[-32603][Unexpected error] sending signMessage to Phantom iOS app using DeepLink

[pedro-aweai]

Summary

I have managed to make "connect" using DeepLink work, and successfully received and decrypted the session token. But when I try to send signMessage using DeepLink, I always get 32603 Unexpected error from the redirect uri.

I have carefully checked the way to construct and encrypt the payload. And I can successfully decrypt the payload locally using the same method that decrypted the data in "connect" callback.

I exported the log file from the Phantom iOS app, the relevant part seems to be:

2024-12-25T11:55:40.949Z [DEBUG]  deepLinks: Received initial URL: https://phantom.app/ul/v1/signMessage?dapp_encryption_public_key=&nonce=EE3pbAhbPhckSRgg815ncfty9TsVEgCF1&redirect_link=http%3A%2F%2F192.168.31.2%3A7777%2Fv1%2Ftg-phantom-wallets%2Fverify%2F1%2F7769969947%3Fwallet%3DCZSDVtWbbxXFfY34j3F9d2EmiugThJ8FwPcJB18NUAg2%26timestamp%3D1735127735%26signature%3DWkCSD7ySM3XB31LB6Cu4U9dBjUrhN1aZtfYQEEBxpGA1Cd2x5LZPq8CM3DU1C9Wqzotiw1mGqV3XnnTafuSvjfq&payload=2trFvhR8Mqmo4gXEuJMFWRVJQqpSF3kJHjFtdo3uYsL4w2siJZxuPredNWGGEznbbTwAr5dRhJrFXhcSqYc2A7ZNBxhcgNxnJT5n7Z9x9Z2mYU2ZHSpFTfmwawYSut8z5WCn7Ky3MbUeSKhmMMRxxPuYvryDSL5XBch5YA1gNbKDhDA1ScjoPsv2TxyEtUFVonCivbQEsx3pCkkyrHzvWRUiZSYsJUyrARhyW9RHL9cDXkd3MRssU3q6AKMAsMzca5MocpZSBUFc4aSA59yLbsa2tmPBG4mMdX6tmCRawysXzHwxDsZEPber1qA5WFyJDWLcZbBnbZ7gunnokWapuD9FzX5T3nM2gcKWQ7cigs3CAEUiHuwR3kp82Eu3E4oJ3ZZuTxE4YXTWSWuNGbjeo9j9wd3uW
2024-12-25T11:55:40.960Z [DEBUG]  deepLinks: URL is a valid deep link.
2024-12-25T11:55:40.960Z [DEBUG]  deepLinks: Invoked method: signMessage
2024-12-25T11:55:40.961Z [DEBUG]  deepLinks: Successfully enqueued deep link RPC request
2024-12-25T11:55:40.961Z [DEBUG]  mobileWalletAdapter: Listener received URL: https://phantom.app/ul/v1/signMessage?dapp_encryption_public_key=&nonce=EE3pbAhbPhckSRgg815ncfty9TsVEgCF1&redirect_link=http%3A%2F%2F192.168.31.2%3A7777%2Fv1%2Ftg-phantom-wallets%2Fverify%2F1%2F7769969947%3Fwallet%3DCZSDVtWbbxXFfY34j3F9d2EmiugThJ8FwPcJB18NUAg2%26timestamp%3D1735127735%26signature%3DWkCSD7ySM3XB31LB6Cu4U9dBjUrhN1aZtfYQEEBxpGA1Cd2x5LZPq8CM3DU1C9Wqzotiw1mGqV3XnnTafuSvjfq&payload=2trFvhR8Mqmo4gXEuJMFWRVJQqpSF3kJHjFtdo3uYsL4w2siJZxuPredNWGGEznbbTwAr5dRhJrFXhcSqYc2A7ZNBxhcgNxnJT5n7Z9x9Z2mYU2ZHSpFTfmwawYSut8z5WCn7Ky3MbUeSKhmMMRxxPuYvryDSL5XBch5YA1gNbKDhDA1ScjoPsv2TxyEtUFVonCivbQEsx3pCkkyrHzvWRUiZSYsJUyrARhyW9RHL9cDXkd3MRssU3q6AKMAsMzca5MocpZSBUFc4aSA59yLbsa2tmPBG4mMdX6tmCRawysXzHwxDsZEPber1qA5WFyJDWLcZbBnbZ7gunnokWapuD9FzX5T3nM2gcKWQ7cigs3CAEUiHuwR3kp82Eu3E4oJ3ZZuTxE4YXTWSWuNGbjeo9j9wd3uW
2024-12-25T11:55:40.963Z [DEBUG]  mobileWalletAdapter: Parsed URL successfully
2024-12-25T11:55:40.965Z [DEBUG]  mobileWalletAdapter: URL is not a valid MWA dapp URL. Finished processing.
2024-12-25T11:55:40.965Z [DEBUG]  deepLinks: Received initial URL: https://phantom.app/ul/v1/signMessage?dapp_encryption_public_key=&nonce=EE3pbAhbPhckSRgg815ncfty9TsVEgCF1&redirect_link=http%3A%2F%2F192.168.31.2%3A7777%2Fv1%2Ftg-phantom-wallets%2Fverify%2F1%2F7769969947%3Fwallet%3DCZSDVtWbbxXFfY34j3F9d2EmiugThJ8FwPcJB18NUAg2%26timestamp%3D1735127735%26signature%3DWkCSD7ySM3XB31LB6Cu4U9dBjUrhN1aZtfYQEEBxpGA1Cd2x5LZPq8CM3DU1C9Wqzotiw1mGqV3XnnTafuSvjfq&payload=2trFvhR8Mqmo4gXEuJMFWRVJQqpSF3kJHjFtdo3uYsL4w2siJZxuPredNWGGEznbbTwAr5dRhJrFXhcSqYc2A7ZNBxhcgNxnJT5n7Z9x9Z2mYU2ZHSpFTfmwawYSut8z5WCn7Ky3MbUeSKhmMMRxxPuYvryDSL5XBch5YA1gNbKDhDA1ScjoPsv2TxyEtUFVonCivbQEsx3pCkkyrHzvWRUiZSYsJUyrARhyW9RHL9cDXkd3MRssU3q6AKMAsMzca5MocpZSBUFc4aSA59yLbsa2tmPBG4mMdX6tmCRawysXzHwxDsZEPber1qA5WFyJDWLcZbBnbZ7gunnokWapuD9FzX5T3nM2gcKWQ7cigs3CAEUiHuwR3kp82Eu3E4oJ3ZZuTxE4YXTWSWuNGbjeo9j9wd3uW
2024-12-25T11:55:40.968Z [DEBUG]  deepLinks: URL is not a valid solana pay link. Finished processing.
2024-12-25T11:55:41.056Z [ERROR]  generic: RPC ROUTER: Unexpected error
2024-12-25T11:55:41.059Z [DEBUG]  deepLinks: Opening redirect link: http://192.168.31.2:7777/v1/tg-phantom-wallets/verify/1/7769969947?wallet=&timestamp=1735127735&signature=WkCSD7ySM3XB31LB6Cu4U9dBjUrhN1aZtfYQEEBxpGA1Cd2x5LZPq8CM3DU1C9Wqzotiw1mGqV3XnnTafuSvjfq&errorCode=-32603&errorMessage=Unexpected+error
2024-12-25T11:55:41.421Z [INFO]  account: Unable to get user from storage or refresh, continuing with full auth flow.
2024-12-25T11:55:41.728Z [ERROR]  account: Unable to log in with key-based auth. No auth factor found for login.

