3box / 3box-verifications

Verification service

Welcome to 3Box Labs!

3Box Labs is a Web3 product studio that creates software to advance a more open, safe, and collaborative web. We are the inventors and a core maintainer of Ceramic, a decentralized network for composable data. Permissionless data composability will inevitably network all of the information on the web, transform the way we build applications, and connect users to their data, and each other, in new and exciting ways. To learn more about 3Box Labs, visit https://3boxlabs.com/.

Getting Started

👤 Visit Ceramic Network to build applications with composable data.

💬 Join Ceramic Community Discord to chat with the core team and developer community

👩‍💻 Explore our blog to learn more about Ceramic, comopsable data and Web3 - and sign up for our newsletter.

3box-verifications's Issues

An in-range update of aws-sdk is breaking the build 🚨

The dependency aws-sdk was updated from 2.450.0 to 2.451.0.

🚨 View failing branch.

This version is covered by your current version range and after updating it in your project the build failed.

aws-sdk is a direct dependency of this project, and it is very likely causing it to break. If other packages depend on yours, this update is probably also breaking those in turn.

Status Details

• ❌ ci/circleci: build: Your tests failed on CircleCI (Details).

---

Release Notes for Release v2.451.0

See changelog for more information.

Commits

The new version differs by 1 commits.

• 5623657 Updates SDK to v2.451.0

See the full diff

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

---

Your Greenkeeper Bot 🌴

Email verifications: Implement service to verify code and return claim to user

Check against specification. Verify code and return a signed claim to user.

Add filesystem IPFS repo

Investigate Lambda/Elasticache connection failures

Paths to follow:

1. VPC elasticache instances makes it harder to a lambda function to connect.
2. Spin up an ec2 redis instance
3. Drop redis, use postgres instead

Implement verification email design in HTML

Verification email design here:

Result of this issue:
#22

An in-range update of aws-sdk is breaking the build 🚨

The dependency aws-sdk was updated from 2.404.0 to 2.405.0.

🚨 View failing branch.

This version is covered by your current version range and after updating it in your project the build failed.

aws-sdk is a direct dependency of this project, and it is very likely causing it to break. If other packages depend on yours, this update is probably also breaking those in turn.

Status Details

• ❌ ci/circleci: build: Your tests failed on CircleCI (Details).

---

Release Notes for Release v2.405.0

See changelog for more information.

Commits

The new version differs by 1 commits.

• 6a0e2c0 Updates SDK to v2.405.0

See the full diff

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

---

Your Greenkeeper Bot 🌴

Upgrade did-resovler and did-jwt libraries

Email verification: Send email with code to the user

Implement the spec produced from #13

Likely:

1. ingest email address and DID
2. send email and 6 digit code to email address (server keeps the initial DID)

Unit/integration testing of the twitter verification endpoint

Goals:

• Decent unit test coverage
• Test against mocked twitter service

Release 3box-verifications 1.0

504 Error for confirmation that code sent, and for sending the code to be verified

I think we're having the same issue as before with the email server
The verification email is properly sent, but no response is sent back
The same 504 timeout error for when I send the code

The actual verification doesn't seem to work - when I reload dapp, my email does not show as verified.

Action required: Greenkeeper could not be activated 🚨

🚨 You need to enable Continuous Integration on Greenkeeper branches of this repository. 🚨

To enable Greenkeeper, you need to make sure that a commit status is reported on all branches. This is required by Greenkeeper because it uses your CI build statuses to figure out when to notify you about breaking changes.

Since we didn’t receive a CI status on the greenkeeper/initial branch, it’s possible that you don’t have CI set up yet. We recommend using Travis CI, but Greenkeeper will work with every other CI service as well.

If you have already set up a CI for this repository, you might need to check how it’s configured. Make sure it is set to run on all new branches. If you don’t want it to run on absolutely every branch, you can whitelist branches starting with greenkeeper/.

Once you have installed and configured CI on this repository correctly, you’ll need to re-trigger Greenkeeper’s initial pull request. To do this, please click the 'fix repo' button on account.greenkeeper.io.

Redesign the way we use redis store in the EmailMgr

Currently, the code takes a redis store as a parameter:
https://github.com/3box/3box-verifications/blob/develop/src/lib/emailMgr.js#L10

And will override it when it accesses the store:
https://github.com/3box/3box-verifications/blob/develop/src/lib/emailMgr.js#L108

We should refactor this code, either remove the parameter completely or implement the getStoredX / storeX correctly.

