- build,
- mode: process.env.NODE_ENV,
- getLoadContext: (event) => {
- const traceSpan = (event as TraceableFetchEvent).traceSpan
- return {
- traceSpan,
- }
- },
-})
-
-const handleEvent = async (event: FetchEvent) => {
- let response = await handleAsset(event, build)
+const handleEvent = async (event: FetchEvent, env: Env) => {
+ let response = await handleAsset(event, build, {
+ ASSET_NAMESPACE: env.__STATIC_CONTENT,
+ ASSET_MANIFEST: manifest,
+ })
if (!response) {
//Create a new trace span with no parent
@@ -40,6 +35,19 @@ const handleEvent = async (event: FetchEvent) => {
`Started HTTP handler for ${reqURL.pathname}/${reqURL.searchParams}`,
newTraceSpan.toString()
)
+
+ const requestHandler = createRequestHandler({
+ build,
+ mode: process.env.NODE_ENV,
+ getLoadContext: (event) => {
+ const traceSpan = (event as TraceableFetchEvent).traceSpan
+ return {
+ traceSpan,
+ env,
+ }
+ },
+ })
+
try {
response = await requestHandler(newEvent)
} finally {
@@ -53,6 +61,13 @@ const handleEvent = async (event: FetchEvent) => {
return response
}
-addEventListener('fetch', async (event: FetchEvent) => {
- event.respondWith(handleEvent(event))
-})
+export default {
+ async fetch(req: Request, env: Env, ctx: ExecutionContext) {
+ //This is the smallest set of event props Remix needs to handle assets correctly
+ const event = {
+ request: req,
+ waitUntil: ctx.waitUntil.bind(ctx),
+ } as FetchEvent
+ return await handleEvent(event, env)
+ },
+}
diff --git a/apps/profile/tests/helpers.ts b/apps/profile/tests/helpers.ts
index f8606dda60..c50599243e 100644
--- a/apps/profile/tests/helpers.ts
+++ b/apps/profile/tests/helpers.ts
@@ -1,42 +1,45 @@
-import fs from "fs";
-import path from "path";
+import fs from 'fs'
+import path from 'path'
-import { ethers } from "ethers";
+import { ethers } from 'ethers'
-import { test as baseTest } from "@playwright/test";
+import { test as baseTest } from '@playwright/test'
+import { AuthenticationScreenDefaults } from '@proofzero/design-system/src/templates/authentication/Authentication'
-import { signMessageTemplate } from "../app/utils/constants";
-
-export const dappUrl = `${process.env.DAPP_SCHEMA}://${process.env.DAPP_HOST}:${process.env.DAPP_PORT}`;
+export const dappUrl = `${process.env.DAPP_SCHEMA}://${process.env.DAPP_HOST}:${process.env.DAPP_PORT}`
export const users = {
- invited: new ethers.Wallet(process.env.ETH_GOERLI_PK || ""),
+ invited: new ethers.Wallet(process.env.ETH_GOERLI_PK || ''),
uninvited: ethers.Wallet.createRandom(),
-};
+}
export const invitedUsertest = baseTest.extend({
storageState: async ({ browser }, use, testInfo) => {
// Override storage state, use worker index to look up logged-in info and generate it lazily.
const fileName = path.join(
testInfo.project.outputDir,
- "storage-invitedUser.json"
- );
+ 'storage-invitedUser.json'
+ )
if (!fs.existsSync(fileName)) {
// Make sure we are not using any other storage state.
- const address = users.invited.address;
- const nonceUrl = `${dappUrl}/auth/nonce/${address}?isTest=true`;
+ const address = users.invited.address
+ const nonceUrl = `${dappUrl}/auth/nonce/${address}?isTest=true`
- const page = await browser.newPage({ storageState: undefined });
- await page.goto(nonceUrl);
+ const page = await browser.newPage({ storageState: undefined })
+ await page.goto(nonceUrl)
// get nonce
- const signUrl = page.url();
- const url = new URL(signUrl);
- const nonce = url.searchParams.get("nonce") || "";
+ const signUrl = page.url()
+ const url = new URL(signUrl)
+ const nonce = url.searchParams.get('nonce') || ''
// sign a login message
- const nonceMessage = signMessageTemplate.replace("{{nonce}}", nonce);
- const signature = await users.invited.signMessage(nonceMessage);
+ const nonceMessage =
+ AuthenticationScreenDefaults.defaultSignMessage.replace(
+ '{{nonce}}',
+ nonce
+ )
+ const signature = await users.invited.signMessage(nonceMessage)
// get jwt
await page.request.post(signUrl, {
@@ -44,12 +47,12 @@ export const invitedUsertest = baseTest.extend({
nonce,
signature,
},
- });
+ })
// Save signed-in state to 'storageState.json'.
- await page.context().storageState({ path: fileName });
- await page.close();
+ await page.context().storageState({ path: fileName })
+ await page.close()
}
- await use(fileName);
+ await use(fileName)
},
-});
+})
diff --git a/apps/profile/wrangler.current.toml b/apps/profile/wrangler.current.toml
new file mode 100644
index 0000000000..6a9b55e864
--- /dev/null
+++ b/apps/profile/wrangler.current.toml
@@ -0,0 +1,42 @@
+name = "profile"
+main = "./build/index.js"
+compatibility_date = "2022-04-05"
+compatibility_flags = ["no_minimal_subrequests"]
+workers_dev = false
+logpush = true
+
+[build]
+command = "yarn build"
+
+[site]
+bucket = "./public"
+
+[env.current]
+kv_namespaces = [
+ { binding = "ProfileKV", id = "4aae166942744cce9569daefbbeea7f2" },
+]
+
+routes = [
+ { pattern = "my.rollup.id", custom_domain = true, zone_name = "rollup.id" },
+]
+
+services = [
+ { binding = "Galaxy", service = "galaxy-current" },
+ { binding = "Images", service = "images-current" },
+]
+
+[env.current.vars]
+PASSPORT_URL = "https://passport.rollup.id"
+PASSPORT_AUTH_URL = "https://passport.rollup.id/authorize"
+IMAGES_URL = "https://images.rollup.id/trpc"
+PASSPORT_TOKEN_URL = "https://passport.rollup.id/token"
+CLIENT_ID = ""
+REDIRECT_URI = "https://my.rollup.id/auth/callback"
+COOKIE_DOMAIN = "rollup.id"
+TWITTER_URL = "https://twitter.com/rollupid"
+DISCORD_URL = "https://discord.gg/rollupid"
+MINTPFP_CONTRACT_ADDRESS = "0x3ebfaFE60F3Ac34f476B2f696Fc2779ff1B03193"
+INTERNAL_GOOGLE_ANALYTICS_TAG = "G-675VJMWSRY"
+PROFILE_VERSION = 1
+ALCHEMY_ETH_NETWORK = "mainnet"
+ALCHEMY_POLYGON_NETWORK = "mainnet"
diff --git a/apps/profile/wrangler.dev.toml b/apps/profile/wrangler.dev.toml
new file mode 100644
index 0000000000..61d3ef265e
--- /dev/null
+++ b/apps/profile/wrangler.dev.toml
@@ -0,0 +1,42 @@
+name = "profile"
+main = "./build/index.js"
+compatibility_date = "2022-04-05"
+compatibility_flags = ["no_minimal_subrequests"]
+workers_dev = false
