feature/1121 implement ucan validation (#1176)

- **refactor: remove unused auth components**
- **refactor: improve devbox configuration and deployment process**
- **refactor: improve devnet and testnet setup**
- **fix: update templ version to v0.2.778**
- **refactor: rename pkl/net.matrix to pkl/matrix.net**
- **refactor: migrate webapp components to nebula**
- **refactor: protobuf types**
- **chore: update dependencies for improved security and stability**
- **feat: implement landing page and vault gateway servers**
- **refactor: Migrate data models to new module structure and update
related files**
- **feature/1121-implement-ucan-validation**
- **refactor: Replace hardcoded constants with model types in attns.go**
- **feature/1121-implement-ucan-validation**
- **chore: add origin Host struct and update main function to handle
multiple hosts**
- **build: remove unused static files from dwn module**
- **build: remove unused static files from dwn module**
- **refactor: Move DWN models to common package**
- **refactor: move models to pkg/common**
- **refactor: move vault web app assets to embed module**
- **refactor: update session middleware import path**
- **chore: configure port labels and auto-forwarding behavior**
- **feat: enhance devcontainer configuration**
- **feat: Add UCAN middleware for Echo with flexible token validation**
- **feat: add JWT middleware for UCAN authentication**
- **refactor: update package URI and versioning in PklProject files**
- **fix: correct sonr.pkl import path**
- **refactor: move JWT related code to auth package**
- **feat: introduce vault configuration retrieval and management**
- **refactor: Move vault components to gateway module and update file
paths**
- **refactor: remove Dexie and SQLite database implementations**
- **feat: enhance frontend with PWA features and WASM integration**
- **feat: add Devbox features and streamline Dockerfile**
- **chore: update dependencies to include TigerBeetle**
- **chore(deps): update go version to 1.23**
- **feat: enhance devnet setup with PATH environment variable and
updated PWA manifest**
- **fix: upgrade tigerbeetle-go dependency and remove indirect
dependency**
- **feat: add PostgreSQL support to devnet and testnet deployments**
- **refactor: rename keyshare cookie to token cookie**
- **feat: upgrade Go version to 1.23.3 and update dependencies**
- **refactor: update devnet and testnet configurations**
- **feat: add IPFS configuration for devnet**
- **I'll help you update the ipfs.config.pkl to include all the peers
from the shell script. Here's the updated configuration:**
- **refactor: move mpc package to crypto directory**
- **feat: add BIP32 support for various cryptocurrencies**
- **feat: enhance ATN.pkl with additional capabilities**
- **refactor: simplify smart account and vault attenuation creation**
- **feat: add new capabilities to the Attenuation type**
- **refactor: Rename MPC files for clarity and consistency**
- **feat: add DIDKey support for cryptographic operations**
- **feat: add devnet and testnet deployment configurations**
- **fix: correct key derivation in bip32 package**
- **refactor: rename crypto/bip32 package to crypto/accaddr**
- **fix: remove duplicate indirect dependency**
- **refactor: move vault package to root directory**
- **refactor: update routes for gateway and vault**
- **refactor: remove obsolete web configuration file**
- **refactor: remove unused TigerBeetle imports and update host
configuration**
- **refactor: adjust styles directory path**
- **feat: add broadcastTx and simulateTx functions to gateway**
- **feat: add PinVault handler**

pkg/common/cookie/codec.go

@@ -0,0 +1,35 @@
+package cookie
+
+// Key is a type alias for string.
+type Key string
+
+const (
+	// SessionID is the key for the session ID cookie.
+	SessionID Key = "session.id"
+
+	// SessionChallenge is the key for the session challenge cookie.
+	SessionChallenge Key = "session.challenge"
+
+	// SessionRole is the key for the session role cookie.
+	SessionRole Key = "session.role"
+
+	// SonrAddress is the key for the Sonr address cookie.
+	SonrAddress Key = "sonr.address"
+
+	// SonrDID is the key for the Sonr DID cookie.
+	SonrDID Key = "sonr.did"
+
+	// UserHandle is the key for the User Handle cookie.
+	UserHandle Key = "user.handle"
+
+	// VaultCID is the key for the Vault CID cookie.
+	VaultCID Key = "vault.cid"
+
+	// VaultSchema is the key for the Vault schema cookie.
+	VaultSchema Key = "vault.schema"
+)
+
+// String returns the string representation of the CookieKey.
+func (c Key) String() string {
+	return string(c)
+}

pkg/common/cookie/cookie.go

@@ -0,0 +1,77 @@
+package cookie
+
+import (
+	"encoding/base64"
+	"net/http"
+	"time"
+
+	"github.com/labstack/echo/v4"
+)
+
+func Exists(c echo.Context, key Key) bool {
+	ck, err := c.Cookie(key.String())
+	if err != nil {
+		return false
+	}
+	return ck != nil
+}
+
+func Read(c echo.Context, key Key) (string, error) {
+	cookie, err := c.Cookie(key.String())
+	if err != nil {
+		// Cookie not found or other error
+		return "", err
+	}
+	if cookie == nil || cookie.Value == "" {
+		// Cookie is empty
+		return "", http.ErrNoCookie
+	}
+	return cookie.Value, nil
+}
+
+func ReadBytes(c echo.Context, key Key) ([]byte, error) {
+	cookie, err := c.Cookie(key.String())
+	if err != nil {
+		// Cookie not found or other error
+		return nil, err
+	}
+	if cookie == nil || cookie.Value == "" {
+		// Cookie is empty
+		return nil, http.ErrNoCookie
+	}
+	return base64.RawURLEncoding.DecodeString(cookie.Value)
+}
+
+func ReadUnsafe(c echo.Context, key Key) string {
+	ck, err := c.Cookie(key.String())
+	if err != nil {
+		return ""
+	}
+	return ck.Value
+}
+
+func Write(c echo.Context, key Key, value string) error {
+	cookie := &http.Cookie{
+		Name:     key.String(),
+		Value:    value,
+		Expires:  time.Now().Add(24 * time.Hour),
+		HttpOnly: true,
+		Path:     "/",
+		// Add Secure and SameSite attributes as needed
+	}
+	c.SetCookie(cookie)
+	return nil
+}
+
+func WriteBytes(c echo.Context, key Key, value []byte) error {
+	cookie := &http.Cookie{
+		Name:     key.String(),
+		Value:    base64.RawURLEncoding.EncodeToString(value),
+		Expires:  time.Now().Add(24 * time.Hour),
+		HttpOnly: true,
+		Path:     "/",
+		// Add Secure and SameSite attributes as needed
+	}
+	c.SetCookie(cookie)
+	return nil
+}