
[Tales of Elatora](https://talesofelatora.com/) is a game where players need an avatar to play. The Avatars are non-fungible tokens using the Unlock protocol contract. There are two factions: the Buntai and the Gundan.

Players also need weapons to play. Weapons are also NFTs, and a Buntai avatar can only use a Buntai weapon and a Gundan avatar can only use a Gundan weapon. Anyone who buys an avatar automatically receives a matching weapon, as you can see on [this transaction](https://etherscan.io/tx/0x0f61fd3cdfb520804f59bc5de2ab70c131313a55d3e692bbec4c2a66777e03b7) for example.

![2 NFT](/images/blog/dynamic-nft/transaction-2-nft.png)

# The `OnKeyPurchase` hook

The PublicLock contract is highly programmable through the use of [hooks](https://github.com/unlock-protocol/docs/tree/master/developers/smart-contracts/lock-api/hooks). These hooks are external contracts that are used to alter the behavior of a PublicLock contract or trigger actions in other contracts. Any lock manager can configure hooks on a lock using the `setEventHooks` function. Each hook needs to implement a few functions and you can also use a single hook contract with all functions.

`onKeyPurchaseHook` is one of the hooks. This hook is called when the `purchase` function of a lock is called. It needs to implement 2 distinct functions:

- `keyPurchasePrice`: this first function is called with the address of the sender of the purchase transaction, the address of the recipient of the NFT membership, as well as the `referrer` and `data` parameters of the `purchase` function. The return value is the price paid for this specific membership. If your contract wants to offer discounts to a list of addresses or change the price based on how much time has passed since the last purchase, this function is a great way to achieve that!

- `onKeyPurchase`: this second function is called with the same arguments as `keyPurchasePrice` (from, recipient, referrer and data), but also with the minimum price this user has to pay as well as the price they actually paid (this would be different in the context of tips for example). This function is called at the tail end of the `purchase` function as a way to trigger other actions.

Tales of Elatora's avatar contract uses a hook to airdrop a weapon to anyone who buys an avatar automatically! Here is the code:

```solidity
function onKeyPurchase(
  address /*from*/,
  address recipient,
  address /*referrer*/,
  bytes calldata /*data*/,
  uint256 /*minKeyPrice*/,
  uint256 /*pricePaid*/
) external {
  if (msg.sender == _avatarLock) {
    // If the sender is the avatar lock
    IPublicLock avatar = IPublicLock(_avatarLock);
    uint id = avatar.totalSupply();

    address[] memory recipients = new address[](1);
    recipients[0] = recipient;

    uint[] memory expirations = new uint[](1);
    expirations[0] = type(uint256).max; // Not expiring!

    address[] memory managers = new address[](1);
    managers[0] = recipient;

    if (id % 2 == 0) {
      IPublicLock(_buntaiLock).grantKeys(recipients, expirations, managers);
    } else {
      IPublicLock(_gundanLock).grantKeys(recipients, expirations, managers);
    }
  }
}
```

The Avatars are such that every even number is a Buntai and every odd is a Gundan. The hook calls the `grantKeys` function on the right contract based on that.
Of course, that means that the Hook contract has been previously set to be a `keyGranter` on both locks ([see more info on the roles](https://docs.unlock-protocol.com/unlock/developers/smart-contracts/lock-api/access-control)).

# The `onTokenUri` Hook

An even more exciting hook that the PublicLock contract includes is the `onTokenUri` hook. This hook alters how the `tokenUri` method behaves. This method is the one in charge of yielding the URI that itself renders the JSON blob that includes the image, and other metadata for each individual Non Fungible Token.

The URI that the contract yields can in fact be a [data URL](https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/Data_URIs). Data URLs, URLs prefixed with the `data:` scheme, are self-referrential: the URL itself contains the data that's represented by the browser. Here is an example: `data://text,hello%20unlock` is a URL which opens as a new page whose content is just "hello unlock".

By using a data URL as the `tokenUri` return, we can render metadata dynamically. The Tales of Elatora avatars are using this technique to render the image differently based on 2 things:

- whether the owner of the avatar also owns a weapon, and in which case, render the avatar along with the weapon
- whether the avatar is rendered during the day, at night, or during sunset.