+logpush = true
+
+[build]
+command = "yarn build"
+
+[site]
+bucket = "./public"
+
+[env.dev]
+kv_namespaces = [
+ { binding = "ProfileKV", id = "d72ecc0884434a8591761c6cb15fedd5" },
+]
+
+routes = [
+ { pattern = "my-dev.rollup.id", custom_domain = true, zone_name = "rollup.id" },
+]
+
+services = [
+ { binding = "Galaxy", service = "galaxy-dev" },
+ { binding = "Images", service = "images-dev" },
+]
+
+[env.dev.vars]
+PASSPORT_URL = "https://passport-dev.rollup.id"
+PASSPORT_AUTH_URL = "https://passport-dev.rollup.id/authorize"
+IMAGES_URL = "https://images-dev.rollup.id/trpc"
+PASSPORT_TOKEN_URL = "https://passport-dev.rollup.id/token"
+CLIENT_ID = ""
+REDIRECT_URI = "https://my-dev.rollup.id/auth/callback"
+COOKIE_DOMAIN = "rollup.id"
+TWITTER_URL = "https://twitter.com/rollupid"
+DISCORD_URL = "https://discord.gg/rollupid"
+MINTPFP_CONTRACT_ADDRESS = "0x028aE75Bb01eef2A581172607b93af8D24F50643"
+INTERNAL_GOOGLE_ANALYTICS_TAG = "G-NHNH4KRWC3"
+PROFILE_VERSION = 1
+ALCHEMY_ETH_NETWORK = "mainnet"
+ALCHEMY_POLYGON_NETWORK = "mainnet"
diff --git a/apps/profile/wrangler.next.toml b/apps/profile/wrangler.next.toml
new file mode 100644
index 0000000000..3675069bfb
--- /dev/null
+++ b/apps/profile/wrangler.next.toml
@@ -0,0 +1,42 @@
+name = "profile"
+main = "./build/index.js"
+compatibility_date = "2022-04-05"
+compatibility_flags = ["no_minimal_subrequests"]
+workers_dev = false
+logpush = true
+
+[build]
+command = "yarn build"
+
+[site]
+bucket = "./public"
+
+[env.next]
+kv_namespaces = [
+ { binding = "ProfileKV", id = "d4190ed6b22849bebba393fabb2feb9b" },
+]
+
+routes = [
+ { pattern = "my-next.rollup.id", custom_domain = true, zone_name = "rollup.id" },
+]
+
+services = [
+ { binding = "Galaxy", service = "galaxy-next" },
+ { binding = "Images", service = "images-next" },
+]
+
+[env.next.vars]
+PASSPORT_URL = "https://passport-next.rollup.id"
+PASSPORT_AUTH_URL = "https://passport-next.rollup.id/authorize"
+IMAGES_URL = "https://images-next.rollup.id/trpc"
+PASSPORT_TOKEN_URL = "https://passport-next.rollup.id/token"
+CLIENT_ID = ""
+REDIRECT_URI = "https://my-next.rollup.id/auth/callback"
+COOKIE_DOMAIN = "rollup.id"
+TWITTER_URL = "https://twitter.com/rollupid"
+DISCORD_URL = "https://discord.gg/rollupid"
+MINTPFP_CONTRACT_ADDRESS = "0x028aE75Bb01eef2A581172607b93af8D24F50643"
+INTERNAL_GOOGLE_ANALYTICS_TAG = "G-X7ZN16M4NB"
+PROFILE_VERSION = 1
+ALCHEMY_ETH_NETWORK = "mainnet"
+ALCHEMY_POLYGON_NETWORK = "mainnet"
diff --git a/apps/profile/wrangler.toml b/apps/profile/wrangler.toml
index 24eef5d024..13de4f6364 100644
--- a/apps/profile/wrangler.toml
+++ b/apps/profile/wrangler.toml
@@ -1,84 +1,37 @@
-# https://developers.cloudflare.com/workers/platform/compatibility-dates
-compatibility_date = "2022-04-05"
-
main = "./build/index.js"
-
name = "profile"
-
+compatibility_date = "2022-04-05"
+compatibility_flags = ["no_minimal_subrequests"]
workers_dev = false
logpush = true
-# The default environment
-# ------------------------------------------------------------------------------
-# name = "rollup-id-dev"
-# # Whether or not the worker should be deployed to *.workers.dev. Can use
-# # either route or workers_dev, but not both.
-# workers_dev = true
-# routes = [
-# "rollupid-dev.rollup.id/*",
-# ]
-
-# Services binding for local development
services = [
{ binding = "Galaxy", service = "galaxy" },
- { binding = "Address", service = "address" },
{ binding = "Images", service = "images" },
]
kv_namespaces = [
- { binding = "ProfileKV", id = "6510b0e703694f0388ced3de37df869d", preview_id = "b827cd51f02e4a569ed7b9ff2c680a75" },
+ { binding = "ProfileKV", id = "ProfileKV", preview_id = "ProfileKV" },
]
-[vars]
-PASSPORT_URL = "http://localhost:10001"
-PASSPORT_AUTH_URL = "http://localhost:10001/authorize"
-PASSPORT_TOKEN_URL = "http://127.0.0.1:10001/token"
-IMAGES_URL = "http://localhost/trpc"
-REDIRECT_URI = "http://localhost:10003/auth/callback"
-COOKIE_DOMAIN = "localhost"
-TWITTER_URL = "https://twitter.com/rollupid"
-DISCORD_URL = "https://discord.gg/rollupid"
-MINTPFP_CONTRACT_ADDRESS = "0x028aE75Bb01eef2A581172607b93af8D24F50643"
-INTERNAL_GOOGLE_ANALYTICS_TAG = "G-NHNH4KRWC3"
-PROFILE_VERSION = 1
-ALCHEMY_ETH_NETWORK = "mainnet"
-ALCHEMY_POLYGON_NETWORK = "mainnet"
+[build]
+command = "yarn build -- --sourcemap"
[site]
bucket = "./public"
-[build]
-command = "yarn build -- --sourcemap"
-
[dev]
port = 10003
inspector_port = 11003
local_protocol = "http"
-# dev (development)
-# ------------------------------------------------------------------------------
-[env.dev]
-routes = [
- { pattern = "my-dev.rollup.id", custom_domain = true, zone_name = "rollup.id" },
-]
-services = [
- { binding = "Galaxy", service = "galaxy-dev" },
- { binding = "Address", service = "address-dev" },
- { binding = "Images", service = "images-dev" },
-
-]
-kv_namespaces = [
- { binding = "ProfileKV", id = "6510b0e703694f0388ced3de37df869d" },
-]
-[env.dev.vars]
-
-PASSPORT_URL = "https://passport-dev.rollup.id"
-PASSPORT_AUTH_URL = "https://passport-dev.rollup.id/authorize"
-IMAGES_URL = "https://images-dev.rollup.id/trpc"
-PASSPORT_TOKEN_URL = "https://passport-dev.pz3r0.com/token"
-CLIENT_ID = ""
-REDIRECT_URI = "https://my-dev.rollup.id/auth/callback"
-COOKIE_DOMAIN = "rollup.id"
+[vars]
+PASSPORT_URL = "http://localhost:10001"
+PASSPORT_AUTH_URL = "http://localhost:10001/authorize"
+PASSPORT_TOKEN_URL = "http://127.0.0.1:10001/token"
+IMAGES_URL = "http://localhost/trpc"
+REDIRECT_URI = "http://localhost:10003/auth/callback"
+COOKIE_DOMAIN = "localhost"
TWITTER_URL = "https://twitter.com/rollupid"
DISCORD_URL = "https://discord.gg/rollupid"
MINTPFP_CONTRACT_ADDRESS = "0x028aE75Bb01eef2A581172607b93af8D24F50643"
@@ -86,71 +39,3 @@ INTERNAL_GOOGLE_ANALYTICS_TAG = "G-NHNH4KRWC3"
PROFILE_VERSION = 1
ALCHEMY_ETH_NETWORK = "mainnet"
ALCHEMY_POLYGON_NETWORK = "mainnet"
-
-# next (staging)
-# ------------------------------------------------------------------------------
-[env.next]
-routes = [
- { pattern = "my-next.rollup.id", custom_domain = true, zone_name = "rollup.id" },
-]
-services = [
