Authentication

[builde7b0b]

Use a Decentralized identity solution and token-based authentication.

Steps:

• [x] Choose a Decentralized Identity Soluton
• [ ] Integration with DIS
• [ ] Define Authentication Workflow
• [ ] TOken-Based Authentication

[builde7b0b]

Some popular options include uPort, SelfKey, and Ceramic.

[builde7b0b]

Let's use UPORT.

Steps:

• [ ] Get familiar with UPort
• [ ] Setup uPort Dev Account
• [ ] Integrate
• [ ] Implement uPort Authentication Workflow
• [ ] Token Based Authentication

[builde7b0b]

uPort documentation at

Understand the concepts of self-sovereign identity, decentralized identifiers (DIDs), and verifiable credentials supported by uPort.

[builde7b0b]

• Install the uPort Connect SDK by running npm install uport-connect in your project directory.
• Import the uPort Connect library into your code and set up a connection with uPort.

initializing:

import { Connect } from 'uport-connect';

const uport = new Connect('YourApp', {
  network: 'rinkeby', // Specify the desired network (e.g., 'rinkeby' for the Rinkeby test network)
});

Implemenation: Define the authentication workflow using uPort. This typically involves requesting authentication from uPort, handling the authentication response, and verifying the cryptographic signatures.

// Request authentication from uPort
const uportResponse = await uport.requestDisclosure({
  requested: ['name', 'email'], // Specify the requested user information
});

// Verify the cryptographic signature of the uPort response
const verified = await uport.verifyDisclosure(uportResponse);
if (verified) {
  // User authentication successful
  // Access user information from uportResponse and proceed with token-based authentication
} else {
  // User authentication failed
}

[builde7b0b]

Token-Based Authentication

• Upon successful authentication with uPort, generate a JSON Web Token (JWT) containing the relevant user information.
• Provide the JWT to the client-side application for subsequent API requests.
• On the server-side, validate the JWT, extract user information, and authenticate the user.

[builde7b0b]

JWT Steps:

• [x] Install the required dependencies by running npm install jsonwebtoken in your project directory.
• [ ] In your authentication workflow, upon successful verification of the decentralized identity and user information, generate a JWT token using a secret key.
• [ ] Set the JWT token as a response header or include it in the response body.
• [ ] For subsequent requests, the client can include the JWT token in the Authorization header as a Bearer token.
• [ ] On the server, verify and decode the JWT token using the secret key to authenticate and identify the user.
• [ ]
• [ ]