Once configured, the `onTokenUri` hook will let the Public Lock contract call a 3rd party contract to generate the JSON. Given an `image` string (see below for more details), this is what the Tales of Elatora Public lock does:

```solidity
// Create the json that includes the image
// It is also possible to add more properties to the JSON object
string memory json = string(
    abi.encodePacked('{ "image": "', image, '"')
);

// render the base64 encoded json metadata
return
    string(
        abi.encodePacked(
            "data:application/json;base64,",
            Base64.encode(bytes(abi.encodePacked(json)))
        )
    );
```

We now only have to generate the `image` itself. Using the same technique, it would be perfectly possible create an SVG (or another image type!) on the fly, but Tales of Elatora used another approach: dynamically generating URLs pointing to files pre-uploaded on IPFS. Then, they use the contract's state to generate the URL that it needs to point to.

Caroline and David, leads on the Tales of Elatora project, generated images of all the possible combinations of avatars, weapons and backgrounds (including the absence of a weapon), and then uploaded all of the images to IPFS using the following pattern: `{avatar-id}-{weapon-id}-{background}.svg`.

The hook implements its own `tokenURI` method.

```solidity
function tokenURI(
  address lockAddress,
  address operator, // We could alter the rendering based on _who_ is viewing!
  address owner,
  uint256 keyId,
  uint256 expirationTimestamp // a cool trick could be to render based on how far the expiration is
) external view returns (string memory) {
  // ...
  // custom implementation
  /// ...
}
```

Specificaly, Tales of Elatora implements the hook by first checking if the `owner` of the Avatar also owns a corresponding weapon. If so, the final URL will include point to it (the `{weapon-id}` part), if not, it will use `0` for the `{weapon-id}`.

Similarly, the background of the image is dynamic and changes based on the time of the day! If the contract's `tokenUri` is called between 8am and 5pm GMT, it will render the _day_ background, if it is queried between 5pm and 9pm GMT, it will render the _sunset_ background, and if it is queried between 9pm and 8am GMT, it will render the _night_ background.

Using etherscan, you can easily [retrieve the metadata](https://etherscan.io/address/0x39aecbe181d94d721ef80924f10b77c785299397#readProxyContract). Here is what token `1` renders as I am writing this post:

```
data:application/json;base64,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
```

Opening this data URI in a new tab will yield the following JSON:

```js
{
  "image": "ipfs://QmPeCBcmWFiMrLNLtBUjaZ6yBtp1LhmDqAVXmjXRHx7qLZ/TalesOfElatoraCollection_Final_2/1-1-2.svg",
  "attributes": [
    { "trait_type": "faction", "value": "gundan" },
    { "trait_type": "momentOfDay", "value": "sunset" },
    { "trait_type": "class", "value": "Rogue" }
  ],
  "description": "Tales of Elatora is a community-driven fantasy world, written novel and an RPG. This ToE NFT grants access to the story, the game, the community and gives the holder voting rights. https://talesofelatora.com/",
  "external_url": "https://talesofelatora.com/",
  "name": "Tales of Elatora Avatar 1"
}
```

And of course the image can easily be rendered using the following. It was rendered at sunset, and the owner currently owns [this weapon](https://opensea.io/assets/0x93a9f5fa632224117802dcfbf4aa9377fb7448ab/1).

![Tales of Elatora](/images/blog/dynamic-nft/tales-of-elatora.gif)

## Dynamic contracts

The core goal of the Unlock Protocol is to build a standard for memberships, where all memberships, from Amazon Prime, to Medium's member program, or the Tales of Elatora game work the same, in the same way that every website is made of the same core protocols: HTML, HTTP and others! However, exactly like every website can also be different, we believe memberships can also look and behave differently on some aspects.

Are you interested in deploying your own custom membership? Get in touch!


By leveraging some of the important features of the Unlock contracts, it is possible to create dynamic NFTs and make the visual NFT evolve over time using on-chain data characteristics.

