Skip to content

feat(backend): retire mock wallet auth and unify challenge verification#319

Merged
Kaylahray merged 1 commit into
geevapp:mainfrom
Ezeh20:feat/remove-mock-wallet-auth
Jun 1, 2026
Merged

feat(backend): retire mock wallet auth and unify challenge verification#319
Kaylahray merged 1 commit into
geevapp:mainfrom
Ezeh20:feat/remove-mock-wallet-auth

Conversation

@Ezeh20
Copy link
Copy Markdown

@Ezeh20 Ezeh20 commented Jun 1, 2026

Pull Request Template

Description

Retires the legacy mock wallet authentication path and makes the SEP-10 challenge/verify flow the canonical production auth model for both login and registration.

Fixes #306

This change removes legacy mock signature verification from production auth flows, centralizes secure wallet verification in a shared backend helper, preserves replay protection through used challenge tracking, and updates the wallet auth UI to sign server-issued Stellar challenges instead of plain messages.


Checklist

  • I have tested my changes locally
  • I have run npx prisma generate after schema changes
  • I have run npx prisma migrate dev or npx prisma migrate deploy as appropriate

Notes:

  • No Prisma schema changes were made in this PR, so no migration was required.
  • Local verification run:
    • corepack pnpm exec vitest run tests/api/auth-credentials.test.ts tests/lib/wallet-auth.test.ts
  • Prisma client generation run:
    • npx prisma generate

Post-Merge Steps for Maintainers

If this PR includes changes to the Prisma schema:

  1. Run the following command to apply the migration to your database:

    npx prisma migrate deploy

@drips-wave
Copy link
Copy Markdown

drips-wave Bot commented Jun 1, 2026

@Ezeh20 Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

@Kaylahray Kaylahray merged commit 221a84a into geevapp:main Jun 1, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Backend] Remove legacy mock wallet authentication

3 participants