one-key-flow fails with verifier not supported #816

rys-acme · 2022-11-03T05:24:01Z

rys-acme
Nov 3, 2022

Steps to reproduce:

Got to https://stg.acmedao.com/jwt . Login using any google id. Collect the jwt token.
Save the below code as one-key-flow.html
Open in the html file in browser with the above collected jwt as a URL query parameter. Ex, file:///Users/sharan/Desktop/one-key-flow.html?jwt=JWT_HERE
You should be able to reproduce the following error on console.

one-key-flow.html:

<!doctype html>
<html lang="en">

<head>
  <meta charset="utf-8">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <meta name="description" content="">
  <meta name="author" content="Acme-dao">
  <meta name="generator" content="acme-dao">
  <title>one-key-flow test</title>
  <style>
    apple-pay-button {
      --apple-pay-button-width: 156px;
      --apple-pay-button-height: 50px;
      --apple-pay-button-border-radius: 6px;
      --apple-pay-button-padding: 0px 0px;
      --apple-pay-button-box-sizing: border-box;
      display: initial;
    }
  </style>
  
  <!-- deps for when MFA=false  -->
  <script src="https://cdn.jsdelivr.net/npm/@toruslabs/torus.js@6.2.0/dist/torusUtils.umd.min.js"></script>
  <script src="https://cdn.jsdelivr.net/npm/@toruslabs/openlogin-subkey@2.1.0/dist/openloginSubkey.umd.min.js"></script>
  <script src="https://cdn.jsdelivr.net/npm/@toruslabs/fetch-node-details@8.0.0/dist/fetchNodeDetails.umd.min.js"></script>

  <!-- deps for when MFA=true -->
  <script src="https://cdn.jsdelivr.net/npm/@web3auth/web3auth@1.1.1/dist/web3auth.umd.min.js"></script>
  <script src="https://cdn.jsdelivr.net/npm/@web3auth/core@1.1.1/dist/core.umd.min.js"></script>
  <script src="https://cdn.jsdelivr.net/npm/@web3auth/openlogin-adapter@1.1.1/dist/openloginAdapter.umd.min.js"></script>

  <!-- common deps -->
  <script src="https://cdnjs.cloudflare.com/ajax/libs/web3/1.7.4-rc.0/web3.min.js"></script>
  <script src="https://applepay.cdn-apple.com/jsapi/v1/apple-pay-sdk.js"></script>

  <script>
    const serverUrl = window.location.origin;
    const urlParams = new URLSearchParams(location.search);
    const jwt = urlParams.get('jwt');
    // const jwt = "PUT_YOUR_JWT_HERE";

    const torusNetwork = "https://polygon-mainnet.infura.io/v3/6b555ca82a3c440bb8cef518001c94c6"
    const torusNetworkChainId = "0x89"
    // Initializing the Torus instance
    const torus = new window.TorusUtils.default({
      enableOneKey: true,
      network: torusNetwork,
      allowHost: "https://signer-polygon.tor.us/api/allow", 
      signerHost : "https://signer-polygon.tor.us/api/sign"
    });
    let blockchainProvider = null;

    // Initializing the NodeDetailManager instance for Ropsten Testnet
    // NOTE: change proxyAddress to `NodeDetailManager.PROXY_ADDRESS_MAINNET` when you switch to production
    const nodeDetailManager = new window.FetchNodeDetails.default({ network: torusNetwork, proxyAddress: window.FetchNodeDetails.default.PROXY_ADDRESS_CYAN });
    
    // const verifierId = loginRes.user.uid; // user's id from firebase login response or this can be any unique user's id like email etc.
    
    const web3auth = new window.Web3auth.Web3Auth({
      chainConfig: {
        displayName: "Ethereum Goerli",
        chainNamespace: "eip155",
        chainId: "0x5",
        rpcTarget: "https://goerli.infura.io/v3/6b555ca82a3c440bb8cef518001c94c6",
        blockExplorer: "https://goerli.polyscan.io/",
        ticker: "ETH",
        tickerName: "Ethereum",
      },
    });

