init: secp256k1 support (#343)

# Problem

Changes to support Secp256k1 signatures.

# Future work
- Docs still needs to be fixed and updated but the library is good to go

Author: aramikm

.github/workflows/verify-pr-v2-tool-generator.yml

@@ -15,7 +15,7 @@ jobs:
         node-version: [22.x]
     runs-on: ubuntu-latest
     container:
-      image: mcr.microsoft.com/playwright:v1.53.0-noble
+      image: mcr.microsoft.com/playwright:v1.53.1-noble
 
     steps:
       - name: Checkout

.github/workflows/verify-pr-v2-web-sdk.yml

@@ -15,7 +15,7 @@ jobs:
         node-version: [20.x, 22.x]
     runs-on: ubuntu-latest
     container:
-      image: mcr.microsoft.com/playwright:v1.53.0-noble
+      image: mcr.microsoft.com/playwright:v1.53.1-noble
 
     steps:
       - name: Checkout

.gitignore

@@ -56,4 +56,7 @@ package/
 vite.config.js.timestamp-*
 vite.config.ts.timestamp-*
 
-.idea
+.idea
+*.iml
+*.ipr
+*.iws

docs/src/Actions/Response.md

@@ -49,8 +49,9 @@ These credentials follow the [DSNP Verifiable Credentials Specification](https:/
 _Trust Model Note_: You may choose to just trust credentials issued by Frequency Access (or other SIWF-compatible services) given that the credential is fetched directly. These will have issuer `did:web:testnet.frequencyaccess.com` or `did:web:frequencyaccess.com`.
 
 1. Check that the `credentialSubject.id` matches the `userPublicKey` following the [`did:key` Method from the W3C](https://w3c-ccg.github.io/did-key-spec/#format)
-  - Example: `f6cL4wq1HUNx11TcvdABNf9UNXXoyH47mVUwT59tzSFRW8yDH` is the [SS58](https://docs.substrate.io/reference/address-formats/) version with prefix `90` of the hex address `0xd43593c715fdd31c61141abd04a99fd6822c8558854ccde39a5684e7a56da27d`. `0xef01d43593c715fdd31c61141abd04a99fd6822c8558854ccde39a5684e7a56da27d` is multicodec `sr25519-pub` hex which is multiformat `base58-btc` `z6QNzHod3tSSJbwo4e5xGDcnsndsR9WByZzPoCGdbv3sv1jJ`
-2. Fetch the issuer DID Document following the [`did:web` Method from the W3C](https://w3c-ccg.github.io/did-method-web/)
+  - Sr25519 key Example: `f6cL4wq1HUNx11TcvdABNf9UNXXoyH47mVUwT59tzSFRW8yDH` is the [SS58](https://docs.substrate.io/reference/address-formats/) version with prefix `90` of the hex address `0xd43593c715fdd31c61141abd04a99fd6822c8558854ccde39a5684e7a56da27d`. `0xef01d43593c715fdd31c61141abd04a99fd6822c8558854ccde39a5684e7a56da27d` is multicodec `sr25519-pub` hex which is multiformat `base58-btc` `z6QNzHod3tSSJbwo4e5xGDcnsndsR9WByZzPoCGdbv3sv1jJ`
+  - Secp256k1 ket example:  `f6bgm3jyDVNxMf9zdYgHZmAQ8DqLVFDzvHQQc2BBpa5SK2bDw` is the [SS58](https://docs.substrate.io/reference/address-formats/) version with prefix `90` of the hex address `0xb7c13f4176ca799975d9cce4bafe4814a9d824faeeeeeeeeeeeeeeeeeeeeeeee`. `0xe701b7c13f4176ca799975d9cce4bafe4814a9d824faeeeeeeeeeeeeeeeeeeeeeeee` is multicodec `secp256k1-pub` (this will not work since we only have the 32 byte account id not the 33 byte public key) (?)
+3. Fetch the issuer DID Document following the [`did:web` Method from the W3C](https://w3c-ccg.github.io/did-method-web/)
   - Production-Mainnet should always be `did:web:frequencyaccess.com` which resolves to `https://frequencyaccess.com/.well-known/did.json`
   - Staging-Testnet should always be `did:web:testnet.frequencyaccess.com` which resolves to `https://testnet.frequencyaccess.com/.well-known/did.json`
 3. Check that the key in the `proof.verificationMethod` is in the DID Document to verify that the key is still valid
@@ -112,7 +113,7 @@ Inside the message, `{{domain}}` is the domain of the application requesting the
 
 #### Validation Steps
 
-1. Perform an Sr25519 signature verification using:
+1. Perform an Sr25519/Secp256k1 signature verification using:
     - `userPublicKey`: The signing key
     - `payload.message`: The signed message parsing `\n` into `LF` line breaks
     - `signature.encodedValue`: The signature
@@ -175,12 +176,24 @@ SIWF services do not manage user sessions.
 