How Tales of Elatora is making dynamic NFT images

How to Create Dynamic NFTs Using Unlock Protocol

<p><a href="https://talesofelatora.com/">Tales of Elatora</a> is a game where players need an avatar to play. The Avatars are non-fungible tokens using the Unlock protocol contract. There are two factions: the Buntai and the Gundan.</p>
<p>Players also need weapons to play. Weapons are also NFTs, and a Buntai avatar can only use a Buntai weapon and a Gundan avatar can only use a Gundan weapon. Anyone who buys an avatar automatically receives a matching weapon, as you can see on <a href="https://etherscan.io/tx/0x0f61fd3cdfb520804f59bc5de2ab70c131313a55d3e692bbec4c2a66777e03b7">this transaction</a> for example.</p>
<p><img src="/images/blog/dynamic-nft/transaction-2-nft.png" alt="2 NFT"></p>
<h1>The <code>OnKeyPurchase</code> hook</h1>
<p>The PublicLock contract is highly programmable through the use of <a href="https://github.com/unlock-protocol/docs/tree/master/developers/smart-contracts/lock-api/hooks">hooks</a>. These hooks are external contracts that are used to alter the behavior of a PublicLock contract or trigger actions in other contracts. Any lock manager can configure hooks on a lock using the <code>setEventHooks</code> function. Each hook needs to implement a few functions and you can also use a single hook contract with all functions.</p>
<p><code>onKeyPurchaseHook</code> is one of the hooks. This hook is called when the <code>purchase</code> function of a lock is called. It needs to implement 2 distinct functions:</p>
<ul>
<li>
<p><code>keyPurchasePrice</code>: this first function is called with the address of the sender of the purchase transaction, the address of the recipient of the NFT membership, as well as the <code>referrer</code> and <code>data</code> parameters of the <code>purchase</code> function. The return value is the price paid for this specific membership. If your contract wants to offer discounts to a list of addresses or change the price based on how much time has passed since the last purchase, this function is a great way to achieve that!</p>
</li>
<li>
<p><code>onKeyPurchase</code>: this second function is called with the same arguments as <code>keyPurchasePrice</code> (from, recipient, referrer and data), but also with the minimum price this user has to pay as well as the price they actually paid (this would be different in the context of tips for example). This function is called at the tail end of the <code>purchase</code> function as a way to trigger other actions.</p>
</li>
</ul>
<p>Tales of Elatora's avatar contract uses a hook to airdrop a weapon to anyone who buys an avatar automatically! Here is the code:</p>
<pre><code class="language-solidity">function onKeyPurchase(
  address /*from*/,
  address recipient,
  address /*referrer*/,
  bytes calldata /*data*/,
  uint256 /*minKeyPrice*/,
  uint256 /*pricePaid*/
) external {
  if (msg.sender == _avatarLock) {
    // If the sender is the avatar lock
    IPublicLock avatar = IPublicLock(_avatarLock);
    uint id = avatar.totalSupply();

    address[] memory recipients = new address[](1);
    recipients[0] = recipient;

    uint[] memory expirations = new uint[](1);
    expirations[0] = type(uint256).max; // Not expiring!

    address[] memory managers = new address[](1);
    managers[0] = recipient;

