Skip to content

Latest commit

History

History
31 lines (21 loc) 路 1.49 KB

File metadata and controls

31 lines (21 loc) 路 1.49 KB

Ethereum Authorization Module

Purpose

The ethereumAuthorization module verifies Ethereum account ownership for auth-message login and for registration flows that invoke the registration-validation hook, using signed GeeSome messages bound to the node static identity.

Owns

  • Creating login auth messages for known Ethereum foreign accounts.
  • Verifying auth-message signatures and returning the matching GeeSome user.
  • Registration-hook validation for Ethereum foreign-account signatures.
  • GeeSome message construction that binds signatures to the node static identity.

Security Boundaries

  • Login must match auth-message ID, address, foreign account, and signature.
  • Registration signatures are required only for flows that call this module's registration-validation hook.
  • Signature verification is delegated to geesome-libs Ethereum helpers.
  • Login depends on the foreign-account auth-message linkage remaining consistent with the foreignAccounts module contract.
  • Dependency fallback info logs are suppressed unless they are meaningful.

Boundaries

  • This module verifies ownership; it does not store foreign account rows directly.
  • Do not treat a foreign account claim as trusted until the provider-specific signature check passes.
  • Keep generated auth messages short-lived at the product level when expiration semantics are added.

Related Docs