RPC/Provider Authorization Call, 23 Nov

[bumblefudge]

2022-11-22

• PRs

  • idempotency - new PR#184

    • pedro: initial CAIP-25 creates session if there isn't a live one to iterate, but relay tracks across sessions anyways
      • CAIP-27 has session as mandatory
    • pedro: failsafe for expiry - idempotent until session expires on wallet side (gives wallet way to force its own expiry if not negotiated explicitly)
    • pedro: getter == creator of sessions here
    • [x] @bumblefudge will update PR - remove session from REQ and review CAIP-27

  • extensions REMIX - new PR#185

    • [x] - session --> SessionIdentifier
    • [x] - optional session OBJECT (170)? Wallet might extend scope by passing the whole session object, or additional methods not requested...
      • Ligi: But "allowOptional" or some other flag in REQ might make sense, to avoid unpredictable handling or security (or botch the session itself)

  • New proposal for a more aggressive CAIP-25 -

    "params": {
        "required":{
            eip155": {
                "chains": ["eip155:1", "eip155:137"],
                "methods": ["eth_sendTransaction", "eth_signTransaction", "eth_sign", "personal_sign"]
                "events": ["accountsChanged", "chainChanged"]
            },
            "eip155:10": {
                "methods": ["personal_sign"]
                "events": ["accountsChanged", "chainChanged"]
            },
            "cosmos": {
                ...
            }
        },
        "optional":{
            "eip155:10": {
                "methods": ["additional_novel_method"]
                "events": ["novel_event"]
            },
            "sessionVars" {
                "expiry": $timestamp
            }
        }
    },

result:

{
  "id": 1,
  "jsonrpc": "2.0",
  "result": {
    "SessionIdentifier": "0xdeadbeef",
    "accounts": ["eip155:1:0xab16a96d359ec26a11e2c2b3d8f8b8942d5bfcdb"],
    "session": {
        eip155": {
            "chains": ["eip155:1", "eip155:137"],
            "methods": ["eth_sendTransaction", "eth_signTransaction", "eth_sign", "personal_sign"]
            "events": ["accountsChanged", "chainChanged"]
        },
        "eip155:10": {
            "methods": ["personal_sign"]
            "events": ["accountsChanged", "chainChanged", "novel_event"]
        },
        "sessionVars": {
            "expiry": $timestamp
        }    
    }
  }
}

• Juan's questions about this:
  • "Wallets don't change much" - does a wallet revoke all sessions if it upgrades or adds a new snap?
• issues
  • accounts behavior
    • juan's comment on accounts issue
    • notes from last meeting
• next steps? wen ship?
  • [x] - @bumblefudge will reach out to Oren and to MM to try to meet OOB before next meeting