0.0.3: manual key sign-in — npub, hex pubkey, or nsec (PoC)

No signer extension? A 'Paste a key instead' link under the button
reveals an input accepting:

- npub1… (bech32-decoded in ~40 lines, checksum verified)
- 64-hex pubkey
- nsec1… — PoC, test keys only: reduced to its pubkey in memory
  via a lazy nostr-tools CDN import (only fetched when an nsec is
  actually pasted; the extension path stays dependency-free)

All three feed the same resolve-and-redirect steps, now extracted
from flow() into resolveAndGo(pubkey). The current flow never signs
anything, so only the pubkey is used; the nsec path becomes the test
vehicle for NIP-98 signing when 0.0.2 phase 2 lands.

README: roadmap adds 0.0.3 (done), later items shift to 0.0.4-0.0.9,
status section and version cross-references updated.

Author: melvincarvalho

README.md

@@ -30,7 +30,7 @@ WAC-protected prompts for a real session via whatever app needs it.
 The `?webid=` handoff is plain text for now — unsigned, unverified.
 For the "magic SSO landing" promise that's enough — the signed
 handoff (NIP-98) is 0.0.2 phase 2, and the full authenticated
-session is 0.0.7 on the roadmap.
+session is 0.0.8 on the roadmap.
 
 No username box. No IdP picker. No "what app are you logging in from?"
 question. Click → resolve → arrive.
@@ -98,7 +98,7 @@ https://sso.solid.social/?resolver=https://nostr.social&next=https://myapp.examp
 ```
 
 (Resolver memory in `localStorage` — so return visits skip straight
-to the right host — is 0.0.6 on the roadmap.)
+to the right host — is 0.0.7 on the roadmap.)
 
 ## Hosting
 
@@ -113,11 +113,13 @@ Three sensible deployment targets:
 
 ## Status
 
-**0.0.2 phase 1 — identity handoff**. The one-button UX works
-end-to-end against `solid.social` as the resolver, and the redirect
-now carries `?webid=did:nostr:<pubkey>` so the pod's auth widget can
-pick up the arriving identity (unsigned for now; phase 2 signs it
-with NIP-98). Resolution uses the JSS resolver chain shipped in
+**0.0.3 — manual key sign-in**. The one-button UX works end-to-end
+against `solid.social` as the resolver, the redirect carries
+`?webid=did:nostr:<pubkey>` so the pod's auth widget can pick up the
+arriving identity (unsigned for now; 0.0.2 phase 2 signs it with
+NIP-98), and users without a signer extension can paste an `npub`,
+hex pubkey, or — PoC, test keys only — an `nsec` instead.
+Resolution uses the JSS resolver chain shipped in
 [#408](https://github.com/JavaScriptSolidServer/JavaScriptSolidServer/pull/408)
 through
 [#418](https://github.com/JavaScriptSolidServer/JavaScriptSolidServer/pull/418).
@@ -132,22 +134,27 @@ adding one capability).
   `?webid=did:nostr:<pubkey>` to the redirect (plain text). ✅
   Phase 2: sign it (NIP-98 in the URL fragment) so the pod can
   verify the arriving identity.
-- **0.0.3** — Step-by-step coaching UI: checklist that ticks each
+- **0.0.3** — Manual key sign-in: no signer extension needed.
+  Paste an `npub`, 64-hex pubkey, or (PoC, test keys only) an
+  `nsec` — reduced to its pubkey in memory — and the same
+  resolve-and-redirect flow runs. ✅
+- **0.0.4** — Step-by-step coaching UI: checklist that ticks each
   step (extension detected, pubkey resolved, DID doc found, WebID
   extracted, redirect) instead of a one-shot status line.
-- **0.0.4** — Multi-resolver fallback: try a configurable list of
+- **0.0.5** — Multi-resolver fallback: try a configurable list of
   resolvers in order (`solid.social`, then `nostr.social` as the
   did-nostr.com source fallback) before giving up.
-- **0.0.5** — Direct Nostr-relay resolution. Sits on top of
+- **0.0.6** — Direct Nostr-relay resolution. Sits on top of
   [JSS#414](https://github.com/JavaScriptSolidServer/JavaScriptSolidServer/issues/414).
