supabase / supabase-flutter / 29336359764

87%

Build Type

push

github

Committed by web-flow

Commit Message

feat(auth): add signInWithWeb3 for Web3 wallet authentication (#1590)

## Summary

Adds `signInWithWeb3` support to `gotrue`, wrapping the GoTrue `POST
/token?grant_type=web3` endpoint used for Web3 wallet authentication
(Sign-In with Ethereum and Sign-In with Solana, both derived from
EIP-4361).

- `GoTrueClient.signInWithWeb3({required Web3Chain chain, required
String message, required String signature, String? captchaToken})`
exchanges a signed message for a session, saves it, and emits
`AuthChangeEvent.signedIn`.
- New `Web3Chain` enum (`ethereum`, `solana`).
- Exposed through `supabase` / `supabase_flutter` automatically via the
existing `auth` getter.

Message signing and wallet interaction are delegated to the caller
(using `web3dart`, `walletconnect_dart`, or a Solana wallet library).
This matches the platform-agnostic path in supabase-js:
`window.ethereum` / `window.solana` auto-detection has no Flutter
equivalent, so the SDK does not build the message or auto-detect a
browser wallet.

## Outcome

**implemented** — for `Web3Chain.ethereum` the signature is a hex
string, for `Web3Chain.solana` it is a base64url string, matching the
wire format supabase-js sends.

## Tests

`packages/gotrue/test/web3_auth_test.dart` (mocked, 6 tests, all
passing): Ethereum happy path, Solana happy path, captcha token, bad
signature, expired nonce, and network error.

## Reference

supabase-js / auth-js `GoTrueClient.signInWithWeb3` (`POST
/token?grant_type=web3`).

## Compliance matrix

`auth.sign_in.sign_in_with_web3`: `not_implemented` → `implemented`
(symbols: `GoTrueClient.signInWithWeb3`, `Web3Chain`).

Linear: SDK-836

Coverage Stats

15 of 16 new or added lines in 1 file covered. (93.75%)

3 existing lines in 2 files now uncovered.

5020 of 5711 relevant lines covered (87.9%)

4.21 hits per line