- { binding = "Galaxy", service = "galaxy-next" },
- { binding = "Address", service = "address-next" },
- { binding = "Images", service = "images-next" },
-
-]
-kv_namespaces = [
- { binding = "ProfileKV", id = "451e189131d74dca87b41701555a839d" },
-]
-[env.next.build]
-command = "yarn build"
-
-[env.next.vars]
-
-PASSPORT_URL = "https://passport-next.rollup.id"
-PASSPORT_AUTH_URL = "https://passport-next.rollup.id/authorize"
-IMAGES_URL = "https://images-next.rollup.id/trpc"
-PASSPORT_TOKEN_URL = "https://passport-next.pz3r0.com/token"
-CLIENT_ID = ""
-REDIRECT_URI = "https://my-next.rollup.id/auth/callback"
-COOKIE_DOMAIN = "rollup.id"
-TWITTER_URL = "https://twitter.com/rollupid"
-DISCORD_URL = "https://discord.gg/rollupid"
-MINTPFP_CONTRACT_ADDRESS = "0x028aE75Bb01eef2A581172607b93af8D24F50643"
-INTERNAL_GOOGLE_ANALYTICS_TAG = "G-X7ZN16M4NB"
-PROFILE_VERSION = 1
-ALCHEMY_ETH_NETWORK = "mainnet"
-ALCHEMY_POLYGON_NETWORK = "mainnet"
-
-# current (production)
-# ------------------------------------------------------------------------------
-[env.current]
-routes = [
- { pattern = "my.rollup.id", custom_domain = true, zone_name = "rollup.id" },
-]
-services = [
- { binding = "Galaxy", service = "galaxy-current" },
- { binding = "Address", service = "address-current" },
- { binding = "Images", service = "images-current" },
-]
-kv_namespaces = [
- { binding = "ProfileKV", id = "3a5214b7dab24414a1cb65733a6143b2" },
-]
-[env.current.build]
-command = "yarn build"
-
-[env.current.vars]
-PASSPORT_URL = "https://passport.rollup.id"
-PASSPORT_AUTH_URL = "https://passport.rollup.id/authorize"
-IMAGES_URL = "https://images.rollup.id/trpc"
-PASSPORT_TOKEN_URL = "https://passport.pz3r0.com/token"
-CLIENT_ID = ""
-REDIRECT_URI = "https://my.rollup.id/auth/callback"
-COOKIE_DOMAIN = "rollup.id"
-TWITTER_URL = "https://twitter.com/rollupid"
-DISCORD_URL = "https://discord.gg/rollupid"
-MINTPFP_CONTRACT_ADDRESS = "0x3ebfaFE60F3Ac34f476B2f696Fc2779ff1B03193"
-INTERNAL_GOOGLE_ANALYTICS_TAG = "G-675VJMWSRY"
-PROFILE_VERSION = 1
-ALCHEMY_ETH_NETWORK = "mainnet"
-ALCHEMY_POLYGON_NETWORK = "mainnet"
diff --git a/docs/.gitbook/assets/CleanShot 2023-06-28 at 13.30.13.png b/docs/.gitbook/assets/CleanShot 2023-06-28 at 13.30.13.png
new file mode 100644
index 0000000000..c005667f6c
Binary files /dev/null and b/docs/.gitbook/assets/CleanShot 2023-06-28 at 13.30.13.png differ
diff --git a/docs/.gitbook/assets/CleanShot 2023-06-28 at 13.44.27.png b/docs/.gitbook/assets/CleanShot 2023-06-28 at 13.44.27.png
new file mode 100644
index 0000000000..f7731e1ca5
Binary files /dev/null and b/docs/.gitbook/assets/CleanShot 2023-06-28 at 13.44.27.png differ
diff --git a/docs/.gitbook/assets/Connect New Account (1).png b/docs/.gitbook/assets/Connect New Account (1).png
new file mode 100644
index 0000000000..2f2d182052
Binary files /dev/null and b/docs/.gitbook/assets/Connect New Account (1).png differ
diff --git a/docs/.gitbook/assets/Dropdown.png b/docs/.gitbook/assets/Dropdown.png
new file mode 100644
index 0000000000..959659f067
Binary files /dev/null and b/docs/.gitbook/assets/Dropdown.png differ
diff --git a/docs/.gitbook/assets/No Data (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (2) (1).png b/docs/.gitbook/assets/No Data (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (2) (1).png
new file mode 100644
index 0000000000..ddc22800d4
Binary files /dev/null and b/docs/.gitbook/assets/No Data (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (2) (1).png differ
diff --git a/docs/.gitbook/assets/No Data (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (2) (2).png b/docs/.gitbook/assets/No Data (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (2) (2).png
new file mode 100644
index 0000000000..ddc22800d4
Binary files /dev/null and b/docs/.gitbook/assets/No Data (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (2) (2).png differ
diff --git a/docs/.gitbook/assets/ezgif.com-video-to-gif.gif b/docs/.gitbook/assets/ezgif.com-video-to-gif.gif
new file mode 100644
index 0000000000..e1bd13583b
Binary files /dev/null and b/docs/.gitbook/assets/ezgif.com-video-to-gif.gif differ
diff --git a/docs/.gitbook/assets/image (1) (1) (1).png b/docs/.gitbook/assets/image (1) (1) (1).png
new file mode 100644
index 0000000000..e435c42bbb
Binary files /dev/null and b/docs/.gitbook/assets/image (1) (1) (1).png differ
diff --git a/docs/.gitbook/assets/image (1) (1).png b/docs/.gitbook/assets/image (1) (1).png
new file mode 100644
index 0000000000..e59edb03c0
Binary files /dev/null and b/docs/.gitbook/assets/image (1) (1).png differ
diff --git a/docs/.gitbook/assets/image (1).png b/docs/.gitbook/assets/image (1).png
index e435c42bbb..4a82129016 100644
Binary files a/docs/.gitbook/assets/image (1).png and b/docs/.gitbook/assets/image (1).png differ
diff --git a/docs/.gitbook/assets/image (6).png b/docs/.gitbook/assets/image (6).png
new file mode 100644
index 0000000000..71dfd9c115
Binary files /dev/null and b/docs/.gitbook/assets/image (6).png differ
diff --git a/docs/.gitbook/assets/image (7).png b/docs/.gitbook/assets/image (7).png
new file mode 100644
index 0000000000..71dfd9c115
Binary files /dev/null and b/docs/.gitbook/assets/image (7).png differ
diff --git a/docs/.gitbook/assets/image (8).png b/docs/.gitbook/assets/image (8).png
new file mode 100644
index 0000000000..811f1e9176
Binary files /dev/null and b/docs/.gitbook/assets/image (8).png differ
diff --git a/docs/.gitbook/assets/image (9).png b/docs/.gitbook/assets/image (9).png
new file mode 100644
index 0000000000..811f1e9176
Binary files /dev/null and b/docs/.gitbook/assets/image (9).png differ
diff --git a/docs/.gitbook/assets/image.png b/docs/.gitbook/assets/image.png
index e59edb03c0..edb1677c62 100644
Binary files a/docs/.gitbook/assets/image.png and b/docs/.gitbook/assets/image.png differ
diff --git a/docs/3id/overview/index.md b/docs/3id/overview/index.md
index 3a52c2b6f4..45eae42a7b 100644
--- a/docs/3id/overview/index.md
+++ b/docs/3id/overview/index.md
@@ -1,14 +1,14 @@
---
-description: Identity management for the private web.
