question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Backend signature verification

See original GitHub issue

Hello, We’re currently trying to implement an authentication workflow using the user’s wallet signature. We’ve managed to do it in the frontend side, but we’re now struggling to implement its verification on the backend side.

Verifying the signature isn’t a problem on the frontend since we do have the account instance so we can use account.verifyMessage. How to do it on the backend side though ? Since we do not have the account instance. We’ve thought about instanciating a new signer corresponding to the account on the backend and verifying the signature using this one, but we can’t instanciate this signer without the account’s public key, that we do not manage to get in the frontend, the account’s signer’s pubkey being null.

What are we doing wrong ? How can we fix this ?

Thanks!

Issue Analytics

  • State:closed
  • Created a year ago
  • Comments:6

github_iconTop GitHub Comments

1reaction
gianlukk994commented, Sep 26, 2022

@ivpavici Many thanks for your help here and on Discord! @Agostin, thanks for the link!

1reaction
ivpavicicommented, Sep 26, 2022

@Agostin @gianlukk994 I honestly don’t know, but I didn’t hear anything change about this in the meantime… so I guess this is how it works (on-chain)

Read more comments on GitHub >

github_iconTop Results From Across the Web

Mobile Platform as a Service:Backend signature verification
Mobile Gateway Service provides the function of verifying server HTTP service signature to improve the security of data from gateway to ...
Read more >
Configuring Signature Verification for Backend Services - 华为云
Signature keys are used by backend services to verify the identity of ROMA Connect to ensure secure access.A signature key consists of a...
Read more >
Signature verification - App development
Why verify request signatures? ... Once you enable signature verification checks, all HTTP requests that Canva sends to ... Backend development - Previous....
Read more >
Backend Signature-API Gateway-Products-Documentation-JD ...
The Backend Signature Key Pair employs backend signature verification to guarantee your backend security after your real backend is requested by JD Cloud ......
Read more >
Workflow to verify a user signature from a backend service
It is possible to validate the signature by calling a contract that uses ecrecover(hash, v, r, s); , but is this the correct...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found