Create endpoint to verify twitter handles

As defined in the spec

An in-range update of serverless-offline is breaking the build 🚨

The devDependency serverless-offline was updated from 4.6.0 to 4.7.0.

🚨 View failing branch.

This version is covered by your current version range and after updating it in your project the build failed.

serverless-offline is a devDependency of this project. It might not break your production code or affect downstream projects, but probably breaks your build or test tools, which may prevent deploying or publishing.

Status Details

• ❌ ci/circleci: build: Your tests failed on CircleCI (Details).

---

Commits

The new version differs by 7 commits.

• 4a67c07 v4.7.0
• 06daec5 Merge pull request #608 from maksimsemenov/master
• 4b0e2ab Fix README
• b1e6292 Fix package version
• 25bd795 Add environment variables
• c8c606b Merge pull request #606 from arnas/bugfix/fix-broken-tests-on-windows
• 4607c8f Update string path use node path lib

See the full diff

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

---

Your Greenkeeper Bot 🌴

504 timeout on send email verification

Replacing #83, just cors on failure status codes. But failure is in actual function, may be actually sending email or db connection failure.

Update deployed endpoints

• Deploy develop to verifications-dev.3box.io
• Deploy master to verifications.3box.io

Record analytics on verification services

Email

• Email Sent
• Email Verified (successful/failed)

Twitter

• Twitter Verified (successful/failed)

3ID not working in Twitter verifications API

In attempting to move from muport did to 3ID with:

const response = await fetch('https://verifications.3box.io/twitter', {
        method: 'POST',
        body: JSON.stringify({
          did: threeId,
          twitter_handle: `${verifiedTwitter}`,
        }),
      });

Am getting the error:
Uncaught (in promise) Error: Verification not valid for given user at verifier.js:119

Despite getting back the claim:

{
   status: "success",
   data: {
         verification: "eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NksifQ.eyJpYXQiOjE1Nzg1OTgxMDksInN1YiI6ImRpZDozOmJhZnlyZWljaXFuNWlsdHNlN3NyYzM3Y3R2aGhyNDMzemNsd212aHFvZDRkeHVrcXdsZXkyZTdtZnFxIiwiY2xhaW0iOnsidHdpdHRlcl9oYW5kbGUiOiJnb25nc2hvd2tub3dzIiwidHdpdHRlcl9wcm9vZiI6Imh0dHBzOi8vdHdpdHRlci5jb20vZ29uZ3Nob3drbm93cy9zdGF0dXMvMTIxNTAwNjk5NDIwNzMyMjExNSJ9LCJpc3MiOiJkaWQ6aHR0cHM6dmVyaWZpY2F0aW9ucy4zYm94LmlvIn0.ica47f5zAh3CaNLabMEcpuNxETvwwjjuxh1yfASaYH9TfeO5zzOM59orl9NDJnNTzUr-Ef_sZ9unI6k7MhnvEA"
   }
}

with 3id:
did:3:bafyreiciqn5iltse7src37ctvhhr433zclwmvhqod4dxukqwley2e7mfqq

Use elasticache for email verification

Implement twitter verifications v2

Create verification

As defined in the spec.

The `/twitter` function needs to authenticate itself against twitter api, see here:

[https://developer.twitter.com/en/docs/basics/authentication/overview/application-only](https://developer.twitter.com/en/docs/basics/authentication/overview/application-only)

It can then get the tweets of the given user from this api:

[https://developer.twitter.com/en/docs/tweets/timelines/api-reference/get-statuses-user_timeline.html](https://developer.twitter.com/en/docs/tweets/timelines/api-reference/get-statuses-user_timeline.html)

Now it checks all tweets from the user to see if any of them contain the given DID. If not the serverless function should return a `401`. If there is a valid proof it should take the url of this tweet and create a claim as formated above using the `did-jwt` library:

[https://github.com/uport-project/did-jwt#1-create-a-did-jwt](https://github.com/uport-project/did-jwt#1-create-a-did-jwt)

Use 3IDs Correctly

Also include the 3id-resolver

Need to verify JWTs correctly and check twitter for 3id

An in-range update of webpack is breaking the build 🚨

The dependency webpack was updated from 4.29.0 to 4.29.1.