+description: Simple & Secure Auth the private web.
---
-# Introduction to Rollup
+# Welcome to Rollup
-Rollup ID is a user management platform designed to prioritize privacy, security, and ease of use for both you and your users. By providing a user-centric and privacy-focused digital identity solution, we empower users to take control of their online data and identities, while also offering your business enhanced security, control, and lifecycle management.
+Rollup ID is a cutting-edge user management platform, meticulously crafted to prioritize privacy, security, and user-friendliness. Our primary goal is to empower users by providing a digital identity solution that places them at the center, allowing them to take control of their online data and identities.
-Our open-source platform utilizes established open standards and protocols, ensuring seamless compatibility with your existing infrastructure and services. This makes it effortless to integrate Rollup ID and collaborate across various systems. No matter if you're a Web3 or SaaS company, our flexible and scalable infrastructure can help reduce costs, improve user experiences, and guarantee interoperability.
+At the same time, we understand the needs of applications. That's why Rollup ID is designed to offer enhanced security, control, and lifecycle management for your application. With Rollup ID, you can ensure a secure and seamless user experience while maintaining the highest standards of data privacy and protection.
-We're thrilled to have you on board and are committed to collaborating with you in creating a safer and more connected web. Join us in building a secure and unified internet experience with Rollup ID, your user access bridge to a more private web, everywhere.
+Join us on this journey towards a more secure and privacy-focused digital world. Welcome to Rollup ID.
#### Get Started
@@ -16,6 +16,6 @@ We're thrilled to have you on board and are committed to collaborating with you
#### Learn More
-1. [Understanding Passport](../../platform/passport.md)
+1. [An Introduction to OIDC](../../an-introduction-to-openid-connect-oidc.md)
2. [Explore the Galaxy API](../../reference/galaxy-api.md)
3. [Learn about the Profile Graph](../../platform/profile-graph.md)
diff --git a/docs/CONTENTS.md b/docs/CONTENTS.md
index cff7d7a2fa..d50c93a84a 100644
--- a/docs/CONTENTS.md
+++ b/docs/CONTENTS.md
@@ -1,21 +1,27 @@
# Table of contents
-* [Introduction to Rollup](3id/overview/index.md)
-* [How it works](how-it-works.md)
+* [Welcome to Rollup](3id/overview/index.md)
+* [An Introduction to OpenID Connect (OIDC)](an-introduction-to-openid-connect-oidc.md)
+* [The Rollup Identity Graph](how-it-works.md)
## Getting Started
-* [Overview](getting-started/overview.md)
-* [Create an application](getting-started/create-an-application.md)
-* [Logging in Users](getting-started/auth-flow.md)
-* [Accessing Profile API](getting-started/accessing-profile-api.md)
+* [Create an Application](getting-started/create-an-application.md)
+* [Setup Auth Flow](getting-started/auth-flow.md)
+* [API Access](getting-started/accessing-profile-api.md)
## Guides
-* [Adding Users to your Database](guides/connecting-to-your-database.md)
-* [Authenticating Users in your App](guides/authenticating-users-in-your-app.md)
-* [Setup with Supabase](guides/setup-with-supabase.md)
-* [Using Smart Contract Wallets](guides/using-smart-contract-wallets.md)
+* [Storing Tokens](guides/connecting-to-your-database.md)
+* [Session Management](guides/authenticating-users-in-your-app.md)
+* [Using Scopes](guides/using-scopes/README.md)
+ * [Requesting Email](guides/using-scopes/requesting-email.md)
+ * [Requesting Connected Accounts](guides/using-scopes/connected-accounts.md)
+ * [Requesting Smart Contract Wallets](guides/using-scopes/using-smart-contract-wallets.md)
+* [Third Party Auth Tools](guides/third-party-auth-tools/README.md)
+ * [Setup with Auth0](guides/third-party-auth-tools/setup-with-auth0.md)
+ * [Setup with Supabase](guides/third-party-auth-tools/setup-with-supabase.md)
+ * [Setup with NextAuth.js](guides/third-party-auth-tools/using-nextauth.js.md)
## Platform
diff --git a/docs/advanced/tokens.md b/docs/advanced/tokens.md
index 4b01496bbc..2bd738cc0f 100644
--- a/docs/advanced/tokens.md
+++ b/docs/advanced/tokens.md
@@ -15,7 +15,7 @@ The decoded contents of an ID token looks like the following:
```json
{
"iss": "https://passport.rollup.id/",
- "sub": "{accountUrn}",
+ "sub": "{identityUrn}",
"aud": ["{yourClientId}"],
"exp": 1311281970,
"iat": 1311280970,
@@ -42,7 +42,7 @@ Here is an example of an access token:
```json
{
"iss": "https://passport.rollup.id/",
- "sub": "{accountUrn}",
+ "sub": "{identityUrn}",
"aud": ["{yourClientId}"],
"azp": "{yourClientId}",
"exp": 1489179954,
@@ -58,3 +58,28 @@ In the Pro version of Rollup you can set the issuer (iss) to your own custom dom
Access tokens do not contain any user information other than their ID (sub claim) and authorization information about the actions the application is allowed to perform via the API (scope claim). This makes them useful for securing an API but not for authenticating a user.