    if (id % 2 == 0) {
      IPublicLock(_buntaiLock).grantKeys(recipients, expirations, managers);
    } else {
      IPublicLock(_gundanLock).grantKeys(recipients, expirations, managers);
    }
  }
}
</code></pre>
<p>The Avatars are such that every even number is a Buntai and every odd is a Gundan. The hook calls the <code>grantKeys</code> function on the right contract based on that.
Of course, that means that the Hook contract has been previously set to be a <code>keyGranter</code> on both locks (<a href="https://docs.unlock-protocol.com/unlock/developers/smart-contracts/lock-api/access-control">see more info on the roles</a>).</p>
<h1>The <code>onTokenUri</code> Hook</h1>
<p>An even more exciting hook that the PublicLock contract includes is the <code>onTokenUri</code> hook. This hook alters how the <code>tokenUri</code> method behaves. This method is the one in charge of yielding the URI that itself renders the JSON blob that includes the image, and other metadata for each individual Non Fungible Token.</p>
<p>The URI that the contract yields can in fact be a <a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/Data_URIs">data URL</a>. Data URLs, URLs prefixed with the <code>data:</code> scheme, are self-referrential: the URL itself contains the data that's represented by the browser. Here is an example: <code>data://text,hello%20unlock</code> is a URL which opens as a new page whose content is just "hello unlock".</p>
<p>By using a data URL as the <code>tokenUri</code> return, we can render metadata dynamically. The Tales of Elatora avatars are using this technique to render the image differently based on 2 things:</p>
<ul>
<li>whether the owner of the avatar also owns a weapon, and in which case, render the avatar along with the weapon</li>
<li>whether the avatar is rendered during the day, at night, or during sunset.</li>
</ul>
<p>Once configured, the <code>onTokenUri</code> hook will let the Public Lock contract call a 3rd party contract to generate the JSON. Given an <code>image</code> string (see below for more details), this is what the Tales of Elatora Public lock does:</p>
<pre><code class="language-solidity">// Create the json that includes the image
// It is also possible to add more properties to the JSON object
string memory json = string(
    abi.encodePacked('{ "image": "', image, '"')
);

// render the base64 encoded json metadata
return
    string(
        abi.encodePacked(
            "data:application/json;base64,",
            Base64.encode(bytes(abi.encodePacked(json)))
        )
    );
</code></pre>
<p>We now only have to generate the <code>image</code> itself. Using the same technique, it would be perfectly possible create an SVG (or another image type!) on the fly, but Tales of Elatora used another approach: dynamically generating URLs pointing to files pre-uploaded on IPFS. Then, they use the contract's state to generate the URL that it needs to point to.</p>
<p>Caroline and David, leads on the Tales of Elatora project, generated images of all the possible combinations of avatars, weapons and backgrounds (including the absence of a weapon), and then uploaded all of the images to IPFS using the following pattern: <code>{avatar-id}-{weapon-id}-{background}.svg</code>.</p>
<p>The hook implements its own <code>tokenURI</code> method.</p>
<pre><code class="language-solidity">function tokenURI(
  address lockAddress,
  address operator, // We could alter the rendering based on _who_ is viewing!
  address owner,
  uint256 keyId,
  uint256 expirationTimestamp // a cool trick could be to render based on how far the expiration is
) external view returns (string memory) {
  // ...
  // custom implementation
  /// ...
}
</code></pre>
<p>Specificaly, Tales of Elatora implements the hook by first checking if the <code>owner</code> of the Avatar also owns a corresponding weapon. If so, the final URL will include point to it (the <code>{weapon-id}</code> part), if not, it will use <code>0</code> for the <code>{weapon-id}</code>.</p>
<p>Similarly, the background of the image is dynamic and changes based on the time of the day! If the contract's <code>tokenUri</code> is called between 8am and 5pm GMT, it will render the <em>day</em> background, if it is queried between 5pm and 9pm GMT, it will render the <em>sunset</em> background, and if it is queried between 9pm and 8am GMT, it will render the <em>night</em> background.</p>
<p>Using etherscan, you can easily <a href="https://etherscan.io/address/0x39aecbe181d94d721ef80924f10b77c785299397#readProxyContract">retrieve the metadata</a>. Here is what token <code>1</code> renders as I am writing this post:</p>
<pre><code>data:application/json;base64,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
</code></pre>
<p>Opening this data URI in a new tab will yield the following JSON:</p>
<pre><code class="language-js">{
  "image": "ipfs://QmPeCBcmWFiMrLNLtBUjaZ6yBtp1LhmDqAVXmjXRHx7qLZ/TalesOfElatoraCollection_Final_2/1-1-2.svg",
  "attributes": [
    { "trait_type": "faction", "value": "gundan" },
    { "trait_type": "momentOfDay", "value": "sunset" },
    { "trait_type": "class", "value": "Rogue" }
  ],
  "description": "Tales of Elatora is a community-driven fantasy world, written novel and an RPG. This ToE NFT grants access to the story, the game, the community and gives the holder voting rights. https://talesofelatora.com/",
  "external_url": "https://talesofelatora.com/",
  "name": "Tales of Elatora Avatar 1"
}
</code></pre>
<p>And of course the image can easily be rendered using the following. It was rendered at sunset, and the owner currently owns <a href="https://opensea.io/assets/0x93a9f5fa632224117802dcfbf4aa9377fb7448ab/1">this weapon</a>.</p>
<p><img src="/images/blog/dynamic-nft/tales-of-elatora.gif" alt="Tales of Elatora"></p>
<h2>Dynamic contracts</h2>
<p>The core goal of the Unlock Protocol is to build a standard for memberships, where all memberships, from Amazon Prime, to Medium's member program, or the Tales of Elatora game work the same, in the same way that every website is made of the same core protocols: HTML, HTTP and others! However, exactly like every website can also be different, we believe memberships can also look and behave differently on some aspects.</p>
<p>Are you interested in deploying your own custom membership? Get in touch!</p>



