How It Works

import { ActionCodesClient } from '@actioncodes/sdk'

const client = new ActionCodesClient({
  authToken: process.env.ACTION_CODES_TOKEN
})

async function signIn(code: string) {
  // 1. Verify the code and get the wallet address
  const actionCode = await client.resolve(code)
  const walletAddress = actionCode.pubkey

  // 2. Create a sign-in message with a nonce
  const nonce = crypto.randomUUID()
  const message = `Sign in to MyApp\nWallet: ${walletAddress}\nNonce: ${nonce}`

  // 3. Attach it to the code
  await client.attachMessage(code, message)

  // 4. Wait for user to sign
  for await (const status of client.observeStatus(code)) {
    if (status.signedMessage) {
      // 5. Verify the signature matches the wallet
      const isValid = verifySignature(status.signedMessage, message, walletAddress)

      if (isValid) {
        // Create session for this wallet
        return createSession(walletAddress)
      }
    }
  }

  throw new Error('Sign-in failed or timed out')
}