   Removes the hardcoded-resolver dependency entirely.
-- **0.0.6** — User-preferred resolver memory: first successful
+- **0.0.7** — User-preferred resolver memory: first successful
   resolution is cached in `localStorage` so subsequent visits skip
   straight to the right host.
-- **0.0.7** — Authenticated session: optional NIP-98 → DPoP
+- **0.0.8** — Authenticated session: optional NIP-98 → DPoP
   exchange against the IdP, so the user lands at their pod
-  already signed in (not just navigated there).
-- **0.0.8** — Passkey-only fallback. Sign in without a Nostr
+  already signed in (not just navigated there). The pasted-nsec
+  path doubles as the test vehicle for NIP-98 signing.
+- **0.0.9** — Passkey-only fallback. Sign in without a Nostr
   extension via WebAuthn.
 
 ## Why a separate repo?

index.html

@@ -106,6 +106,42 @@
       animation: spin 0.7s linear infinite;
     }
     @keyframes spin { to { transform: rotate(360deg); } }
+    .linkish {
+      background: none; border: none; padding: 0;
+      color: var(--muted); font-size: 0.85rem;
+      cursor: pointer;
+      text-decoration: underline; text-underline-offset: 3px;
+    }
+    .linkish:hover { color: var(--accent); }
+    .linkish:focus-visible { outline: 2px solid #c4b5fd; outline-offset: 2px; border-radius: 4px; }
+    #manual {
+      width: 100%; margin: 0;
+      display: flex; flex-wrap: wrap; gap: 0.6rem;
+      justify-content: center;
+    }
+    #manual[hidden] { display: none; }
+    #manual input {
+      flex: 1 1 14rem;
+      font-family: ui-monospace, SFMono-Regular, Menlo, monospace;
+      font-size: 0.9rem;
+      padding: 0.65rem 0.9rem;
+      border: 1px solid #d0d7de; border-radius: 10px;
+      color: var(--fg); min-width: 0;
+    }
+    #manual input:focus-visible { outline: 2px solid #c4b5fd; border-color: var(--accent); }
+    #manual button {
+      font-size: 0.95rem; font-weight: 600;
+      padding: 0.65rem 1.4rem;
+      background: var(--accent); color: white;
+      border: none; border-radius: 10px; cursor: pointer;
+    }
+    #manual button:hover { background: var(--accent-hover); }
+    #manual button:disabled { opacity: 0.6; cursor: progress; }
+    #manual button:focus-visible { outline: 2px solid #c4b5fd; outline-offset: 2px; }
+    #manual .warn {
+      flex-basis: 100%; margin: 0;
+      font-size: 0.8rem; color: #9a6700;
+    }
     #status {
       color: var(--muted); font-size: 0.95rem;
       min-height: 4rem; max-width: 100%;
@@ -143,6 +179,14 @@ <h1>Sign in to Solid</h1>
         <p class="tagline">One click. We resolve your Nostr / WebID. You land at your pod.</p>
       </header>
       <button id="signin">Sign in</button>
+      <button id="alt-toggle" type="button" class="linkish">No signer? Paste a key instead</button>
+      <form id="manual" hidden>
+        <input id="manual-key" autocomplete="off" spellcheck="false"
+               placeholder="npub1…, nsec1…, or 64-hex pubkey"
+               aria-label="Nostr public or private key">
+        <button type="submit">Go</button>
+        <p class="warn">Proof of concept — paste test keys only. Real keys belong in a signer.</p>
+      </form>
       <div id="status" aria-live="polite"></div>
     </div>
     <footer>

login.js

@@ -6,6 +6,9 @@
 //     → fetch <resolver>/.well-known/did/nostr/<pubkey>.json
 //     → read alsoKnownAs[0] → WebID
 //     → redirect to that WebID's pod root
+//   or, without a signer: paste npub / hex pubkey / nsec (PoC,
+//   test keys only — nsec is reduced to its pubkey in memory)
+//   and the same resolve-and-redirect steps run.
 //
 // What this page does NOT do (yet):
 //   Establish an authenticated session AT the pod. The SSO page is
@@ -101,8 +104,62 @@ function waitForSigner(ms = 1500) {
   });
 }
 