![apr-22-banner.jpg](/images/blog/apr-22-update/apr-22-banner.jpg)

## Dashboard improvements

- **Airdrops to multiple wallets** — Lock managers can now airdrop keys to multiple wallets at one time (huge time saver!)
- **Lock managers can expire memberships** — Lock managers can expire (cancel) memberships right from the dashboard

## Keychain improvements

- **Members can expire memberships** — Similar to the above, members can expire (cancel) memberships right from their keychain

## Checkout improvements

- **Customize recipient** — Purchasers can customize the recipient of the purchase (e.g. when purchasing as a gift)
- **Multiple recipients** — Purchasers can purchase multiple keys at once
- **CAPTCHA improvements** — Improved CAPTCHA for bot deterrence (especially useful for NFT ticket sales)
- **Extending expired membership (v10)** — Expired memberships can be reactivated from checkout

## Credit card handling improvements

- **Improved page handling** — Improved handling of page refresh to reduce the chance of transactions being submitted multiple times
- **Improved transaction sequencing** — Credit card purchases are now executed only after the blockchain transaction is successful

## Website improvements

- **Community tab** — Based on website visitor feedback, added a new "Community" tab to the Unlock website

Want to know more and try stuff out? [Join the Unlock community in the Discord](https://discord.unlock-protocol.com/)!


Release Notes for April 2022. Unlock Protocol improved credit card handling, checkout flows, the dashboard and keychain, and more.

Improvements for credit card handling, checkout, dashboard and keychain

Unlock Protocol Product Updates for April 2022

<p><img src="/images/blog/apr-22-update/apr-22-banner.jpg" alt="apr-22-banner.jpg"></p>
<h2>Dashboard improvements</h2>
<ul>
<li><strong>Airdrops to multiple wallets</strong> — Lock managers can now airdrop keys to multiple wallets at one time (huge time saver!)</li>
<li><strong>Lock managers can expire memberships</strong> — Lock managers can expire (cancel) memberships right from the dashboard</li>
</ul>
<h2>Keychain improvements</h2>
<ul>
<li><strong>Members can expire memberships</strong> — Similar to the above, members can expire (cancel) memberships right from their keychain</li>
</ul>
<h2>Checkout improvements</h2>
<ul>
<li><strong>Customize recipient</strong> — Purchasers can customize the recipient of the purchase (e.g. when purchasing as a gift)</li>
<li><strong>Multiple recipients</strong> — Purchasers can purchase multiple keys at once</li>
<li><strong>CAPTCHA improvements</strong> — Improved CAPTCHA for bot deterrence (especially useful for NFT ticket sales)</li>
<li><strong>Extending expired membership (v10)</strong> — Expired memberships can be reactivated from checkout</li>
</ul>
<h2>Credit card handling improvements</h2>
<ul>
<li><strong>Improved page handling</strong> — Improved handling of page refresh to reduce the chance of transactions being submitted multiple times</li>
<li><strong>Improved transaction sequencing</strong> — Credit card purchases are now executed only after the blockchain transaction is successful</li>
</ul>
<h2>Website improvements</h2>
<ul>
<li><strong>Community tab</strong> — Based on website visitor feedback, added a new "Community" tab to the Unlock website</li>
</ul>
<p>Want to know more and try stuff out? <a href="https://discord.unlock-protocol.com/">Join the Unlock community in the Discord</a>!</p>



