SIWE Support

$ java -jar $JETTY_HOME/start.jar --add-modules=siwe

<Configure id="wac" class="org.eclipse.jetty.ee11.webapp.WebAppContext">
  <Call id="ResourceFactory" class="org.eclipse.jetty.util.resource.ResourceFactory" name="of">
    <Arg><Ref refid="Server"/></Arg>
    <Call id="realmResource" name="newResource">
      <Arg><SystemProperty name="jetty.base" default="."/>/etc/realm.properties</Arg>
    </Call>
  </Call>

  <Call name="getSecurityHandler">
    <Set name="loginService">
      <New class="org.eclipse.jetty.security.HashLoginService">
        <Set name="name">myRealm</Set>
        <Set name="config"><Ref refid="realmResource"/></Set>
      </New>
    </Set>
  </Call>
</Configure>

// This uses jetty-core, but you can configure a ConstraintSecurityHandler for use with EE11.
SecurityHandler.PathMapped securityHandler = new SecurityHandler.PathMapped();
securityHandler.setHandler(handler);
securityHandler.put("/*", Constraint.ANY_USER);

// Add the EthereumAuthenticator to the securityHandler.
EthereumAuthenticator authenticator = new EthereumAuthenticator();
securityHandler.setAuthenticator(authenticator);

// In embedded you can configure via EthereumAuthenticator APIs.
authenticator.setLoginPath("/login.html");

// Or you can configure with parameters on the SecurityHandler.
securityHandler.setParameter(EthereumAuthenticator.LOGIN_PATH_PARAM, "/login.html");

<script src="https://cdn.jsdelivr.net/npm/web3@1.6.1/dist/web3.min.js"></script>

<button id="siwe">Sign-In with Ethereum</button>
<form id="loginForm" action="/auth/login" method="POST" style="display: none;">
    <input type="hidden" id="signatureField" name="signature">
    <input type="hidden" id="messageField" name="message">
</form>
<p class="alert" style="display: none;">Result: <span id="siweResult"></span></p>

<script>
    let provider = window.ethereum;
    let accounts;

    if (!provider) {
        document.getElementById('siweResult').innerText = 'MetaMask is not installed. Please install MetaMask to use this feature.';
    } else {
        document.getElementById('siwe').addEventListener('click', async () => {
            try {
                accounts = await provider.request({ method: 'eth_requestAccounts' });
                const domain = window.location.host;
                const from = accounts[0];

                // Fetch nonce from the server.
                const nonceResponse = await fetch('/auth/nonce');
                const nonceData = await nonceResponse.json();
                const nonce = nonceData.nonce;

                const siweMessage = `${domain} wants you to sign in with your Ethereum account:\n${from}\n\nI accept the MetaMask Terms of Service: https://community.metamask.io/tos\n\nURI: https://${domain}\nVersion: 1\nChain ID: 1\nNonce: ${nonce}\nIssued At: ${new Date().toISOString()}`;
                document.getElementById('signatureField').value = await provider.request({
                    method: 'personal_sign',
                    params: [siweMessage, from]
                });
                document.getElementById('messageField').value = siweMessage;
                document.getElementById('loginForm').submit();
            } catch (error) {
                console.error('Error during login:', error);
                document.getElementById('siweResult').innerText = `Error: ${error.message}`;
                document.getElementById('siweResult').parentElement.style.display = 'block';
            }
        });
    }
</script>