And the deeplink caused the error is:

https://phantom.app/ul/v1/signMessage?dapp_encryption_public_key=4XqSAaJbfcdJhVFqnR5LdeNRcDwdEQQEmvDkSKGkAJWA&nonce=Dt3rQyaf5x6hYXRnSWKaGF8au6PaYnFSj&redirect_link=http%3A%2F%2F192.168.31.2%3A7777%2Fv1%2Ftg-phantom-wallets%2Fverify%2F1%2F7769969947%3Fwallet%3DCZSDVtWbbxXFfY34j3F9d2EmiugThJ8FwPcJB18NUAg2%26timestamp%3D1735130274%26signature%3D4YjLxfVphfZrf94Jk9Cw4KejBfEccb2bBo1bow3iPo7BdtAr3mHtRUGp8ss1CZ5b624B5ZyybrdZndXoSMjmtw9g&payload=MbnSbgJbSi1pyK2a23YhBpT8x9FhAdvJfMkmV2tWPVTjFUyaVLjUM4RhaS5kwbqejXZ7ozeTFTz6AhbRULXuoQUG9XqkG3ydVaQ8XMR7uT8LMTw5SnKz6PRqzpds2udGT54TA1qmi245Dx279QTKCGAgK6mRoQuAchC6oRLzwFQtVYxA8jcmBmM3qv3MTXNTko8DuAvxYbws5AELemFVdF4oPTWTHQJ1DoHPRgS3NLPaWdfXdCHuyCYkYk9QSV5zCKuYgaHM3ymSgwj3wuQgbestNoNkeyDutwskoYph5vR72LRXn8RaTxzhWzY5BQQ3ThVMmzMW5Xo8sU4opEhsxGbVJJhvig1PkFGMd5qgnfwzzyfGSF93Wcact2mAsRs4XLwsBvMgRDb5Y6samTe4hJosUgV

