Sign In with Solana API Server

Express x JWT x Sign In with Solana API server minimal example.
For experiment purpose only. I highly recommend to do security vulnerability assesments before launch.

System Process and Program Scope

Tech

• Express.js(API Mode)
• JWT: node-jsonwebtoken
• Sign: Sign Message

Run

Run API Server

% npm i
% npm run dev

Request URL

Import Postman request.

Then request API using Postman:

1. http://localhost:4100/auths/create-message
2. http://localhost:4100/auths/sign-message
3. http://localhost:4100/auths/verify-signature
4. http://localhost:4100/auths/sign-in
5. http://localhost:4100/auths/verify-jwt

Note

Phantom make new standard Sign In With Solana (SIWS).

TODO

• Follow Sign In With (SIW) standards(EIP-4361)
  • EIP-4361: Sign-In with Ethereum
  • Phantom Sign In With Solana (EIP-4361 with Solana address & chain-id grammar)
  • Implementation example - Web3Auth
• Encrypt JWT using jose

Another Way

If you need to full-stack, use Blocksmith-Labs/solana-next-auth (build with NextAuth.js and Next.js).