marty/rm-circle-team-router
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Wallet diagnostics: a check page, and an error that names the signer

Browse Source 
Two sign-in failures with different causes and no way to tell them apart from
the outside, so stop guessing and get the data off the member's device.

/wallet-check reports what the page can actually see: whether window.ethereum
exists, which wallet flags are set, which EIP-6963 wallets announced, the
accounts and chain the wallet returns — and critically, any CSP violation.
Our script-src is 'self' with no 'unsafe-inline', and a wallet browser that
injects its provider via a script tag would be blocked silently, producing
symptoms identical to "no wallet installed". The company dApp sends no CSP at
all, which is a plausible reason it connects where we do not. This page will
confirm or kill that theory rather than us theorising further.

"Signature does not match this wallet" was true but useless — it never said
WHICH wallet signed. It now names both the address the page asked for and the
address that actually signed, which identifies the classic multi-account case
(wallet signs with the selected account, not the one the page picked up) in
one glance.

Verified for the case in hand: 0x20E0…2248 IS the wallet registered to
position #52 on-chain, so ownership was never the problem.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
martbost
2026-08-29 05:53:34 -05:00
parent 36327abed2
commit 3620a72338
4 changed files with 114 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
public/wallet-check.html
+29
View File
@@ -0,0 +1,29 @@
<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="robots" content="noindex"><title>Wallet check</title><link rel="icon" type="image/png" href="/favicon.png"><link rel="stylesheet" href="/styles.css">
<style>
.wc{max-width:640px;margin:0 auto;padding:22px 18px 60px}
.wc h1{font-size:24px;margin:6px 0 6px}
.wc .lede{color:var(--muted);font-size:14.5px;line-height:1.55;margin-bottom:16px}
.row{border:1px solid var(--line);border-radius:10px;padding:11px 13px;margin-bottom:9px}
.row .k{font-size:11px;font-weight:800;letter-spacing:1.2px;text-transform:uppercase;color:var(--muted);margin-bottom:4px}
.row .v{font-size:15px;font-weight:700;word-break:break-all}
.yes{color:var(--teal)} .no{color:#f0a05a}
pre{background:var(--bg,#0b1d2e);border:1px solid var(--line);border-radius:9px;padding:10px;
font-size:11.5px;line-height:1.5;overflow-x:auto;white-space:pre-wrap;word-break:break-all;margin-top:10px}
.btn-row{margin:14px 0 4px}
</style></head>
<body>
<header class="wrap nav"><a class="brand" href="/"><img class="brand-mark" src="/logo.jpg" alt="RM Circle" width="38" height="38"><span><span id="brandName">RM Circle</span><small>Wallet check</small></span></a></header>
<main class="wc">
<h1>Wallet check</h1>
<p class="lede">This page doesn't sign anything or ask for anything. It just reports what your browser can see, so we can work out why sign-in isn't working. Open it the same way you were opening the dashboard, then screenshot this whole page.</p>
<div id="rows"></div>
<div class="btn-row"><button id="ask" class="btn btn-primary">Ask the wallet for its address</button></div>
<div id="askOut"></div>
<pre id="dump">collecting…</pre>
</main>
<script src="/rmc-wallet.js"></script>
<script src="/wallet-check.js"></script>
</body></html>