In some situations, it may be desirable to include additional information about the user or other custom claims in the access token to save the API from having to fetch details about the user. If you choose to do this, be aware that these extra claims will be readable in the access token. Non-access claims, however, will be readable in the ID token. To learn more, read [Create Custom Claims](custom-claims.md).
+
+## Refresh Tokens
+
+In addition to ID tokens and access tokens, OAuth 2.0 also introduces the concept of refresh tokens. A refresh token is a special kind of token that can be used to obtain a renewed access token. This is useful in situations where the access token has expired or has been invalidated, and the application needs to gain access to the user's resources without having to re-authenticate the user.
+
+Refresh tokens are typically long-lived and can be used to request new access tokens from the authorization server. This is done by sending a request to the token endpoint of the authorization server, including the refresh token along with the client's ID and secret.
+
+Here is an example of a refresh token:
+
+```json
+{
+ "iss": "https://passport.rollup.id/",
+ "aud": ["{yourClientId}"],
+ "sub": "{userId}",
+ "exp": "{expiryTimestamp}",
+ "iat": "{issuedAtTimestamp}",
+ "jti": "{uniqueTokenIdentifier}"
+}
+```
+
+In the Pro version of Rollup, you can set the issuer (iss) to your own custom domain. See the custom domain feature in your Console app.
+
+Refresh tokens provide a more seamless user experience by reducing the need for the user to re-authenticate and grant permissions, while also maintaining the security and privacy of the user's data. However, because refresh tokens can be used to obtain new access tokens, they must be stored securely and treated with the same level of care as the user's credentials.
+
+To learn more about using refresh tokens with Rollup ID, refer to our [API documentation](../reference/passport-api.md#exchange-token) and resources.
diff --git a/docs/an-introduction-to-openid-connect-oidc.md b/docs/an-introduction-to-openid-connect-oidc.md
new file mode 100644
index 0000000000..3f1cb37d1d
--- /dev/null
+++ b/docs/an-introduction-to-openid-connect-oidc.md
@@ -0,0 +1,69 @@
+---
+description: How Rollup ID works with OIDC / OAuth 2.0
+---
+
+# An Introduction to OpenID Connect (OIDC)
+
+Rollup ID is an innovative Identity Provider (IDP) that leverages a unique, decentralized approach to identity management. By adhering to established protocols such as [OAuth 2.0](https://oauth.net/2/) and [OpenID](https://openid.net/developers/how-connect-works/) Connect (OIDC), Rollup ID offers a secure, consent-based authorization mechanism, enabling users to interact safely with online applications. This article will explore OIDC and its application within the Rollup ID platform.
+
+Auth Flow
',
+ })
+
+ return payload
+}
+
+verifyJwt('eyJhbGciOiJSUzI1NiIsInR5cCI6Ikp.eyAs.XVCJ9...')
+
+```
diff --git a/docs/getting-started/accessing-profile-api.md b/docs/getting-started/accessing-profile-api.md
index e2f70447ce..44249e8ee3 100644
--- a/docs/getting-started/accessing-profile-api.md
+++ b/docs/getting-started/accessing-profile-api.md
@@ -1,13 +1,11 @@
---
-description: Using Galaxy to access the user profile graph.
+description: Using Rollup ID APIs to manage tokens and access the user profile graph.
---
-# Accessing Profile API
+# API Access
-Now that you have the access token from the previous step, you can make authorized requests to the [Galaxy API](../reference/galaxy-api.md) and [Passport API](../reference/passport-api.md).
+Once you've successfully integrated Rollup ID and authenticated your users you can now make authorized requests to the [Galaxy API](../reference/galaxy-api.md) and [Passport API](../reference/passport-api.md).
-The Galaxy API is a GraphQL API accessible at [https://galaxy.rollup.id](https://galaxy.rollup.id/). To incorporate our GQL schemas into your GraphQL client, you can use GraphQL codegen tools.
+The Galaxy API is both a [REST API ](https://galaxy.rollup.id/swagger)and [GraphQL](https://galaxy.rollup.id/graphql) API.
-When calling the API, you'll need to include the [Galaxy API key](create-an-application.md) from your app and, in some cases, the signed JWT/access token.
-
-For a comprehensive overview of the API, please refer to the full API reference documentation available [here](../reference/galaxy-api.md).
+When calling the API, **you'll need to include the** [**Galaxy API key**](create-an-application.md) from your app and, in some cases, the signed JWT/access token.
diff --git a/docs/getting-started/auth-flow.md b/docs/getting-started/auth-flow.md
index 5291a878bd..3e6698590b 100644
--- a/docs/getting-started/auth-flow.md
+++ b/docs/getting-started/auth-flow.md
@@ -1,42 +1,52 @@
---
-description: Authenticating and authorizing users into your application.
+description: Logging in users into your application.
---
-# Logging in Users
+# Setup Auth Flow
{% hint style="warning" %}
For this step you will need the **Client ID** and the **Client Secret** from the [previous step](create-an-application.md).
{% endhint %}
-Since Rollup ID is **standards-compliant**, integrating it into your application is similar to integrating other OAuth-based authentication services like [Auth0](https://auth0.com/) or [Firebase](https://firebase.google.com/) / [Supabase](https://supabase.com/). You can use off-the-shelf [open-source libraries](https://oauth.net/code/) to build your OAuth flow.
+The Rollup ID authentication flow is built upon the [OpenID Connect (OIDC) protocol](https://openid.net/developers/how-connect-works/), ensuring a secure and standardized process. This guide will walk you through the steps involved in this flow.
-We recommend setting up two routes in your application called `/auth/login` and `/auth/callback` to manage the authorization flow.
+For this step, since Rollup ID is **standards-compliant,** you can use off-the-shelf [open-source libraries](https://oauth.net/code/) to build your OAuth flow.
{% hint style="info" %}
+Many open source OAuth client libraries like [Auth.js](https://authjs.dev/) will automatically create the necessary routes and manage client state and requests for your application that you wil see below.
+
We have created a reference implementation using [Remix](https://remix.run/) and the [Remix OAuth](https://github.com/sergiodxa/remix-auth) library [here](https://github.com/proofzero/rollupid/tree/main/apps/profile/app/routes/auth) which we will refer to several times in this step.
{% endhint %}
-### Step 1: Initiate Authentication
+### Step 1: Initiate the Auth Request
+
+To log in or register to a user your application the first step is to send an authorization request to your Rollup ID application. This is typically handled by a redirect route (e.g.`/auth`) in your application.
+
+This request contains essential parameters, including the `client_id` (your application's ID), `response_type`, `scope`, `state` and `redirect_url`.
-To begin the authentication flow, redirect users to the Passport authorization endpoint with the Client ID and a randomly generated state parameter included in the query string. The URL should look like this: `https://passport.rollup.id/authorize?client_id=&state=&scope=email`
+The `state` parameter is a CSRF token used to protect against potential attacks and to maintain any state that might be useful after the authentication process (more on this later). Before redirecting users to the Rollup ID auth flow, it is important that the state parameter is persisted in a cookie or other storage method for reference in a later step.