    const openloginAdapter = new window.OpenloginAdapter.OpenloginAdapter({
      adapterSettings: {
        clientId: "BIWLabqVJUJ3Ost4Iojs1yf91DaxcIDoQAdzV_UiUz7H3DOUGMAYtB8yDYOQMsjsDCXvGPMJ8dsONSmv-Q1_aM0",
        network: "testnet",
        uxMode: "redirect",
        replaceUrlOnRedirect: false,
        redirectUrl: window.location.href,
        loginConfig: {
          jwt: {
            name: "Acmecore dev",
            verifier: "acmecore-dev4",
            typeOfLogin: "jwt",
            clientId: "oJrh0kwMvcQ1L2nQwyb8toAt8OyZiVCd",
          },
        },
      },
    });
    let isLoading = false;
    let web3;
    let estimatedTransactionCost = 0.01; // TODO:
    let rates;
    let nftPrice;
    let estimatedTransactionCostUSD;
    let totalUSDPrice;
    var preparedApplePayRequest=''
    
    const render = async () => {
      console.log("inside isMFAEnabled");
      const parsedJWT = await JSON.parse(atob(jwt.split('.')[1]));
      console.log(parsedJWT);
      const verifierId = parsedJWT.email;
      console.log(verifierId);
      const { torusNodeEndpoints, torusNodePub, torusIndexes } = await nodeDetailManager.getNodeDetails({ verifier: "acmecore-dev4", verifierId });
      const userDetails = await torus.getUserTypeAndAddress(torusNodeEndpoints, torusNodePub, { verifier: "acmecore-dev4", verifierId }, true);
      // Now we check if the user has enabled mfa or not.
      // if !userDetails.upgraded then mfa is not enabled.
      console.log(userDetails)
      const mfaEnabled = !(userDetails.typeOfUser === "v2" && !userDetails.upgraded);
      console.log("Is MFA enabled: ", mfaEnabled);

      if (mfaEnabled==false){
        console.log("if mfa disabled")
        const chainConfig = {
          chainId: torusNetworkChainId,
          rpcTarget: torusNetwork,
        };
        // torus is initialized in code snippet above
        // if YES, login directly with the torus libraries within your app
        const keyDetails = await torus.retrieveShares(torusNodeEndpoints, torusIndexes, "acmecore-dev4", { verifier_id: verifierId }, jwt, {});
        // use the private key to get the provider
        const finalPrivKey = subkey(keyDetails.privKey.padStart(64, "0"), Buffer.from(clientId, "base64")).padStart(64, "0");
        console.log(finalPrivKey)
        const ethereumPrivateKeyProvider = new EthereumPrivateKeyProvider({
          config: {
            chainConfig,
          },
        });
        blockchainProvider = await ethereumPrivateKeyProvider.setupProvider(finalPrivKey);
      }
      return;
    };
    
  </script>
</head>

<body class="" onload="render()">
</body>

</html>

chaitanyapotti · 2022-11-04T13:15:11Z

chaitanyapotti
Nov 4, 2022
Maintainer

In your verifier, acmecore-dev4 you've setup unique identifier as sub field of your jwt token.
In the code here, you're passing email field from jwt token.
Please either edit the verifier config or the verifierId value

1 reply

rys-acme Nov 4, 2022
Author

I changed both to sub and I still get the same error.

yashovardhan · 2022-11-04T14:39:04Z

yashovardhan
Nov 4, 2022
Maintainer

Hey @rys-acme

I see you're using the one key flow. We released this new sdk: https://www.npmjs.com/package/@web3auth/node-sdk which can facilitate the same one key flow very easily in the backend.

We will be releasing its full documentation and guide by Monday. We'll send you the link.

1 reply

shahbaz17 Nov 8, 2022
Maintainer

Any update on this @rys-acme ?

himanshuchawla009 · 2022-11-09T09:02:34Z

himanshuchawla009
Nov 9, 2022
Maintainer

It is resolved now, issue was buffer polyfill has to be used in plain js example. Adding polyfill returned correct key.

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Web3Auth

one-key-flow fails with verifier not supported #816

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Replies: 3 comments 2 replies

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Web3Auth

one-key-flow fails with verifier not supported #816

Uh oh!

Uh oh!

rys-acme Nov 3, 2022

Replies: 3 comments · 2 replies

Uh oh!

chaitanyapotti Nov 4, 2022 Maintainer

Uh oh!

rys-acme Nov 4, 2022 Author

Uh oh!

Uh oh!

yashovardhan Nov 4, 2022 Maintainer

Uh oh!

shahbaz17 Nov 8, 2022 Maintainer

Uh oh!

himanshuchawla009 Nov 9, 2022 Maintainer

rys-acme
Nov 3, 2022

Replies: 3 comments 2 replies

chaitanyapotti
Nov 4, 2022
Maintainer

rys-acme Nov 4, 2022
Author

yashovardhan
Nov 4, 2022
Maintainer

shahbaz17 Nov 8, 2022
Maintainer

himanshuchawla009
Nov 9, 2022
Maintainer