 ## New Frequency User Response
 
-{{#include ../DataStructures/Response-NewUser.md 0}}
+### Sr25519
+{{#include ../DataStructures/Sr25519/Response-NewUser.md 0}}
+
+### Secp256k1
+{{#include ../DataStructures/Secp256k1/Response-NewUser.md 0}}
 
 ## New Application/Delegation Response
 
-{{#include ../DataStructures/Response-NewProvider.md 0}}
+### Sr25519
+{{#include ../DataStructures/Sr25519/Response-NewProvider.md 0}}
+
+### Secp256k1
+{{#include ../DataStructures/Secp256k1/Response-NewProvider.md 0}}
 
 ## Login Only Response
 
-{{#include ../DataStructures/Response-LoginOnly.md 0}}
+### Sr25519
+{{#include ../DataStructures/Sr25519/Response-LoginOnly.md 0}}
+
+### Secp256k1
+{{#include ../DataStructures/Secp256k1/Response-LoginOnly.md 0}}

docs/src/Actions/Start.md

@@ -74,13 +74,23 @@ For example, if you wish to correlate the original unauthorized session with the
 
 ### Example
 
+#### Sr25519
 Parameters
 
-{{#include ../DataStructures/Request.md 0}}
+{{#include ../DataStructures/Sr25519/Request.md 0}}
 
 Testnet Authentication URL
 
-{{#include ../DataStructures/RequestUrl.md 0}}
+{{#include ../DataStructures/Sr25519/RequestUrl.md 0}}
+
+#### Secp256k1
+Parameters
+
+{{#include ../DataStructures/Secp256k1/Request.md 0}}
+
+Testnet Authentication URL
+
+{{#include ../DataStructures/Secp256k1/RequestUrl.md 0}}
 
 ## Step 4: Redirect the User
 

docs/src/DataStructures/All.md

@@ -4,29 +4,53 @@
 
 ### Request
 
-{{#include Request.md 0}}
+#### Sr25519
+{{#include ./Sr25519/Request.md 0}}
+
+#### Secp256k1
+{{#include ./Secp256k1/Request.md 0}}
 
 ### Request URL
 
-{{#include RequestUrl.md 0}}
+#### Sr25519
+{{#include ./Sr25519/RequestUrl.md 0}}
+
+#### Secp256k1
+{{#include ./Secp256k1/RequestUrl.md 0}}
 
 ### Signed Request
 
 This is JSON stringified and then [`base64url`](https://datatracker.ietf.org/doc/html/rfc4648#section-5) encoded for the Request `signedRequest` value.
 
-{{#include SignedRequest.md 0}}
+#### Sr25519
+{{#include ./Sr25519/SignedRequest.md 0}}
+
+#### Secp256k1
+{{#include ./Secp256k1/SignedRequest.md 0}}
 
 ### New Frequency User Response
 
-{{#include Response-NewUser.md 0}}
+#### Sr25519
+{{#include ./Sr25519/Response-NewUser.md 0}}
+
+#### Secp256k1
+{{#include ./Secp256k1/Response-NewUser.md 0}}
 
 ### New Application/Delegation Response
 
-{{#include Response-NewProvider.md}}
+#### Sr25519
+{{#include ./Sr25519/Response-NewProvider.md 0}}
+
+#### Secp256k1
+{{#include ./Secp256k1/Response-NewProvider.md 0}}
 
 ### Login Only Response
 
-{{#include Response-LoginOnly.md}}
+#### Sr25519
+{{#include ./Sr25519/Response-LoginOnly.md 0}}
+
+#### Secp256k1
+{{#include ./Secp256k1/Response-LoginOnly.md 0}}
 
 ## Verified User Data
 

docs/src/DataStructures/Secp256k1/Request.md

@@ -0,0 +1,6 @@
+```json
+{
+  "signedRequest": "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",
+  "mode": "dark"
+}
+```