-You can achieve this by redirecting users to a route in your application that subsequently redirects them to the URL above.
+For example, your authorization URL should look like this: `https://passport.rollup.id/authorize?client_id=&state=&scope=email`.
{% hint style="info" %}
-For PRO accounts, custom hostnames of Passport are allowed.
+For PRO apps, [custom hostnames](../platform/console/custom-domain.md) are allowed and would replace `passport.rollup.id` with your domain name and more customization features would be available in the [designer](../platform/console/designer.md).
{% endhint %}
-Persist the state parameter in a cookie or other storage method for reference in a later step. In our reference implementation, the remix-oauth library handles this automatically. In your application, your chosen library will typically handle this for you.
+### Step 2: User Authentication & Authorization
+
+Rollup ID will use the provided `client_id` to look up your application details, displaying your application name and branding information.
+
+If the user is not signed in they will be displayed the authentication page where they can choose from various authentication methods. After successful authentication, the user will be shown the authorization screen to provide consent for the requested scopes, allowing your application to access specific data.
+
+Upon completion, users will be redirected back to your app using the `redirect_url` set in the previous step.
-Rollup ID will use the provided Client ID to look up your application details, displaying your application name and branding information. If your application requires specific authorization scopes, users will be presented with an authorization screen.
-?code=&state=
@@ -46,74 +56,22 @@ Your Redirect URL should be ready to accept an exchange token and state paramete
* **State:** this state should match the state you created for the user/client in Step 1. _Typically your chosen OAuth library will manage this for you._
* **Redirect URL**: the redirect url set in your app in the [previous step](create-an-application.md). _For development, "localhost" is an accepted redirect url host._
-Ensure the state parameter matches the state you sent when initiating the auth flow in Step 1. This security measure helps prevent replay attacks. Send the exchange code along with the Client Secret and **grant type** to Passport's token endpoint (see below) to receive the access token, refresh token, and minimal user profile (encoded in an ID token) as base64-encoded signed JWTs, completing the flow.
-
-{% swagger method="post" path="" baseUrl="https://passport.rollup.id/token" summary="Exchange access code for access token" %}
-{% swagger-description %}
-Exchange access code for access token, refresh token and ID token.
-
-_(For more details visit the_ [_Passport API_](../platform/passport.md) _page)_
-{% endswagger-description %}
-
-{% swagger-parameter in="body" name="code" type="String" required="true" %}
-Exchange code
-{% endswagger-parameter %}
-
-{% swagger-parameter in="body" name="client_id" required="true" type="String" %}
-Application client id
-{% endswagger-parameter %}
-
-{% swagger-parameter in="body" name="client_secret" type="String" required="true" %}
-Appication client secret
-{% endswagger-parameter %}
+To exchange the code for an access token use this information to call the exchange token endpoint using the "authorization\_code" value for "grant\_type"
-{% swagger-parameter in="body" name="grant_type" type="String" required="true" %}
-"authorization\_code" or
+### Step 4: Access Token & ID Token
-"refresh\_token"
-{% endswagger-parameter %}
-
-{% swagger-response status="201: Created" description="" %}
-```javascript
-{
- access_token: "ey....",
- refresh_token: "ey....",
- token_type: 'Bearer',
- id_token: "ey....",
-}
-```
-{% endswagger-response %}
-{% endswagger %}
-
-#### Access Token
-
-Access tokens are valid for 1 hour, with the expiry time stored in the "exp" property in the JWT. Refresh tokens, on the other hand, are valid for 90 days and can be used to request another access token using the same exchange code endpoint with the "refresh\_token" grant type.
+With the obtained access token, your application can now fetch the [id token](../advanced/tokens.md#id-tokens) from the Rollup ID `/userinfo`[endpoint](../reference/passport-api.md#user-info) to fetch or any authorized endpoint from the [Galaxy API](../reference/galaxy-api.md).
{% hint style="info" %}
-There are multiple ways to manage this refresh flow, [here](../../apps/profile/app/utils/session.server.tsx#L52) is our reference implementation. In summary, we store the tokens encrypted in a user cookie that is valid for 90 days and refresh when needed.\
-\
-If you ever find yourself with an expired refresh token you can consider this as the user being "logged out" and redirect them back to passport for login to repeat this flow.
+Inside the ID token object you will find a unique claim called `sub` which will be consistent across all logins. This will match the value of the `sub` claim in access and refresh tokens also.
{% endhint %}
-#### ID Token
-
-ID tokens are only supplied when the initial set of tokens is retrieved, and are not provided again during usage of refresh tokens. Use the `/userinfo` [endpoint](../reference/passport-api.md#user-info) to retrieve fresh user details. The response, as well as what is encoded in the ID token, is shaped as follows:
+Ensure you handle this data with care, respecting user privacy and adhering to data protection regulations.
-```typescript
-{
- name: string,
- picture: string,
- email: string,
- //...ID token encodes other claims as well
-}
-```
-
-{% hint style="info" %}
-Inside the ID token object you will find a unique claim called `sub` which will be consistent across all logins. This will match the value of the `sub` claim in access and refresh tokens also.
-{% endhint %}
+### Step 5: Refresh Tokens (optional)
-For more information on tokens and how to decode them please check out the [Tokens](../advanced/tokens.md) page.
+Access tokens are valid for 1 hour, with the expiry time stored in the "exp" property in the JWT. If your application requires prolonged access to user data without prompting the user for re-authentication, consider implementing refresh tokens using the [exchange token endpoint](../reference/passport-api.md#exchange-token).
-Here is a [link](../../apps/profile/app/routes/auth/callback.tsx) to the reference implementation doing just this. With the access token you can make authorized requests to the [Profile Graph](../platform/profile-graph.md) for this user.
+Refresh tokens allow your application to obtain new access tokens, ensuring uninterrupted access to user data.
-If you are coming from an existing provider please check out the [Migration Guide](../advanced/migration-guide.md).
+If you ever find yourself with an expired refresh token you can consider this as the user being "logged out" and redirect them to repeat the auth flow.
diff --git a/docs/getting-started/create-an-application.md b/docs/getting-started/create-an-application.md
index a70bfd489b..7b8b5085c2 100644
--- a/docs/getting-started/create-an-application.md
+++ b/docs/getting-started/create-an-application.md
@@ -2,67 +2,38 @@
description: Step-by-step guide to creating a Rollup application.
---
-# Create an application
-
-Follow these steps to create and configure your Rollup ID application:
+# Create an Application
### Step 1: Connect with Rollup Passport
-First, visit [https://console.rollup.id](https://passport.rollup.id/) and log in to the [Console](../platform/console/) using Rollup Passport. You'll see a screen that offers various authentication methods to register or log in.
-
-Rollup Passport Authentication
-
-
-
-
+* Begin by visiting the [Rollup Console](https://console.rollup.id/) and logging in.
+* Once logged in, you'll land on the [Console](../platform/console/) dashboard. If this is your first time logging in you will be presented with an quick onboarding flow where you will be directed to create an application.
