feature/1121 implement ucan validation (#1176)

- **refactor: remove unused auth components**
- **refactor: improve devbox configuration and deployment process**
- **refactor: improve devnet and testnet setup**
- **fix: update templ version to v0.2.778**
- **refactor: rename pkl/net.matrix to pkl/matrix.net**
- **refactor: migrate webapp components to nebula**
- **refactor: protobuf types**
- **chore: update dependencies for improved security and stability**
- **feat: implement landing page and vault gateway servers**
- **refactor: Migrate data models to new module structure and update
related files**
- **feature/1121-implement-ucan-validation**
- **refactor: Replace hardcoded constants with model types in attns.go**
- **feature/1121-implement-ucan-validation**
- **chore: add origin Host struct and update main function to handle
multiple hosts**
- **build: remove unused static files from dwn module**
- **build: remove unused static files from dwn module**
- **refactor: Move DWN models to common package**
- **refactor: move models to pkg/common**
- **refactor: move vault web app assets to embed module**
- **refactor: update session middleware import path**
- **chore: configure port labels and auto-forwarding behavior**
- **feat: enhance devcontainer configuration**
- **feat: Add UCAN middleware for Echo with flexible token validation**
- **feat: add JWT middleware for UCAN authentication**
- **refactor: update package URI and versioning in PklProject files**
- **fix: correct sonr.pkl import path**
- **refactor: move JWT related code to auth package**
- **feat: introduce vault configuration retrieval and management**
- **refactor: Move vault components to gateway module and update file
paths**
- **refactor: remove Dexie and SQLite database implementations**
- **feat: enhance frontend with PWA features and WASM integration**
- **feat: add Devbox features and streamline Dockerfile**
- **chore: update dependencies to include TigerBeetle**
- **chore(deps): update go version to 1.23**
- **feat: enhance devnet setup with PATH environment variable and
updated PWA manifest**
- **fix: upgrade tigerbeetle-go dependency and remove indirect
dependency**
- **feat: add PostgreSQL support to devnet and testnet deployments**
- **refactor: rename keyshare cookie to token cookie**
- **feat: upgrade Go version to 1.23.3 and update dependencies**
- **refactor: update devnet and testnet configurations**
- **feat: add IPFS configuration for devnet**
- **I'll help you update the ipfs.config.pkl to include all the peers
from the shell script. Here's the updated configuration:**
- **refactor: move mpc package to crypto directory**
- **feat: add BIP32 support for various cryptocurrencies**
- **feat: enhance ATN.pkl with additional capabilities**
- **refactor: simplify smart account and vault attenuation creation**
- **feat: add new capabilities to the Attenuation type**
- **refactor: Rename MPC files for clarity and consistency**
- **feat: add DIDKey support for cryptographic operations**
- **feat: add devnet and testnet deployment configurations**
- **fix: correct key derivation in bip32 package**
- **refactor: rename crypto/bip32 package to crypto/accaddr**
- **fix: remove duplicate indirect dependency**
- **refactor: move vault package to root directory**
- **refactor: update routes for gateway and vault**
- **refactor: remove obsolete web configuration file**
- **refactor: remove unused TigerBeetle imports and update host
configuration**
- **refactor: adjust styles directory path**
- **feat: add broadcastTx and simulateTx functions to gateway**
- **feat: add PinVault handler**

pkg/gateway/middleware/ipfs.go

@@ -0,0 +1,132 @@
+package middleware
+
+import (
+	"errors"
+	"fmt"
+	"io"
+	"net/http"
+	"path/filepath"
+	"strings"
+
+	"github.com/ipfs/boxo/files"
+	"github.com/ipfs/kubo/client/rpc"
+	"github.com/labstack/echo/v4"
+)
+
+type IPFSContext struct {
+	echo.Context
+	ipfs *rpc.HttpApi
+}
+
+func IPFSMiddleware(client *rpc.HttpApi) echo.MiddlewareFunc {
+	return func(next echo.HandlerFunc) echo.HandlerFunc {
+		return func(c echo.Context) error {
+			cc := &IPFSContext{
+				Context: c,
+				ipfs:    client,
+			}
+			return next(cc)
+		}
+	}
+}
+
+func GetIPFSClient(c echo.Context) (*rpc.HttpApi, error) {
+	cc, ok := c.(*IPFSContext)
+	if !ok {
+		return nil, errors.New("not an IPFSContext")
+	}
+	if cc.ipfs == nil {
+		return nil, errors.New("no IPFS client")
+	}
+	return cc.ipfs, nil
+}
+
+func getContentType(path string, defaultType string) string {
+	ext := strings.ToLower(filepath.Ext(path))
+	switch ext {
+	case ".html", ".htm":
+		return "text/html"
+	case ".css":
+		return "text/css"
+	case ".js":
+		return "application/javascript"
+	case ".jpg", ".jpeg":
+		return "image/jpeg"
+	case ".png":
+		return "image/png"
+	case ".gif":
+		return "image/gif"
+	case ".svg":
+		return "image/svg+xml"
+	case ".json":
+		return "application/json"
+	case ".xml":
+		return "application/xml"
+	case ".pdf":
+		return "application/pdf"
+	case ".zip":
+		return "application/zip"
+	case ".mp4":
+		return "video/mp4"
+	case ".mp3":
+		return "audio/mpeg"
+	case ".woff":
+		return "font/woff"
+	case ".woff2":
+		return "font/woff2"
+	case ".ttf":
+		return "font/ttf"
+	default:
+		return defaultType
+	}
+}
+
+func streamFile(c echo.Context, file files.File, cid string, filePath string) error {
+	// Get file size if possible
+	stat, err := file.Size()
+	if err == nil {
+		c.Response().Header().Set("Content-Length", fmt.Sprintf("%d", stat))
+	}
+
+	// Set content type based on file extension first
+	contentType := getContentType(filePath, "")
+
+	// If no content type found by extension, detect from content
+	if contentType == "" {
+		buffer := make([]byte, 512)
+		_, err = file.Read(buffer)
+		if err != nil && err != io.EOF {
+			return err
+		}
+		contentType = http.DetectContentType(buffer)
+
+		// Reset file pointer after reading for content type detection
+		if seeker, ok := file.(io.Seeker); ok {
+			_, err = seeker.Seek(0, io.SeekStart)
+			if err != nil {
+				return err
+			}
+		}
+	}
+
+	// Set headers
+	c.Response().Header().Set("Content-Type", contentType)
+	c.Response().Header().Set("ETag", fmt.Sprintf(`"%s"`, cid))
+	c.Response().Header().Set("Cache-Control", "public, max-age=29030400, immutable")
+	c.Response().Header().Set("X-Content-Type-Options", "nosniff")
+	c.Response().Header().Set("X-Frame-Options", "DENY")
+	c.Response().Header().Set("X-XSS-Protection", "1; mode=block")
+
+	// Stream the file
+	return c.Stream(http.StatusOK, contentType, file)
+}
+
+func redirectOnError(c echo.Context) error {
+	return c.Redirect(http.StatusFound, "http://localhost:3000")
+}
+
+func looksLikeCID(s string) bool {
+	return strings.HasPrefix(s, "Qm") || // v0 CID
+		strings.HasPrefix(s, "bafy") || // v1 CID
+		strings.HasPrefix(s, "b") // other base32 v1 CIDs
+}