docs/src/DataStructures/Secp256k1/RequestUrl.md

@@ -0,0 +1,3 @@
+```json
+"https://testnet.frequencyaccess.com/siwa/start?signedRequest=eyJyZXF1ZXN0ZWRTaWduYXR1cmVzIjp7InB1YmxpY0tleSI6eyJlbmNvZGVkVmFsdWUiOiIweGYyNGZmM2E5Y2YwNGM3MWRiYzk0ZDBiNTY2ZjdhMjdiOTQ1NjZjYWMiLCJlbmNvZGluZyI6ImJhc2UxNiIsImZvcm1hdCI6ImVpcC01NSIsInR5cGUiOiJTZWNwMjU2azEifSwic2lnbmF0dXJlIjp7ImFsZ28iOiJTRUNQMjU2SzEiLCJlbmNvZGluZyI6ImJhc2UxNiIsImVuY29kZWRWYWx1ZSI6IjB4YWFlYjM1MTJiZjMzNDVlOThhODkwZjE0MDk1NGIwMGQxNjAwMjAzNDA2ZTllZDg1ZTczMmFkMzg5ZjVhNjBlMjY0YmZjOTgwOGFkZTgwZTZiOWNjOWM2MTgyYjUyZTJhNTcwNTJlZmYwOTFlNTBlNDBmNzVhZjM4NmVhZWE2NTUxYiJ9LCJwYXlsb2FkIjp7ImNhbGxiYWNrIjoiaHR0cDovL2xvY2FsaG9zdDozMDAwIiwicGVybWlzc2lvbnMiOls1LDcsOCw5LDEwXX19LCJyZXF1ZXN0ZWRDcmVkZW50aWFscyI6W3sidHlwZSI6IlZlcmlmaWVkR3JhcGhLZXlDcmVkZW50aWFsIiwiaGFzaCI6WyJiY2lxbWR2bXhkNTR6dmU1a2lmeWNnc2R0b2FoczVlY2Y0aGFsMnRzM2VleGtnb2N5YzVvY2EyeSJdfSx7ImFueU9mIjpbeyJ0eXBlIjoiVmVyaWZpZWRFbWFpbEFkZHJlc3NDcmVkZW50aWFsIiwiaGFzaCI6WyJiY2lxZTRxb2N6aGZ0aWNpNGR6ZnZmYmVsN2ZvNGg0c3I1Z3JjbzNvb3Z3eWs2eTR5bmY0NHRzaSJdfSx7InR5cGUiOiJWZXJpZmllZFBob25lTnVtYmVyQ3JlZGVudGlhbCIsImhhc2giOlsiYmNpcWpzcG5id3BjM3dqeDRmZXdjZWs1ZGF5c2RqcGJmNXhqaW16NXdudTV1ajdlM3Z1MnV3bnEiXX1dfV19&mode=dark"
+```

docs/src/DataStructures/Secp256k1/Response-LoginOnly.md

@@ -0,0 +1,24 @@
+```json
+{
+  "userPublicKey": {
+    "encodedValue": "0xf24FF3a9CF04c71Dbc94D0b566f7A27B94566cac",
+    "encoding": "base16",
+    "format": "eip-55",
+    "type": "Secp256k1"
+  },
+  "payloads": [
+    {
+      "signature": {
+        "algo": "SECP256K1",
+        "encoding": "base16",
+        "encodedValue": "0xe8a1f5ef2c4afc8296adf84f92971bf270d68e89ffc512d13d6f5b99c3b2cd9108d5868e8a3a46d1c406137947d73a054888e195390a1fc4f69c4b16df4119d41b"
+      },
+      "type": "login",
+      "payload": {
+        "message": "your-app.com wants you to sign in with your Frequency account:\n0xf24ff3a9cf04c71dbc94d0b566f7a27b94566cac\n\n\n\nURI: https://your-app.com/signin/callback\nNonce: N6rLwqyz34oUxJEXJ\nIssued At: 2024-10-29T19:17:27.077Z\nExpiration Time: 2060-03-05T23:23:03.041Z"
+      }
+    }
+  ],
+  "credentials": []
+}
+```

docs/src/DataStructures/Secp256k1/Response-NewProvider.md

@@ -0,0 +1,36 @@
+```json
+{
+  "userPublicKey": {
+    "encodedValue": "0xf24FF3a9CF04c71Dbc94D0b566f7A27B94566cac",
+    "encoding": "base16",
+    "format": "eip-55",
+    "type": "Secp256k1"
+  },
+  "payloads": [
+    {
+      "signature": {
+        "algo": "SECP256K1",
+        "encoding": "base16",
+        "encodedValue": "0xb3e41e53373649d089455965791c47f695f519eb21bd322febf04bd05f2b50b72c395c4490ac6cd0d108d0a77f625aea8b1f0096befc359936669d620f5aad7e1c"
+      },
+      "endpoint": {
+        "pallet": "msa",
+        "extrinsic": "grantDelegation"
+      },
+      "type": "addProvider",
+      "payload": {
+        "authorizedMsaId": 1,
+        "schemaIds": [
+          5,
+          7,
+          8,
+          9,
+          10
+        ],
+        "expiration": 24
+      }
+    }
+  ],
+  "credentials": []
+}
+```