Collab.Land Near Protocol Gasless Wallet Signing

[calebcgates]

Story
As a user of near protocol I want to be able to verify NFT ownership using the collab.land bot.
As a member of the collab.land team I want the verification to be gas less because collab.land does not require users to sign on chain transactions for security reasons. This has been a point of contention because the current verification process requires adding a function access key to the users near wallet. We would like to avoid this because while users should probably have enough to pay for this access key it defeats the point of off chain transactions that don't change the users state. Also the user has an access key in their browser & collab.land can query the keys for a specific account so its better that we get a signature. Finally with the current system after the access key is added we're returned the users near account in url parameter that can be edited by a hacker. This does not allow us to securely associate their near account with collab.land because we can see that a user added the collab.land access key but we can't be sure that the person who fired the redirect URL is the owner of the account and we therefore shouldn't associate their discord with that near account. Lastly in order to add an access key we need to create a bogus collab.land contract which is sketchy.

Acknowledging that Near is different than EVM it would still be ideal for security purposes to have the ability to follow the same off chain signature flow.

Tasks

• Determine what changes would be required to enable off chain signing through the wallet.near website
• Determine if there are any other near wallets that could support this standard and are willing to help implement it
• Document the security considerations for designing this feature
• Implement this change on the near side
• Implement verifying signatures on the collab.land side

Acceptance Criteria

• Login with Near works for collab.land and is a secure and gas less process