🚨 View failing branch.

This version is covered by your current version range and after updating it in your project the build failed.

webpack is a direct dependency of this project, and it is very likely causing it to break. If other packages depend on yours, this update is probably also breaking those in turn.

Status Details

• ❌ ci/circleci: build: Your tests failed on CircleCI (Details).

---

Release Notes for v4.29.1

Bugfixes

• add missing __esModule flag when modules are concatenated, but without usage information

Commits

The new version differs by 14 commits.

• 6934b98 4.29.1
• 960f396 Merge pull request #8686 from MarkPollmann/patch-1
• 8627743 Merge pull request #8678 from bhavya9107/patch-1
• 915c32d docs(README): remove to from link
• 9737a3b Update README.md
• f654a49 docs(README):Update index
• c957338 docs(README): newline after index
• 09cf713 docs(README): add index
• 07d4d85 Merge pull request #8676 from hulkish/fix-side-effects-example
• 2209b8a rebuild examples
• 780c17e fix side-effects example
• 2fe0ba5 Normalize backslash on windows
• a0eab48 Merge pull request #8667 from webpack/bugfix/esModule-flag
• 42007e8 fixes #8666

See the full diff

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

---

Your Greenkeeper Bot 🌴

Email verifications v2

Based on the spec

We can base this of v1 of email verifications, but we should keep the v1 endpoint around for a while (until we've migrated in the dapp). V2 already has differently named endpoints so that shouldn't be a problem.

Require JWT for verifying twitter

Currently we don't verify that the DID signed the tweet that is being verified. We can do this by signing a JWT which contains the url of the tweet.

An in-range update of aws-sdk-mock is breaking the build 🚨

The devDependency aws-sdk-mock was updated from 4.4.0 to 4.5.0.

🚨 View failing branch.

This version is covered by your current version range and after updating it in your project the build failed.

aws-sdk-mock is a devDependency of this project. It might not break your production code or affect downstream projects, but probably breaks your build or test tools, which may prevent deploying or publishing.

Status Details

• ❌ ci/circleci: build: Your tests failed on CircleCI (Details).

---

Commits

The new version differs by 17 commits.

• 3417130 update dependencies on aws-sdk & sinon. no code changed #191
• a5e46f5 Merge pull request #191 from abetomo/npm_update
• 08ed46a Remove Node.js6 from travis.yml
• d5ef362 Upgrade packages
• 5698114 Merge pull request #187 from wzr1337/wzr1337-patch-1-typescript-example
• 1aae9af docs(readme.md): Give a full example in typescript
• 5607af8 Merge pull request #185 from abetomo/add_nodejs12_to_ci_setting
• bf6bf93 Add Node.js 12 to CI setting
• c2e8444 Merge pull request #184 from abetomo/fix_lint_error
• 2acfac4 Add parserOptions to .eslintrc.json
• 0393c55 Fix .eslintrc.json indent
• 6786c07 Merge pull request #183 from psaxton/issues/169
• 435d4d9 PR corrections
• cd66ecb Update "Modules with multi-parameter..." test to assert on returned type
• 7135430 Update Typescript restore definition. #163

There are 17 commits in total.

See the full diff

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

---

Your Greenkeeper Bot 🌴

An in-range update of babel7 is breaking the build 🚨

There have been updates to the babel7 monorepo:

• • The devDependency @babel/core was updated from 7.5.5 to 7.6.0.

🚨 View failing branch.

This version is covered by your current version range and after updating it in your project the build failed.

This monorepo update includes releases of one or more dependencies which all belong to the babel7 group definition.

babel7 is a devDependency of this project. It might not break your production code or affect downstream projects, but probably breaks your build or test tools, which may prevent deploying or publishing.

Status Details

• ❌ ci/circleci: build: Your tests failed on CircleCI (Details).

---

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

---

Your Greenkeeper Bot 🌴

CORS error on basic request from 3box.io

An error when requesting to send a code to my email - takes a few seconds then returns this error:

Access to fetch at 'https://verifications.3box.io/send-email-verification' from origin 'https://3box.io' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.

Use web DID instead of https DID

An in-range update of aws-sdk is breaking the build 🚨

The dependency aws-sdk was updated from 2.395.0 to 2.396.0.

🚨 View failing branch.

