Skip to main content
Version: Next

User Signature

Status​

  • Last Updated: June 1st 2021
  • Stable: Yes
  • Risk of Breaking Change: Low
  • Compatibility: >= @onflow/fcl@0.0.71

Overview and Introduction

Personally sign data via FCL Compatible Wallets

FCL now incldues signUserMessage() which allows for the sending of unencrypted message data to a connected wallet provider or service to be signed with a user's private key.

An application or service can verify a signature against a user's public key on the Flow Blockchain, providing proof a user controls the account's private key.

Use Cases

  • Authentication: Cryptographically verify the ownership of a Flow account by signing a piece of data using a private key
  • Improved Application Login
    • Increased security: Arguably more secure than proof of ownership by email/password
    • Simplified UX: No application password required
    • Increased privacy: No email or third party authentication service needed
  • Message Validation: Assuring that a message sent or received has not been tampered with
  • Multisig contracts
  • Decentralised exchanges
  • Meta transactions

Config and Authentication

As a prerequisite, FCL is configured to point to the Wallet Provider's Authentication Endpoint. No additional configuration is required.

During development (and on mainnet) FCL can be configured to use the wallet directly by setting the Wallet Discovery Url to the wallet provider's Authentication Endpoint by configuring fcl like this config().put("discovery.wallet", "https://my-awesome-wallet-provider.com/fcl/authenticate").

Common Configuration Keys and additional info can be found here How to Configure FCL

  1. A user initiates authentication with the wallet provider via application UI
  2. The wallet confirms a user's identity and sends back information used to configure FCL for future user actions in the application
  3. Included in the authentication response should be the provider's Key Services including a user-signature service for use with signUserMessage()

User Signature Service

A user-signature service is a standard service, with methods for IFRAME/RPC or HTTP/POST.

The user-signature service receives a signable message from FCL and returns a standard PollingResponse with an array of CompositeSignatures or null as the data.

A status of Approved needs to have an array of composite signatures as data.

A status of Declined needs to include a reason why.

A Pending status needs to include an updates service and can include a local. A service using the IFRAME/RPC method can only respond with approved or declined, as pending is not valid for iframes.

When signUserMessage() is called by the application, FCL uses the service method to decide how to send the signable to the wallet.

The Wallet is responsible for prepending the signable with the correct UserDomainTag, hashing, and signing the message.

Signing Sequence

  1. Application sends message to signing service. FCL expects a hexadecimal string
  2. Wallet/Service tags the message with required UserDomainTag (see below), hashes, and signs using the signatureAlgorithm specified on account key
  3. Wallet makes available a Composite Signature consisting of addr, keyId, and signature as a hex string

UserDomainTag​

The UserDomainTag is the prefix of all signed user space payloads.

Before hashing and signing the message, the wallet must add a specified DOMAIN TAG.

currently "FLOW-V0.0-user"

A domain tag is encoded as UTF-8 bytes, right padded to a total length of 32 bytes, prepended to the message.

The signature can now be verified on the Flow blockchain. The following illustrates an example using fcl.verifyUserSignatures


_17
/**
_17
* Verify a valid signature/s for an account on Flow.
_17
*
_17
* @param {string} msg - A message string in hexadecimal format
_17
* @param {Array} compSigs - An array of Composite Signatures
_17
* @param {string} compSigs[].addr - The account address
_17
* @param {number} compSigs[].keyId - The account keyId
_17
* @param {string} compSigs[].signature - The signature to verify
_17
* @return {bool}
_17
*
_17
* @example
_17
*
_17
* const isValid = await fcl.verifyUserSignatures(
_17
* Buffer.from('FOO').toString("hex"),
_17
* [{f_type: "CompositeSignature", f_vsn: "1.0.0", addr: "0x123", keyId: 0, signature: "abc123"}]
_17
* )
_17
*/

TL;DR Wallet Provider​

  • Register with FCL and provide signing service endpoint. No further configuration is needed.
  • On receipt of message, prompt user to approve or decline
  • Prepend UserDomainTag, hash and sign the message with the signatureAlgorithm specified on user's key
  • Return a standard PollingResponse with an array of CompositeSignatures as data or null and reason if declined