+// ---- Manual key entry (PoC) ----
+// The current flow only ever needs a *public* key. nsec is accepted
+// so the "sign in with your private key" UX can be exercised with
+// throwaway keys before phase 2 (NIP-98 signing) lands. The key is
+// decoded in memory, reduced to its pubkey, and never stored.
+
+const BECH32_CHARSET = 'qpzry9x8gf2tvdw0s3jn54khce6mua7l';
+
+function polymodStep(pre) {
+  const b = pre >> 25;
+  let chk = (pre & 0x1ffffff) << 5;
+  const GEN = [0x3b6a57b2, 0x26508e6d, 0x1ea119fa, 0x3d4233dd, 0x2a1462b3];
+  for (let i = 0; i < 5; i++) if ((b >> i) & 1) chk ^= GEN[i];
+  return chk;
+}
+
+function bech32Decode(s) {
+  const pos = s.lastIndexOf('1');
+  if (pos < 1 || pos + 7 > s.length) return null;
+  const hrp = s.slice(0, pos);
+  const data = [...s.slice(pos + 1)].map((c) => BECH32_CHARSET.indexOf(c));
+  if (data.includes(-1)) return null;
+  let chk = 1;
+  for (const c of hrp) chk = polymodStep(chk) ^ (c.charCodeAt(0) >> 5);
+  chk = polymodStep(chk);
+  for (const c of hrp) chk = polymodStep(chk) ^ (c.charCodeAt(0) & 31);
+  for (const d of data) chk = polymodStep(chk) ^ d;
+  if (chk !== 1) return null;
+  let acc = 0, bits = 0;
+  const out = [];
+  for (const v of data.slice(0, -6)) {
+    acc = (acc << 5) | v; bits += 5;
+    if (bits >= 8) { bits -= 8; out.push((acc >> bits) & 255); }
+  }
+  return { hrp, bytes: new Uint8Array(out) };
+}
+
+const toHex = (bytes) => [...bytes].map((b) => b.toString(16).padStart(2, '0')).join('');
+
+async function pubkeyFromInput(raw) {
+  const s = raw.trim().toLowerCase();
+  if (!s) throw new Error('Enter a key first.');
+  if (/^[0-9a-f]{64}$/.test(s)) return s;
+  const dec = bech32Decode(s);
+  if (!dec || dec.bytes.length !== 32) {
+    throw new Error('Couldn’t parse that key — expected npub1…, nsec1…, or 64 hex characters.');
+  }
+  if (dec.hrp === 'npub') return toHex(dec.bytes);
+  if (dec.hrp === 'nsec') {
+    const { getPublicKey } = await import('https://cdn.jsdelivr.net/npm/nostr-tools@2/+esm');
+    return getPublicKey(dec.bytes);
+  }
+  throw new Error(`Unsupported key type “${dec.hrp}” — expected npub or nsec.`);
+}
+
 async function flow() {
-  const { resolver, next } = readConfig();
   setStatus('Reading your Nostr identity…');
 
   // Step 1 — signer extension present?
@@ -135,6 +192,12 @@ async function flow() {
     return false;
   }
 
+  return resolveAndGo(pubkey);
+}
+
+async function resolveAndGo(pubkey) {
+  const { resolver, next } = readConfig();
+
   // Step 3 — resolve via the well-known DID-doc endpoint
   setStatus(`Resolving did:nostr:${pubkey.slice(0, 8)}… via ${resolver}`);
   let didDoc;
@@ -220,6 +283,29 @@ function wire() {
 
   button.addEventListener('click', run);
 
+  const toggle = document.querySelector('#alt-toggle');
+  const form = document.querySelector('#manual');
+  if (toggle && form) {
+    toggle.addEventListener('click', () => {
+      form.hidden = !form.hidden;
+      if (!form.hidden) form.querySelector('input').focus();
+    });
+    form.addEventListener('submit', async (e) => {
+      e.preventDefault();
+      const input = form.querySelector('input');
+      const go = form.querySelector('button');
+      input.disabled = true; go.disabled = true;
+      try {
+        const pubkey = await pubkeyFromInput(input.value);
+        const ok = await resolveAndGo(pubkey);
+        if (!ok) { input.disabled = false; go.disabled = false; }
+      } catch (err) {
+        setStatus(err.message, 'error');
+        input.disabled = false; go.disabled = false;
+      }
+    });
+  }
+
   if (new URLSearchParams(location.search).has('resolver')) {
     // Arriving via a "Try the fallback resolver" link (or any explicit
     // ?resolver=) carries a click's worth of intent — resume the flow