This version is covered by your current version range and after updating it in your project the build failed.

aws-sdk is a direct dependency of this project, and it is very likely causing it to break. If other packages depend on yours, this update is probably also breaking those in turn.

Status Details

• ❌ ci/circleci: build: Your tests failed on CircleCI (Details).

---

Release Notes for Release v2.396.0

See changelog for more information.

Commits

The new version differs by 1 commits.

• ff99421 Updates SDK to v2.396.0

See the full diff

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

---

Your Greenkeeper Bot 🌴

An in-range update of standard is breaking the build 🚨

The devDependency standard was updated from 14.0.2 to 14.1.0.

🚨 View failing branch.

This version is covered by your current version range and after updating it in your project the build failed.

standard is a devDependency of this project. It might not break your production code or affect downstream projects, but probably breaks your build or test tools, which may prevent deploying or publishing.

Status Details

• ❌ ci/circleci: build: Your tests failed on CircleCI (Details).

---

Commits

The new version differs by 8 commits.

• efa9950 14.1.0
• 78ecd24 [email protected]
• 776bf9a [email protected]
• c988fbe add 14.1.0 changelog
• db55c98 babel-eslint@^10.0.3
• 1987362 eslint@~6.2.2
• 2ad67c0 Remove funding experiment
• 08b5be0 typo

See the full diff

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

---

Your Greenkeeper Bot 🌴

Spec updated email verification for onboarding

• Define new requirements for onboarding email verifications
• Define new REST API
• Spec requirements for callback webpage (where you go after you click the link in the email)

Create endpoint to get did document

An in-range update of aws-sdk is breaking the build 🚨

The dependency aws-sdk was updated from 2.574.0 to 2.575.0.

🚨 View failing branch.

This version is covered by your current version range and after updating it in your project the build failed.

aws-sdk is a direct dependency of this project, and it is very likely causing it to break. If other packages depend on yours, this update is probably also breaking those in turn.

Status Details

• ❌ ci/circleci: build: Your tests failed on CircleCI (Details).

---

Release Notes for Release v2.575.0

See changelog for more information.

Commits

The new version differs by 3 commits.

• d2cf1a3 Updates SDK to v2.575.0
• 277b209 fix: type definitions update to signed IMDS workflow (#2965)
• 4ed5568 fix: signed IMDS workflow (#2964)

See the full diff

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

---

Your Greenkeeper Bot 🌴

Change text of twitter verification

MS to decide copy & priority. Draft take below:

This tweet links my Twitter account to my 3Box profile 3ID.

[DID]

~Web3 social profiles ~ Portable data, reputation and profiles by
@3boxdb.

[3box profile link]

Implement github verifications v2

Write copy for email for email verification

Include image and name of user, see Notion doc linked below for copy

An in-range update of babel7 is breaking the build 🚨

---

☝️ Important announcement: Greenkeeper will be saying goodbye 👋 and passing the torch to Snyk on June 3rd, 2020! Find out how to migrate to Snyk and more at greenkeeper.io

---

There have been updates to the babel7 monorepo:

• • The devDependency @babel/core was updated from 7.9.0 to 7.9.6.

🚨 View failing branch.

This version is covered by your current version range and after updating it in your project the build failed.

This monorepo update includes releases of one or more dependencies which all belong to the babel7 group definition.

babel7 is a devDependency of this project. It might not break your production code or affect downstream projects, but probably breaks your build or test tools, which may prevent deploying or publishing.

Status Details

• ❌ ci/circleci: build: Your tests failed on CircleCI (Details).

---

FAQ and help

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

---

Your Greenkeeper Bot 🌴

Investigate lambda package limit after adding 3box-js library

When deploying

An error occurred: DiddocLambdaFunction - Unzipped size must be smaller than 262144000 bytes (Service: AWSLambdaInternal; Status Code: 400; Error Code: InvalidParameterValueException; Request ID: 38a657a8-2962-11e9-a1cf-399a51330811).

Fix (email) verification service

Either Zach can fix or can guide me to figuring out where and how to fix over 5-10 minute call

Spec for email verification endpoints

Write the specification for the email verification endpoints and add them to the readme.

Design verifications email

Account Link Verification Failures

server error codes (with cors issue)

Proper fix for email verification

Create a managed redis instance in AWS that the verification service uses

How to use or deploy?

Hey, guys, this is very nicely done but How to use or deploy?