![CDAA header](/images/blog/cdaa/cdaa-header.png)

The Certified Digital Asset Advisor (CDAA) designation is the only community-owned designation in the financial services industry. To earn the CDAA designation, financial advisors go through in-depth training and education in the core concepts of cryptocurrency, blockchain technology, and decentralized finance. This knowledge enables certified advisors to provide their investor clients with an elevated level of service and education related to cryptoassets.

Once a financial advisor completes the required coursework and passes a rigorous final exam, they receive the CDAA Certification Token. CDAA is an on-chain, NFT-based professional credential, powered by Unlock Protocol, that provably shows the advisor has achieved this distinction.

[See the full case study](https://19942922.fs1.hubspotusercontent-na1.net/hubfs/19942922/CDAA%20-%20Unlock%20Case%20Study.pdf).

[![CDAA thumbnail](/images/blog/cdaa/cdaa-thumbnail.png)](https://19942922.fs1.hubspotusercontent-na1.net/hubfs/19942922/CDAA%20-%20Unlock%20Case%20Study.pdf)


The Certified Digital Asset Advisor (CDAA) industry certification is the first on-chain certification in the financial services industry. And it's powered by Unlock.

The Certified Digital Asset Advisor (CDAA) credential is the first on-chain certification in the financial services industry

CDAA | Unlock Case Study

<p><img src="/images/blog/cdaa/cdaa-header.png" alt="CDAA header"></p>
<p>The Certified Digital Asset Advisor (CDAA) designation is the only community-owned designation in the financial services industry. To earn the CDAA designation, financial advisors go through in-depth training and education in the core concepts of cryptocurrency, blockchain technology, and decentralized finance. This knowledge enables certified advisors to provide their investor clients with an elevated level of service and education related to cryptoassets.</p>
<p>Once a financial advisor completes the required coursework and passes a rigorous final exam, they receive the CDAA Certification Token. CDAA is an on-chain, NFT-based professional credential, powered by Unlock Protocol, that provably shows the advisor has achieved this distinction.</p>
<p><a href="https://19942922.fs1.hubspotusercontent-na1.net/hubfs/19942922/CDAA%20-%20Unlock%20Case%20Study.pdf">See the full case study</a>.</p>
<p><a href="https://19942922.fs1.hubspotusercontent-na1.net/hubfs/19942922/CDAA%20-%20Unlock%20Case%20Study.pdf"><img src="/images/blog/cdaa/cdaa-thumbnail.png" alt="CDAA thumbnail"></a></p>



![headline-header-bg.png](/images/blog/headline/headline-header-bg.png)

Unlock is happy to announce the launch of Headline, bringing publishing and newsletter subscriptions into the Web3 ecosystem. You can check it out at [https://viaheadline.xyz](https://viaheadline.xyz).

Built by Unlock and [RaidGuild](https://www.raidguild.org/), Headline utilizes technology from [Ceramic](https://ceramic.network/), a decentralized data network bringing unlimited data to Web3 applications and [Lit Protocol](https://litprotocol.com/), a distributed network for encryption to set a new standard for subscription newsletters in Web3.

![headline-fullpage.png](/images/blog/headline/headline-fullpage.png)

"Encrypted data and access control on the open and decentralized web lets creators create world class experiences for their fans, without having to rely on any web2 platform as a middle man. The composability of the open web, like how Lit Protocol and Unlock can work together, is in service of creating more value for creators and their fans," said David Sneider, CEO Lit Protocol

"We believe that the most successful Web3 projects are those building bridges across the ecosystem. Ceramic's open, decentralized data network is a natural fit for Headline, and we're excited to see how creators leverage this composable infrastructure to share their content across a multitude of communities and platforms," said Lauren Feld, Head of Business Development at 3Box Labs.

