de1ce77fea
featherChat as Identity Provider: - OIDC provider endpoints (/auth/oidc/authorize, /token, /userinfo) - JWT tokens with fingerprint, alias, eth_address, groups claims - Authentik integration (featherChat as upstream IdP, group sync) - SAML support for enterprise Smart Contract Access Control: - FeatherChatACL Solidity contract (server/group/feature access) - secp256k1 address from same BIP39 seed = on-chain identity - NFT-gated access (ERC-721/ERC-1155 membership) - Token-gated access (ERC-20 staking) - DAO governance for group membership decisions - UUPS upgradeable proxy pattern Hybrid architecture: - OIDC token carries on-chain permissions as claims - Event-driven sync (WebSocket RPC + periodic poll + sled cache) - L2 deployment (Arbitrum/Base/Polygon) for low gas costs Feasibility: 7-11 weeks across 4 phases. Comparison with SpruceID, Ceramic, Lens, XMTP. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>