LINE區塊鏈現況：Kaia、Unifi與在LINE上開發Web3（2026）

mkdir membership-pass && cd membership-pass
npm init -y
npm install --save-dev hardhat@hh2 @nomicfoundation/hardhat-toolbox@hh2 dotenv
npm install @openzeppelin/contracts
npx hardhat init

// contracts/MembershipPass.sol
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.24;

import {ERC721} from "@openzeppelin/contracts/token/ERC721/ERC721.sol";
import {Ownable} from "@openzeppelin/contracts/access/Ownable.sol";

contract MembershipPass is ERC721, Ownable {
    uint256 private _nextTokenId;
    string private _base;

    constructor(address initialOwner, string memory baseURI)
        ERC721("Cafe Membership Pass", "PASS")
        Ownable(initialOwner)
    {
        _base = baseURI;
    }

    function mintTo(address to) external onlyOwner returns (uint256 tokenId) {
        tokenId = _nextTokenId++;
        _safeMint(to, tokenId);
    }

    function _baseURI() internal view override returns (string memory) {
        return _base;
    }
}

// hardhat.config.ts
import { HardhatUserConfig } from "hardhat/config";
import "@nomicfoundation/hardhat-toolbox";
import "dotenv/config";

const accounts = process.env.DEPLOYER_PRIVATE_KEY ? [process.env.DEPLOYER_PRIVATE_KEY] : [];

const config: HardhatUserConfig = {
  solidity: "0.8.28",
  networks: {
    kairos: {
      url: process.env.KAIROS_RPC_URL ?? "https://public-en-kairos.node.kaia.io",
      chainId: 1001,
      accounts,
    },
    kaia: {
      url: process.env.KAIA_RPC_URL ?? "",
      chainId: 8217,
      accounts,
    },
  },
};

export default config;

// scripts/deploy.ts
import { ethers } from "hardhat";

async function main() {
  const [deployer] = await ethers.getSigners();
  const pass = await ethers.deployContract("MembershipPass", [
    deployer.address,
    "https://example.com/pass/",
  ]);
  await pass.waitForDeployment();
  console.log("MembershipPass:", await pass.getAddress());
}

main().catch((error) => {
  console.error(error);
  process.exitCode = 1;
});

// lib/link-wallet.ts（在LIFF瀏覽器中執行）
import liff from "@line/liff";
import { BrowserProvider, type Eip1193Provider } from "ethers";

export async function linkWallet(walletProvider: Eip1193Provider) {
  await liff.init({ liffId: process.env.NEXT_PUBLIC_LIFF_ID! });
  if (!liff.isLoggedIn()) {
    liff.login();
    return;
  }

  const idToken = liff.getIDToken(); // 需要openid scope
  if (!idToken) throw new Error("No ID token");

  const { nonce, message } = await fetch("/api/wallet/nonce", { method: "POST" }).then((r) => r.json());
  const signer = await new BrowserProvider(walletProvider).getSigner();
  const signature = await signer.signMessage(message);

  const res = await fetch("/api/wallet/link", {
    method: "POST",
    headers: { "Content-Type": "application/json" },
    body: JSON.stringify({ idToken, address: await signer.getAddress(), nonce, signature }),
  });
  if (!res.ok) throw new Error("Wallet link failed");
}

// app/api/wallet/link/route.ts
import { NextResponse } from "next/server";
import { isAddress, verifyMessage } from "ethers";
import { consumeNonce, saveWalletLink } from "@/lib/wallet-store"; // 你自己的儲存層

export async function POST(req: Request) {
  const { idToken, address, nonce, signature } = await req.json();
  if (!isAddress(address)) return NextResponse.json({ error: "Bad address" }, { status: 400 });

  // 1. 請LINE驗證ID Token，client_id = LINE MINI App／LIFF頻道的Channel ID
  const verify = await fetch("https://api.line.me/oauth2/v2.1/verify", {
    method: "POST",
    headers: { "Content-Type": "application/x-www-form-urlencoded" },
    body: new URLSearchParams({ id_token: idToken, client_id: process.env.LINE_LOGIN_CHANNEL_ID! }),
  });
  if (!verify.ok) return NextResponse.json({ error: "Invalid ID token" }, { status: 401 });
  const { sub: lineUserId } = await verify.json();

  // 2. nonce必須存在、未過期且未使用，並回傳當初發出的訊息
  const message = await consumeNonce(nonce);
  if (!message) return NextResponse.json({ error: "Expired nonce" }, { status: 401 });

  // 3. 錢包簽署的必須正是這段訊息
  if (verifyMessage(message, signature).toLowerCase() !== address.toLowerCase()) {
    return NextResponse.json({ error: "Signature mismatch" }, { status: 401 });
  }

  await saveWalletLink({ lineUserId, address });
  return NextResponse.json({ ok: true });
}

// lib/issue-pass.ts（僅在伺服器端執行）
import { Contract, JsonRpcProvider, Wallet, type ContractTransactionReceipt } from "ethers";
import { messagingApi } from "@line/bot-sdk";

const provider = new JsonRpcProvider(process.env.KAIA_RPC_URL);
const minter = new Wallet(process.env.MINTER_PRIVATE_KEY!, provider);
const pass = new Contract(
  process.env.PASS_ADDRESS!,
  [
    "function mintTo(address to) returns (uint256)",
    "event Transfer(address indexed from, address indexed to, uint256 indexed tokenId)",
  ],
  minter,
);
const line = new messagingApi.MessagingApiClient({
  channelAccessToken: process.env.LINE_CHANNEL_ACCESS_TOKEN!,
});

export async function issuePass(lineUserId: string, address: string) {
  const tx = await pass.mintTo(address);
  const receipt: ContractTransactionReceipt | null = await tx.wait();
  if (!receipt) throw new Error("Transaction not confirmed");

  const transfer = receipt.logs
    .map((log) => pass.interface.parseLog(log))
    .find((event) => event?.name === "Transfer");

  await line.pushMessage({
    to: lineUserId,
    messages: [{ type: "text", text: `您的會員卡 #${transfer?.args.tokenId} 已發行完成。` }],
  });
}