safe-global / safe-client-gateway / 34582660140

89%

push

github

feat(siwe): validate SiWe message domain and URI (#3424)

* feat(siwe): validate SiWe message domain and URI

Accept a SiWe message only when its domain and the authority of its URI
are in AUTH_ALLOWED_SIWE_DOMAINS. The list is required in production and
staging; when unset the check is skipped, so local and cross-environment
setups are unaffected.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01YME1QMaVUAS3V6nFnQDc88

* refactor(siwe): check the allowed domain in the message schema

Move the domain/URI check onto the fields it applies to and require
AUTH_ALLOWED_SIWE_DOMAINS in production only; staging and other
environments may leave it unset, which skips the check.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01YME1QMaVUAS3V6nFnQDc88

* refactor(siwe): drop the extra validation around the domain check

Keep the schema check and the config value it reads, and remove what sat
around it: the allow-list format refinement and the configuration-validator
cases for the production requirement.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01YME1QMaVUAS3V6nFnQDc88

---------

Co-authored-by: Claude <noreply@anthropic.com>

4159 of 4895 branches covered (84.96%)

Branch coverage included in aggregate %.

9 of 12 new or added lines in 4 files covered. (75.0%)

10553 of 11619 relevant lines covered (90.83%)

540.0 hits per line