-
+### Step 2: Register Your Application
-
+Navigate to the "OAuth" section for a comprehensive application configuration. Here, you'll find a standard [OAuth 2.0](https://oauth.net/2/) configuration form. Ensure you fill in the required fields to customize your auth flow:
-
-
-
-
-
-
-
Rollup Console Configuration for the Supabase callback and required scopes.
Rollup Console Configuration for the Supabase callback and required scopes.
Keycloak provider configuration for Supabase.
Keycloak provider configuration for Supabase.
Connected Accounts Scope
/authorize?client_id=xxx&state=xxx&scope=connected_accounts`
+
+### Step 3
+
+After authenticating into your custom Rollup application, your users will we be presented with an authorization screen containing the connected accounts scope authorization request.
+
+By default "All Connected Accounts" will be selected. Users will have the option to filter down connected accounts.
+
+Connected Accounts Prompt
Email Scope Dropdown
/authorize?client_id=xxx&state=xxx&scope=email`
+
+### Step 3
+
+After authenticating into your custom Rollup application, your users will we be presented with an authorization screen containing the email scope authorization request.
+
+If the user already as a connected email, this email will be automatically selected. If no email address is connected to their identity they can connect an new email address and continue.
+
+Email Authorization
OAuth Config Screen
OAuth App Details Panel
OAuth App Details Panel
-
diff --git a/packages/design-system/src/atoms/accounts/ConnectNewButton.stories.tsx b/packages/design-system/src/atoms/accounts/ConnectNewButton.stories.tsx
deleted file mode 100644
index edaf026611..0000000000
--- a/packages/design-system/src/atoms/accounts/ConnectNewButton.stories.tsx
+++ /dev/null
@@ -1,20 +0,0 @@
-import React from 'react'
-import { ConnectNewAccountButton } from './ConnectNewButton'
-
-export default {
- title: 'Atoms/Account/Button',
- component: ConnectNewAccountButton,
-}
-
-const Template = () => (
-
- {
- return null
- }}
- />
-
-)
-
-export const ConnectNewAccountButtonExample = Template.bind({}) as any
diff --git a/packages/design-system/src/atoms/accounts/ConnectNewButton.tsx b/packages/design-system/src/atoms/accounts/ConnectNewButton.tsx
deleted file mode 100644
index 6e3e81d801..0000000000
--- a/packages/design-system/src/atoms/accounts/ConnectNewButton.tsx
+++ /dev/null
@@ -1,24 +0,0 @@
-import React from 'react'
-import { Button } from '../buttons/Button'
-import { TbCirclePlus } from 'react-icons/tb'
-
-export const ConnectNewAccountButton = ({
- phrase,
- onConnectNew,
- className,
-}: {
- phrase: string
- onConnectNew: () => void
- className?: string
-}) => {
- return (
-
-
- )
-}
diff --git a/packages/design-system/src/atoms/accounts/ConnectedAccountSelect.stories.tsx b/packages/design-system/src/atoms/accounts/ConnectedAccountSelect.stories.tsx
deleted file mode 100644
index f5aeec8d71..0000000000
--- a/packages/design-system/src/atoms/accounts/ConnectedAccountSelect.stories.tsx
+++ /dev/null
@@ -1,28 +0,0 @@
-import React from 'react'
-import { ConnectedAccountSelect } from './ConnectedAccountSelect'
-
-export default {
- title: 'Atoms/Account/Select',
- component: ConnectedAccountSelect,
-}
-
-const accounts = Array.from({ length: 10 }, (_, i) => ({
- addressURN: `urn:proofzero:address:${i}`,
- title: `Account ${i}`,
- provider: `Provider ${i}`,
- address: `Address ${i}`,
-}))
-
-const Template = (args: any) => (
-
- {
- return null
- }}
- {...args}
- />
-
-)
-
-export const ConnectedAccountSelectExample = Template.bind({}) as any
diff --git a/packages/design-system/src/atoms/accounts/ConnectedAccountSelect.tsx b/packages/design-system/src/atoms/accounts/ConnectedAccountSelect.tsx
deleted file mode 100644
index ec42d39b98..0000000000
--- a/packages/design-system/src/atoms/accounts/ConnectedAccountSelect.tsx
+++ /dev/null
@@ -1,213 +0,0 @@
-import React, { Fragment, useEffect, useRef, useState } from 'react'
-import { Listbox, Transition } from '@headlessui/react'
-import { Text } from '@proofzero/design-system/src/atoms/text/Text'
-import { ChevronDownIcon, ChevronUpIcon } from '@heroicons/react/20/solid'
-import { AddressURN } from '@proofzero/urns/address'
-import { ConnectNewAccountButton } from './ConnectNewButton'
-
-type ConnectedAccountSelectListItem = {
- addressURN: AddressURN
- title: string
- provider: string
- address: string
-}
-
-type ConnectedAccountSelectProps = {
- accounts: Array
- onConnectNew: () => void
- onSelect?: (selected: Array) => void
- onSelectAll?: () => void
-}
-
-export const ConnectedAccountSelect = ({
- accounts,
- onConnectNew,
- onSelect,
- onSelectAll,
-}: ConnectedAccountSelectProps) => {
- const isFirstRender = useRef(true)
-
- const [selectedAccounts, setSelectedAccounts] = useState<
- Array
- >([])
-
- const [allConnectedAccountsSelected, setAllConnectedAccountsSelected] =
- useState(false)
-
- const capitalizeFirstLetter = (string: string) => {
- return string.charAt(0).toUpperCase() + string.slice(1)
- }
-
- useEffect(() => {
- if (allConnectedAccountsSelected) {
- setSelectedAccounts([])
-
- if (onSelectAll) {
- onSelectAll()
- }
- }
- }, [allConnectedAccountsSelected])
-
- useEffect(() => {
- if (isFirstRender.current) {
- isFirstRender.current = false
- return
- }
-
- if (!allConnectedAccountsSelected && onSelect) {
- onSelect(selectedAccounts)
- }
- }, [selectedAccounts, allConnectedAccountsSelected])
-
- return (
-
- {({ open }) => (
-
-
- {(!selectedAccounts || selectedAccounts.length === 0) &&
- !allConnectedAccountsSelected && (
-
- No connected account(s)
-
- )}
-
- {selectedAccounts?.length === 1 && !allConnectedAccountsSelected && (
-
- {selectedAccounts[0].title}
-
- )}
- {selectedAccounts?.length > 1 && !allConnectedAccountsSelected && (
-
- {selectedAccounts.length} accounts selected
-
- )}
-
- {allConnectedAccountsSelected && (
-
- All connected accounts
-
- )}
-
- {open ? (
-
-
-
-
-
- setAllConnectedAccountsSelected(!allConnectedAccountsSelected)
- }
- >
-
-
