3. ROLA Authentication

import crypto from 'crypto'
 
// Store challenges with expiry (use Redis, DB, or in-memory Map)
const challenges = new Map<string, { expires: number }>()
 
function createChallenge(): string {
  const challenge = crypto.randomBytes(32).toString('hex')
  challenges.set(challenge, {
    expires: Date.now() + 5 * 60 * 1000  // 5 minutes
  })
  return challenge
}

import { DataRequestBuilder } from '@radixdlt/radix-dapp-toolkit'
 
// Fetch challenge from your backend
const challenge = await fetch('/api/auth/challenge').then(r => r.json())
 
// Request proof of account ownership
const result = await rdt.walletApi.sendRequest(
  DataRequestBuilder.accounts()
    .atLeast(1)
    .withProof(challenge)
)

import { Rola } from '@radixdlt/rola'
import { RadixNetwork } from '@radixdlt/babylon-gateway-api-sdk'
 
const rola = Rola({
  networkId: RadixNetwork.Mainnet,
  applicationName: 'My dApp',
  dAppDefinitionAddress: 'account_rdx...',
  expectedOrigin: 'https://my-dapp.com'
})
 
// Verify the signed challenge
const result = await rola.verifySignedChallenge({
  challenge: challengeHex,
  proof: { publicKey, signature, curve },
  address: accountAddress,
  type: 'account'
})
 
if (result.isOk()) {
  // Create session (JWT, cookie, etc.)
}