lib.ft4.core.auth

An auth handler defines who can and should call a specific operation. A new auth handler

This struct represents default auth descriptor configurations that can be used by the client

The arguments of the evmauth operation

configuration used by the auth module, as defined in the chromia.yml file

Similar to accounts.rulevariable, but it adds two more variables that only make sense

An EVM signature

Given a message, a valid EVM signature will add some information to it prior to hashing it

Retrieves the signers and signatures from the evmsignatures operation.

Given the message and signature, extracts the evm address that signed it.

Verifies that the signer of a certain message is the signer of the single-sig auth

Verifies that the arguments passed to the evmauth operation are valid.

Verifies that the signature found in the evmauth operation is valid to authorize the

Verifies that the signature found in the ftauth operation is valid to authorize the

Verifies that the message has been authorized by the multi-sig auth descriptor.

Utility function that allows easily adding an auth handler.

Utility function to help extend the loginconfig function.

Like addauthhandler, but the auth handler here defined will not be used if a different

This function can be extended by users to add custom logic after the authentication of

Retrieves the arguments of the operation that led to this function call

Extendable function used to define auth handlers. When called it returns a map of all auth

calls authenticateandreturncontext and returns just the account

Verifies that:

This function can be extended by users to add custom logic before the authentication of

Creates the message that should be signed on an EVM wallet to approve the given operation.

Extracts the account ID and auth descriptor ID from the args of the auth operation,

Extracts the account ID passed to the auth operation, which is any operation supported by

Extracts the account and accountauthdescriptor from the args of the auth operation,

Creates message from operation name and arguments. It is used when evmauth is used to

Retrieves the account and auth descriptor ID from the auth operation that precedes the

Returns the flags needed to call a certain operation.

Finds the auth handler for the provided operation name among all the auth handlers

Returns the auth message template that is needed to authorize a certain operation, given its

Retrieves the signers and signatures from the evmsignatures operation in the

Calculates the best auth descriptor to use for the given account when calling the given

Like getfirstallowedauthdescriptor, but instead of accepting a list of auth descriptors

Retrieves the auth handler that should be applied to the given operation name, only looking

Checks whether auth operations cannot be used with provided operation.

Verifies whether the operation passed is an auth operation, that is one of:

Checks whether evmsignatures operation can be used with provided operation.

Verifies whether the operation passed is evmsignatures

Utility function that builds a mount scope given all the parts of it and a number indicating

This function can be extended by users to add custom login configurations.

Converts a list of ruleexpression to a complex rule that can be used inside an auth

Alias for maprule

Converts a ruleexpression to a gtv config that can be used inside an auth descriptor's

Same as accounts.blockheight, but using the relative rule variable.

Same as accounts.blocktime, but using the relative rule variable.

Ensures that this operation is authorizing an operation which is whitelisted for usage with

Verifies that the next operation is one that will make use of the auth operation that is

Verifies that the scope name is valid, i.e. that it matches this regex:

Retrieves an accountauthdescriptor given the account it's associated with and the

Creates a time-to-live rule, which makes the auth descriptor expire after a certain

Ensures that the scope is valid, also trimming leading and trailing whitespace.

Checks if the signer has the correct size

Verifies whether provided list of signers have signed the operation/transaction.

Does what verifysigners does, but receives the message as a parameter instead of using

name of the operation used to authorize through EVM signatures

name of the operation used to authorize through FT signatures

size of a bytearray representing an EVM address, in bytes

size of a bytearray representing an FT pubkey, in bytes

tag used in auth message construction which will be replaced with blockchain RID

tag used in auth message construction which will be replaced with the authorizing account ID

tag used in auth message construction which will be replaced with the authenticating

tag used in auth message construction which will be replaced with the unique nonce

The name of the default login configuration. This will be used when none is specified

The constant that defines app level authentication scope.

This prefix could appear before an auth handler's scope to mark that it can be overridden.