-
-
- All connected accounts
-
-
-
-
-
- {accounts?.map((account) => (
-
-
-
-
-
- {account.title}
-
-
- {capitalizeFirstLetter(account.provider)} -{' '}
- {account.address}
-
-
-
- ))}
-
-
-
-
-
-
-
- )
-}
diff --git a/packages/design-system/src/atoms/breadcrumbs/Breadcrumbs.tsx b/packages/design-system/src/atoms/breadcrumbs/Breadcrumbs.tsx
new file mode 100644
index 0000000000..782bd7fc63
--- /dev/null
+++ b/packages/design-system/src/atoms/breadcrumbs/Breadcrumbs.tsx
@@ -0,0 +1,40 @@
+import React from 'react'
+import { Text } from '../text/Text'
+import { HiChevronRight } from 'react-icons/hi'
+
+type BreadcrumbsProps = {
+ trail: {
+ label: string
+ href?: string
+ }[]
+ LinkType: any & {
+ to: string
+ }
+}
+
+export default ({ trail, LinkType }: BreadcrumbsProps) => (
+ <>
+
+ {trail.map(({ label, href }, index) => (
+
+ {href && (
+
+
+ {label}
+
+
+ )}
+ {!href && (
+
+ {label}
+
+ )}
+
+ {index < trail.length - 1 && (
+
+ ))}
+
& {
+export type ButtonProps = React.DetailedHTMLProps<
+ React.ButtonHTMLAttributes,
+ HTMLButtonElement
+> & {
btnSize?: ButtonSize
btnType?: ButtonType
isSubmit?: boolean
+ onClick?: (e?: any) => unknown
+ disabled?: boolean
+ className?: string
}
export function Button({
@@ -21,6 +26,7 @@ export function Button({
btnType = 'primary',
isSubmit,
className,
+ onClick,
children,
...rest
}: ButtonProps) {
@@ -31,6 +37,7 @@ export function Button({
+ < Canvas >
{
const config = createConfig(
getDefaultConfig({
appName: 'Rollup',
+ walletConnectProjectId: "foo",
})
)
return (
-
+
)
},
@@ -43,4 +46,4 @@ export const Template = (args) =>
-
+
diff --git a/packages/design-system/src/atoms/buttons/connect-button/ConnectButton.tsx b/packages/design-system/src/atoms/buttons/connect-button/ConnectButton.tsx
index 1517a77b8a..1cb6abf39c 100644
--- a/packages/design-system/src/atoms/buttons/connect-button/ConnectButton.tsx
+++ b/packages/design-system/src/atoms/buttons/connect-button/ConnectButton.tsx
@@ -1,29 +1,25 @@
-import React, { useContext } from 'react'
+import React, { useContext, useEffect } from 'react'
-import { useEffect } from 'react'
import type { ButtonProps } from '@proofzero/design-system/src/atoms/buttons/Button'
import walletsSvg from './wallets.png'
-import { Avatar } from 'connectkit'
import { Spinner } from '@proofzero/design-system/src/atoms/spinner/Spinner'
-import { useAccount, useDisconnect, useSignMessage } from 'wagmi'
-import { ConnectKitProvider, ConnectKitButton } from 'connectkit'
+import { Avatar, ConnectKitButton } from 'connectkit'
+
+import { useDisconnect, useSignMessage } from 'wagmi'
import { Text } from '@proofzero/design-system/src/atoms/text/Text'
import { Popover } from '@headlessui/react'
import { HiChevronDown, HiChevronUp } from 'react-icons/hi'
import { ThemeContext } from '../../../contexts/theme'
-export const signMessageTemplate = `Welcome to Rollup!
-
-Sign this message to accept the Rollup Terms of Service (https://rollup.id/tos), no password needed!
-
-This will not trigger a blockchain transaction or cost any gas fees.
-
-{{nonce}}
-`
+import {
+ AuthenticationScreenDefaults,
+ appendNonceTemplate,
+} from '../../../templates/authentication/Authentication'
export type ConnectButtonProps = {
+ signMessageTemplate?: string
connectCallback: (address: string) => void
signCallback: (
address: string,
@@ -46,6 +42,7 @@ export type ConnectButtonProps = {
} & ButtonProps
export function ConnectButton({
+ signMessageTemplate = AuthenticationScreenDefaults.defaultSignMessage,
connectCallback,
connectErrorCallback,
signCallback,
@@ -54,16 +51,9 @@ export function ConnectButton({
fullSize = true,
displayContinueWith = false,
}: ConnectButtonProps) {
- const { connector, isConnected, isReconnecting } = useAccount()
const { disconnect } = useDisconnect()
- const {
- isLoading: isSigning,
- error,
- status,
- signMessage,
- reset,
- } = useSignMessage({
- onSuccess(data, variables) {
+ const { isLoading: isSigning, signMessage } = useSignMessage({
+ onSuccess(data) {
console.debug('message signed')
if (!signData?.nonce || !signData?.state || !signData?.address) {
connectErrorCallback(new Error('No signature data present.'))
@@ -79,11 +69,10 @@ export function ConnectButton({
}
},
})
-
useEffect(() => {
if (!signData?.signature && signData?.nonce) {
console.debug('signing...')
- const nonceMessage = signMessageTemplate.replace(
+ const nonceMessage = appendNonceTemplate(signMessageTemplate).replace(
'{{nonce}}',
signData.nonce
)
@@ -92,7 +81,7 @@ export function ConnectButton({
} else {
console.debug('no sign data')
}
- }, [signData, isReconnecting, isConnected, connector, signMessage])
+ }, [signData])
const { theme, dark } = useContext(ThemeContext)
@@ -100,76 +89,102 @@ export function ConnectButton({
-
-
- {({
- isConnected,
- isConnecting,
- show,
- hide,
- address,
- truncatedAddress,
- ensName,
- }) => {
- if (isConnected) {
- hide!()
- }
- return (
-
-
address && connectCallback(address)
- : show
- }
- className={`flex-1 button hover:bg-gray-100 flex flex-row items-center space-x-3 px-[17px] rounded-l-md ${
- isConnected ? '' : 'rounded-r-md'
- } ${
- fullSize ? 'justify-start' : 'justify-center'
- } bg-white dark:bg-[#374151] dark:border-gray-600 hover:bg-gray-100 focus:bg-white focus:ring-inset focus:ring-2 focus:ring-skin-primary truncate`}
- >
- {(isSigning || isLoading) && isConnected ? (
-
- {!ensName &&
}
- {ensName &&
}
-
+ {({
+ isConnected,
+ isConnecting,
+ show,
+ hide,
+ address,
+ truncatedAddress,
+ ensName,
+ }) => {
+ if (isConnected) {
+ hide!()
+ }
+ return (
+
+ {
+ return address && connectCallback(address)
+ }
+ : show
+ }
+ className={`flex-1 button hover:bg-gray-100 flex flex-row
+ items-center space-x-3 px-[17px] rounded-l-md ${
+ isConnected ? '' : 'rounded-r-md'
+ } ${
+ fullSize ? 'justify-start' : 'justify-center'
+ } bg-white dark:bg-[#374151] dark:border-gray-600 dark:hover:bg-gray-600 focus:bg-white dark:focus:bg-gray-600 focus:ring-inset focus:ring-2 focus:ring-skin-primary truncate`}
+ >
+ {(isSigning || isLoading) && isConnected ? (
+