feat: simplify off-chain-auth by removing nonce and using ed25519 to verify signature

[ruojunm]

Description

feat: simplify off-chain-auth by removing nonce and using ed25519 to verify signature

Rationale

off-chain-auth was over-designed and now we need make it simpler and easy to use.

Example

• Register

curl --location --request POST '127.0.0.1:9033/auth/update_key_v2' \
--header 'Referer: https://dcellar-qa.fe.nodereal.cc/' \
--header 'x-gnfd-user-address: 0xA4cFe2dE3e45C043524aaC46fDdFb46311aF0af6' \
--header 'x-gnfd-app-domain: https://dcellar-qa.fe.nodereal.cc' \
--header 'x-gnfd-app-reg-public-key: 5a3271a38dfadf7b73769173d03ac6d2442f7015bf2224cfa15f8a65008cdf8a' \
--header 'x-gnfd-expiry-timestamp: 2024-03-04T09:07:48Z' \
--header 'authorization: GNFD1-ETH-PERSONAL_SIGN,SignedMsg=https://dcellar-qa.fe.nodereal.cc wants you to sign in with your BNB Greenfield account:0xA4cFe2dE3e45C043524aaC46fDdFb46311aF0af6\nRegister your identity public key 5a3271a38dfadf7b73769173d03ac6d2442f7015bf2224cfa15f8a65008cdf8a\nURI: https://dcellar-qa.fe.nodereal.cc\nVersion: 1\nChain ID: 9000\nIssued At: 2024-02-28T09:07:48Z\nExpiration Time: 2024-03-04T09:07:48Z,Signature=0x827ad691f2e0a97c5bccf8592f5c62d94950797b5a8505089324190a8358eb6c2d7adbd254c89f27a2135a5680658badda3d4bcfb93118f24a801b59259d380c1c' \
--header 'Origin: https://dcellar-qa.fe.nodereal.cc' 

• Adding signature by using ed25519

curl --location 'https://clyde-test8-2.gf-devnet-sp-a-bk.dev.nodereal.cc/clyde-test8-2.txt' \
--header 'User-Agent: Greenfield (darwin; arm64) greenfield-go-sdk/v0.1.0' \
--header 'X-Gnfd-Date: 2024-03-05T07:45:58Z' \
--header 'x-gnfd-app-domain: https://test.domain.com' \
--header 'authorization: GNFD2-EDDSA,Signature=784831a5d1f588090295c1f64ef43b003effff93d092f04f88c67946af108fd7f7abe6180865e270a1a34a8f46d1c5f8c13b7923708c285523dc222b61c3140b' \
--header 'Content-Type: application/octet-stream' \
--header 'X-Gnfd-Content-Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855' \
--header 'x-gnfd-expiry-timestamp: 2024-03-05T08:02:38Z' \
--header 'X-Gnfd-User-Address: 0xA4cFe2dE3e45C043524aaC46fDdFb46311aF0af6' \
--header 'X-Gnfd-App-Reg-Public-Key: e0d61609201e9cece55e8999a40a74f5119003b1d49fad32882fa50547c4bf90'

Changes

Notable changes:

• removing nonce concept during public key registration process
• use ed25519 rather than bn254 (in gnark-crypto) for eddsa curve
• support multiple keys for each "user + domain" combination
• new authentication method is called GNFD2-EDDSA

Potential Impacts

• No impacts for clients that using old version of off-chain-auth, as the changes are backward compatible.

[constwz]

LGTM