Add a temporary nsec login option, for testing

src/lib/auth.svelte.ts

@@ -1,5 +1,8 @@
 import type { NostrUser } from "@nostr/gadgets/metadata";
 import type { WindowNostr } from "@nostr/tools/nip07";
+import type { EventTemplate, VerifiedEvent } from "@nostr/tools/core";
+import * as nip19 from "@nostr/tools/nip19";
+import { finalizeEvent, getPublicKey } from "@nostr/tools/pure";
 
 declare global {
   interface Window {
@@ -7,8 +10,14 @@ declare global {
   }
 }
 
+export type Signer = {
+  getPublicKey(): Promise<string>;
+  signEvent(template: EventTemplate): Promise<VerifiedEvent>;
+};
+
 let user = $state<NostrUser | null>(null);
-let signer = $state<WindowNostr | null>(null);
+let signer = $state<Signer | null>(null);
+let loginModalOpen = $state(false);
 
 export const auth = {
   get user() {
@@ -17,34 +26,107 @@ export const auth = {
   get signer() {
     return signer;
   },
+  get loginModalOpen() {
+    return loginModalOpen;
+  },
 };
 
 const PUBKEY_KEY = "nostr_pubkey";
+const METHOD_KEY = "nostr_login_method";
+const NSEC_KEY = "nostr_nsec";
 
-export async function login() {
+export function openLogin() {
+  loginModalOpen = true;
+}
+
+export function closeLogin() {
+  loginModalOpen = false;
+}
+
+function makeNsecSigner(secretKey: Uint8Array): Signer {
+  const pubkey = getPublicKey(secretKey);
+  return {
+    async getPublicKey() {
+      return pubkey;
+    },
+    async signEvent(template) {
+      return finalizeEvent(template, secretKey);
+    },
+  };
+}
+
+async function setUser(pubkey: string) {
+  const { loadNostrUser } = await import("@nostr/gadgets/metadata");
+  user = await loadNostrUser(pubkey);
+}
+
+export async function loginWithExtension() {
   if (!window.nostr) {
-    alert(
-      "No Nostr extension found. Please install a Nostr extension like nos2x.",
-    );
-    return;
+    throw new Error("No Nostr extension found");
   }
   const pubkey = await window.nostr.getPublicKey();
   signer = window.nostr;
   localStorage.setItem(PUBKEY_KEY, pubkey);
-  const { loadNostrUser } = await import("@nostr/gadgets/metadata");
-  user = await loadNostrUser(pubkey);
+  localStorage.setItem(METHOD_KEY, "extension");
+  localStorage.removeItem(NSEC_KEY);
+  await setUser(pubkey);
+}
+
+function parseSecretKey(input: string): Uint8Array {
+  const trimmed = input.trim();
+  if (/^[0-9a-fA-F]{64}$/.test(trimmed)) {
+    const sk = new Uint8Array(32);
+    for (let i = 0; i < 32; i++) {
+      sk[i] = parseInt(trimmed.slice(i * 2, i * 2 + 2), 16);
+    }
+    return sk;
+  }
+  let decoded;
+  try {
+    decoded = nip19.decode(trimmed);
+  } catch {
+    throw new Error("Invalid nsec");
+  }
+  if (decoded.type !== "nsec") throw new Error("Invalid nsec");
+  return decoded.data;
+}
+
+export async function loginWithNsec(input: string) {
+  const sk = parseSecretKey(input);
+  const nsec = nip19.nsecEncode(sk);
+  const pubkey = getPublicKey(sk);
+  signer = makeNsecSigner(sk);
+  localStorage.setItem(PUBKEY_KEY, pubkey);
+  localStorage.setItem(METHOD_KEY, "nsec");
+  localStorage.setItem(NSEC_KEY, nsec);
+  await setUser(pubkey);
 }
 
 export function logout() {
   user = null;
   signer = null;
   localStorage.removeItem(PUBKEY_KEY);
+  localStorage.removeItem(METHOD_KEY);
+  localStorage.removeItem(NSEC_KEY);
 }
 
 export async function restoreSession() {
   const pubkey = localStorage.getItem(PUBKEY_KEY);
   if (!pubkey) return;
-  signer = window.nostr ?? null;
-  const { loadNostrUser } = await import("@nostr/gadgets/metadata");
-  user = await loadNostrUser(pubkey);
+  const method = localStorage.getItem(METHOD_KEY) ?? "extension";
+
+  if (method === "nsec") {
+    const nsec = localStorage.getItem(NSEC_KEY);
+    if (!nsec) return;
+    try {
+      const decoded = nip19.decode(nsec);
+      if (decoded.type !== "nsec") return;
+      signer = makeNsecSigner(decoded.data);
+    } catch {
+      return;
+    }
+  } else {
+    signer = window.nostr ?? null;
+  }
+  await setUser(pubkey);
 }