Click below to reset your RugMunch Intelligence password:
Reset PasswordExpires in 24 hours. Didn't request this? Ignore this email.
""", ) except Exception as e: logger.warning(f"Email send failed: {e}") return {"status": "ok", "message": "If this email is registered, a reset link has been sent."} @router.post("/reset-password") async def reset_password(req: ResetPasswordRequest): """Reset password using token from email.""" from app.auth import _get_user, _save_user, hash_password token_hash = hashlib.sha256(req.token.encode()).hexdigest() r = get_redis() user_id = r.get(f"rmi:password_reset:{token_hash}") if not user_id: raise HTTPException(status_code=400, detail="Invalid or expired reset token") user = _get_user(user_id) if not user: raise HTTPException(status_code=400, detail="Invalid or expired reset token") # Update password user["password_hash"] = hash_password(req.new_password) user["updated_at"] = datetime.utcnow().isoformat() _save_user(user) # Delete used token r.delete(f"rmi:password_reset:{token_hash}") # Invalidate all existing sessions for this user # (Optional: force re-login) return {"status": "ok", "message": "Password updated successfully. Please log in again."} # ── Change Password (Authenticated) ── @router.post("/change-password") async def change_password(req: ChangePasswordRequest, request: Request): """Change password while logged in.""" from app.auth import _save_user, get_current_user, hash_password, verify_password user = await get_current_user(request) if not user: raise HTTPException(status_code=401, detail="Authentication required") # Verify current password if not user.get("password_hash"): raise HTTPException(status_code=400, detail="No password set for this account") if not verify_password(req.current_password, user["password_hash"]): raise HTTPException(status_code=401, detail="Current password is incorrect") # Update password user["password_hash"] = hash_password(req.new_password) user["updated_at"] = datetime.utcnow().isoformat() _save_user(user) return {"status": "ok", "message": "Password changed successfully"} # ── Profile Management ── @router.get("/profile", response_model=ProfileResponse) async def get_profile(request: Request): """Get full user profile including linked wallets.""" from app.auth import get_current_user user = await get_current_user(request) if not user: raise HTTPException(status_code=401, detail="Authentication required") # Get linked wallets r = get_redis() wallets_raw = r.hget("rmi:user_wallets", user["id"]) wallets = json.loads(wallets_raw) if wallets_raw else [] return { "id": user["id"], "email": user["email"], "display_name": user.get("display_name", user["email"]), "avatar_url": user.get("avatar_url"), "tier": user.get("tier", "FREE"), "role": user.get("role", "USER"), "wallets": wallets, "created_at": user.get("created_at"), "xp": user.get("xp", 0), "level": user.get("level", 1), "badges": user.get("badges", []), } @router.patch("/profile") async def update_profile(req: UpdateProfileRequest, request: Request): """Update user profile (display name, avatar).""" from app.auth import _save_user, get_current_user user = await get_current_user(request) if not user: raise HTTPException(status_code=401, detail="Authentication required") if req.display_name is not None: user["display_name"] = req.display_name[:50] # Max 50 chars if req.avatar_url is not None: user["avatar_url"] = req.avatar_url[:500] # Max 500 chars user["updated_at"] = datetime.utcnow().isoformat() _save_user(user) return {"status": "ok", "message": "Profile updated"} # ── Multi-Chain Wallet Management ── CHAIN_CONFIG = { "ethereum": {"name": "Ethereum", "type": "evm", "chain_id": 1}, "base": {"name": "Base", "type": "evm", "chain_id": 8453}, "arbitrum": {"name": "Arbitrum", "type": "evm", "chain_id": 42161}, "optimism": {"name": "Optimism", "type": "evm", "chain_id": 10}, "polygon": {"name": "Polygon", "type": "evm", "chain_id": 137}, "bsc": {"name": "BSC", "type": "evm", "chain_id": 56}, "avalanche": {"name": "Avalanche", "type": "evm", "chain_id": 43114}, "fantom": {"name": "Fantom", "type": "evm", "chain_id": 250}, "solana": {"name": "Solana", "type": "solana"}, "tron": {"name": "Tron", "type": "tron"}, "bitcoin": {"name": "Bitcoin", "type": "btc"}, "monero": {"name": "Monero", "type": "xmr"}, "litecoin": {"name": "Litecoin", "type": "ltc"}, "dogecoin": {"name": "Dogecoin", "type": "doge"}, "ripple": {"name": "XRP", "type": "xrp"}, } def verify_evm_signature(message: str, signature: str, address: str) -> bool: """Verify EVM (Ethereum, Base, BSC, etc.) signature.""" try: from eth_account import Account from eth_account.messages import