The ethereumAuthorization module verifies Ethereum account ownership for auth-message login and for registration flows that invoke the registration-validation hook, using signed GeeSome messages bound to the node static identity.
- Creating login auth messages for known Ethereum foreign accounts.
- Verifying auth-message signatures and returning the matching GeeSome user.
- Registration-hook validation for Ethereum foreign-account signatures.
- GeeSome message construction that binds signatures to the node static identity.
- Login must match auth-message ID, address, foreign account, and signature.
- Registration signatures are required only for flows that call this module's registration-validation hook.
- Signature verification is delegated to
geesome-libsEthereum helpers. - Login depends on the foreign-account auth-message linkage remaining consistent with the
foreignAccountsmodule contract. - Dependency fallback info logs are suppressed unless they are meaningful.
- This module verifies ownership; it does not store foreign account rows directly.
- Do not treat a foreign account claim as trusted until the provider-specific signature check passes.
- Keep generated auth messages short-lived at the product level when expiration semantics are added.