Example

No response

Steps to Reproduce

The code I'm using to generate the link is given below:

def get_wallet_verification_url(agent_id: int, tg_user_id: str, wallet_address: str, phantom_session: str, phantom_encryption_public_key: str) -> str:
    ed25519_public_key_bytes = bytes(system_payer.pubkey())
    x25519_public_key = base58.b58encode(crypto_sign_ed25519_pk_to_curve25519(ed25519_public_key_bytes)).decode()

    # Generate a signature from the server to prevent middleman attack
    timestamp = unix_timestamp_in_seconds()
    data_to_sign = f"{agent_id}{tg_user_id}{wallet_address}{timestamp}"
    signature = str(system_payer.sign_message(data_to_sign.encode()))

    redirect_link = urllib.parse.quote_plus(f"{server_host}/v1/tg-phantom-wallets/verify/{agent_id}/{tg_user_id}?wallet={wallet_address}&timestamp={timestamp}&signature={signature}")

    original_message = f"{timestamp}"
    original_message_encoded = base58.b58encode(original_message).decode()

    plain_payload = json.dumps({
        "message": original_message_encoded,
        "session": phantom_session,
        "display": "utf8"
    })

    logger.debug(f"plain payload str: {plain_payload}")

    encrypted_payload, nonce = encrypt_phantom_data(phantom_encryption_public_key, plain_payload)

    logger.debug(f"encrypted payload: {encrypted_payload}")
    logger.debug(f"nonce: {nonce}")

    # Debug - try decrypting
    decrypted = decrypt_phantom_data(phantom_encryption_public_key, nonce, encrypted_payload)
    logger.debug(f"decrypted: {decrypted}")

    return f"https://phantom.app/ul/v1/signMessage?dapp_encryption_public_key={x25519_public_key}&nonce={nonce}&redirect_link={redirect_link}&payload={encrypted_payload}"


def encrypt_phantom_data(phantom_encryption_public_key: str, plain_data: str) -> Tuple[str, str]:
    system_payer_private_key_bytes = base58.b58decode(system_payer_private_key)

    x25519_private_key_bytes = crypto_sign_ed25519_sk_to_curve25519(system_payer_private_key_bytes)
    x25519_private_key = PrivateKey(x25519_private_key_bytes)

    phantom_public_key_bytes = base58.b58decode(phantom_encryption_public_key)
    phantom_public_key = PublicKey(phantom_public_key_bytes)

    data_box = Box(x25519_private_key, phantom_public_key)
    encrypted = data_box.encrypt(plain_data.encode())
    encrypted_ciphertext = base58.b58encode(encrypted.ciphertext).decode()
    nonce = base58.b58encode(encrypted.nonce).decode()

    return encrypted_ciphertext, nonce

def decrypt_phantom_data(phantom_encryption_public_key: str, nonce: str, encrypted_data: str) -> str:

    system_payer_private_key_bytes = base58.b58decode(system_payer_private_key)

    x25519_private_key_bytes = crypto_sign_ed25519_sk_to_curve25519(system_payer_private_key_bytes)
    x25519_private_key = PrivateKey(x25519_private_key_bytes)

    phantom_public_key_bytes = base58.b58decode(phantom_encryption_public_key)
    phantom_public_key = PublicKey(phantom_public_key_bytes)

    nonce_bytes = base58.b58decode(nonce)

    data_bytes = base58.b58decode(encrypted_data)

    data_box = Box(x25519_private_key, phantom_public_key)
    decrypted_data = data_box.decrypt(data_bytes, nonce_bytes)
    return decrypted_data.decode()

Phantom Version

No response

Is there an existing discussion for this?

• I have searched the existing discussions