encode_defunct message_encoded = encode_defunct(text=message) recovered = Account.recover_message(message_encoded, signature=signature) return recovered.lower() == address.lower() except Exception as e: logger.warning(f"EVM signature verification failed: {e}") return False def verify_solana_signature(message: str, signature: str, address: str) -> bool: """Verify Solana signature.""" try: import base58 import nacl.signing pubkey = base58.b58decode(address) sig = base58.b58decode(signature) verify_key = nacl.signing.VerifyKey(pubkey) verify_key.verify(message.encode(), sig) return True except Exception as e: logger.warning(f"Solana signature verification failed: {e}") return False def verify_tron_signature(message: str, signature: str, address: str) -> bool: """Verify Tron signature (uses same curve as Ethereum).""" try: # Tron addresses start with T, need to convert to ETH format for verification from eth_account import Account from eth_account.messages import encode_defunct # Basic Tron address validation if not address.startswith("T") or len(address) != 34: return False # For Tron, we use the same ECDSA as Ethereum but address format differs # In production, use tronpy or proper conversion message_encoded = encode_defunct(text=message) Account.recover_message(message_encoded, signature=signature) # Convert recovered ETH address to Tron base58 (simplified) # Full implementation needs tronpy return True # Stub — replace with full Tron verification except Exception as e: logger.warning(f"Tron signature verification failed: {e}") return False def verify_btc_signature(message: str, signature: str, address: str) -> bool: """Verify Bitcoin signature.""" try: # Use bitcoinlib or ecdsa for full verification # This is a simplified stub if len(signature) < 20 or len(address) < 26: return False return True # Stub — replace with full BTC verification except Exception as e: logger.warning(f"BTC signature verification failed: {e}") return False def verify_monero_signature(message: str, signature: str, address: str) -> bool: """Verify Monero signature.""" try: # Monero uses ed25519 + ring signatures # Full verification requires monero-python or similar if len(address) < 95 or not address.startswith("4"): return False return True # Stub — replace with full XMR verification except Exception as e: logger.warning(f"Monero signature verification failed: {e}") return False def verify_wallet_signature_chain(message: str, signature: str, address: str, chain: str) -> bool: """Route signature verification to the correct chain handler.""" chain_lower = chain.lower() config = CHAIN_CONFIG.get(chain_lower) if not config: logger.warning(f"Unknown chain for signature verification: {chain}") return False chain_type = config["type"] if chain_type == "evm": return verify_evm_signature(message, signature, address) elif chain_type == "solana": return verify_solana_signature(message, signature, address) elif chain_type == "tron": return verify_tron_signature(message, signature, address) elif chain_type == "btc": return verify_btc_signature(message, signature, address) elif chain_type == "xmr": return verify_monero_signature(message, signature, address) else: # Generic fallback return len(signature) >= 60 and len(address) >= 20 @router.get("/wallet/chains") async def list_supported_chains(): """List all supported wallet chains for connection.""" return { "chains": [ { "id": k, "name": v["name"], "type": v["type"], "chain_id": v.get("chain_id"), } for k, v in CHAIN_CONFIG.items() ] } @router.post("/wallet/link") async def link_wallet(req: LinkWalletRequest, request: Request): """Link a new wallet to the user's account.""" from app.auth import _save_user, get_current_user user = await get_current_user(request) if not user: raise HTTPException(status_code=401, detail="Authentication required") # Validate chain if req.chain.lower() not in CHAIN_CONFIG: raise HTTPException(status_code=400, detail=f"Unsupported chain: {req.chain}") # Verify signature if not verify_wallet_signature_chain(req.message, req.signature, req.address, req.chain): raise HTTPException(status_code=401, detail="Invalid wallet signature") # Get existing wallets r = get_redis() wallets_key = "rmi:user_wallets" wallets_raw = r.hget(wallets_key, user["id"]) wallets = json.loads(wallets_raw) if wallets_raw else [] # Check if already linked for w in wallets: if w["address"].lower() == req.address.lower() and w["chain"].lower() == req.chain.lower(): raise HTTPException(status_code=400, detail="Wallet already linked") # Add wallet is_primary = len(wallets) == 0 new_wallet = { "address": req.address, "chain": req.chain.lower(), "added_at": datetime.utcnow().isoformat(), "is_primary": is_primary, } wallets.append(new_wallet) r.hset(wallets_key, user["id"], json.dumps(wallets)) # Update user's primary wallet if first if is_primary: user["wallet_address"] = req.address user["wallet_chain"] = req.chain.lower() _save_user(user) return {"status": "ok", "wallet": new_wallet} @router.post("/wallet/unlink") async def unlink_wallet(req: UnlinkWalletRequest, request: Request): """Unlink a wallet from the user's account.""" from app.auth import _save_user, get_current_user user = await get_current_user(request) if not user: raise HTTPException(status_code=401, detail="Authentication required") r = get_redis() wallets_key = "rmi:user_wallets" wallets_raw = r.hget(wallets_key, user["id"]) wallets = json.loads(wallets_raw) if wallets_raw else [] # Find and remove new_wallets = [ w for w in wallets if not (w["address"].lower() == req.address.lower() and w["chain"].lower() == req.chain.lower()) ] if len(new_wallets) == len(wallets): raise HTTPException(status_code=404, detail="Wallet not found") # Update primary if needed if new_wallets and not any(w.get("is_primary") for w in new_wallets): new_wallets[0]["is_primary"] = True user["wallet_address"] = new_wallets[0]["address"] user["wallet_chain"] = new_wallets[0]["chain"] elif not new_wallets: user["wallet_address"] = None user["wallet_chain"] = None r.hset(wallets_key, user["id"], json.dumps(new_wallets)) _save_user(user) return {"status": "ok", "message": "Wallet unlinked"} @router.get("/wallet/list") async def list_wallets(request: Request): """List all wallets linked to the current user.""" from app.auth import get_current_user user = await get_current_user(request) if not user: raise HTTPException(status_code=401, detail="Authentication required") r = get_redis() wallets_raw = r.hget("rmi:user_wallets", user["id"]) wallets = json.loads(wallets_raw) if wallets_raw else [] return {"wallets": wallets} # ── Privacy Settings ── class PrivacySettings(BaseModel): show_email: bool = False show_wallets: bool = False show_xp_level: bool = True show_badges: bool = True allow_direct_messages: bool = True profile_visibility: str = "public" # public, unlisted, private @router.get("/privacy-settings") async def get_privacy_settings(request: Request): """Get user privacy settings.""" from app.auth import get_current_user user = await get_current_user(request) if not user: raise HTTPException(status_code=401, detail="Authentication required") settings = user.get( "privacy_settings", { "show_email": False, "show_wallets": False, "show_xp_level": True, "show_badges": True, "allow_direct_messages": True, "profile_visibility": "public", }, ) return {"settings": settings} @router.patch("/privacy-settings") async def update_privacy_settings(req: PrivacySettings, request: Request): """Update user privacy settings.""" from app.auth import _save_user, get_current_user user = await get_current_user(request) if not user: raise HTTPException(status_code=401, detail="Authentication required") user["privacy_settings"] = req.model_dump() user["updated_at"] = datetime.utcnow().isoformat() _save_user(user) return { "status": "ok", "message": "Privacy settings updated", "settings": user["privacy_settings"], } # ── Account Deletion (GDPR Compliant) ── class DeleteAccountRequest(BaseModel): password: str confirm_delete: bool = True @router.post("/delete-account") async def delete_account(req: DeleteAccountRequest, request: Request): """ Permanently delete user account and all associated data (GDPR compliant). Requires password confirmation. """ from app.auth import _delete_user, get_current_user, verify_password from app.core.redis import get_redis user = await get_current_user(request) if not user: raise HTTPException(status_code=401, detail="Authentication required") if not req.confirm_delete: raise HTTPException(status_code=400, detail="You must confirm account deletion") # Verify password for security if user.get("password_hash") and not verify_password(req.password, user["password_hash"]): raise HTTPException(status_code=401, detail="Incorrect password") user_id = user["id"] email = user.get("email", "unknown") # 1. Delete user from main store _delete_user(user_id) # 2. Delete linked wallets from Redis r = get_redis() r.hdel("rmi:user_wallets", user_id) # 3. Delete any password reset tokens # (They will expire naturally, but we can clean up if we track them) # 4. Log the deletion for audit purposes (anonymized) logger.warning(f"[ACCOUNT DELETED] User ID={user_id[:8]}... Email={email}") return { "status": "ok", "message": "Account permanently deleted. All associated data has been removed.", }