Online publishing platforms have proven time and time again to act with their own self-interest, imposing limitations on creators, such as onerous fees and other business-model decisions that benefit the platform and hinder the creators. A primary means of retaining users on these platforms is by locking members into the platform, rather than allowing creators to control those fan relationships directly. Unlock offers a new alternative for creators trapped inside the walled gardens of these Web2 platforms by enabling creators to directly manage who has access to their content, no matter where it's published.

With Headline, creators directly share their newsletters with readers who hold those creators' membership NFTs. This approach means creators don't need to rely on a third-party publication platform that forces readers to log into that site to access and subscribe to newsletters. Readers will retain the normal experience of having newsletters arrive in their inboxes, but for creators this represents a sea-change that gives them direct control and ownership over their newsletter membership.

Want to try it out? Head over to [https://viaheadline.xyz](https://viaheadline.xyz).

## Connect with others using Headline

Connect here in the [Unlock Discord #headline channel](https://discord.gg/UQPUgfsqYs).

## Screenshots of Headline

### Headline content

![headline-content.png](/images/blog/headline/headline-content.png)

### Headline article

![headline-article.png](/images/blog/headline/headline-article.png)

### Headline memberships

![headline-membershps.png](/images/blog/headline/headline-memberships.png)

## Headline documentation, how-to guides, and FAQs

See all the [Headline docs here](https://docs.viaheadline.xyz/).


Unlock is happy to announce the launch of Headline, bringing publishing and newsletter subscriptions into the Web3 ecosystem.

This is what Web3 publishing looks like

Headline is Publishing and Newsletters Built the Web3 Way

<p><img src="/images/blog/headline/headline-header-bg.png" alt="headline-header-bg.png"></p>
<p>Unlock is happy to announce the launch of Headline, bringing publishing and newsletter subscriptions into the Web3 ecosystem. You can check it out at <a href="https://viaheadline.xyz">https://viaheadline.xyz</a>.</p>
<p>Built by Unlock and <a href="https://www.raidguild.org/">RaidGuild</a>, Headline utilizes technology from <a href="https://ceramic.network/">Ceramic</a>, a decentralized data network bringing unlimited data to Web3 applications and <a href="https://litprotocol.com/">Lit Protocol</a>, a distributed network for encryption to set a new standard for subscription newsletters in Web3.</p>
<p><img src="/images/blog/headline/headline-fullpage.png" alt="headline-fullpage.png"></p>
<p>"Encrypted data and access control on the open and decentralized web lets creators create world class experiences for their fans, without having to rely on any web2 platform as a middle man. The composability of the open web, like how Lit Protocol and Unlock can work together, is in service of creating more value for creators and their fans," said David Sneider, CEO Lit Protocol</p>
<p>"We believe that the most successful Web3 projects are those building bridges across the ecosystem. Ceramic's open, decentralized data network is a natural fit for Headline, and we're excited to see how creators leverage this composable infrastructure to share their content across a multitude of communities and platforms," said Lauren Feld, Head of Business Development at 3Box Labs.</p>
<p>Online publishing platforms have proven time and time again to act with their own self-interest, imposing limitations on creators, such as onerous fees and other business-model decisions that benefit the platform and hinder the creators. A primary means of retaining users on these platforms is by locking members into the platform, rather than allowing creators to control those fan relationships directly. Unlock offers a new alternative for creators trapped inside the walled gardens of these Web2 platforms by enabling creators to directly manage who has access to their content, no matter where it's published.</p>
<p>With Headline, creators directly share their newsletters with readers who hold those creators' membership NFTs. This approach means creators don't need to rely on a third-party publication platform that forces readers to log into that site to access and subscribe to newsletters. Readers will retain the normal experience of having newsletters arrive in their inboxes, but for creators this represents a sea-change that gives them direct control and ownership over their newsletter membership.</p>
<p>Want to try it out? Head over to <a href="https://viaheadline.xyz">https://viaheadline.xyz</a>.</p>
<h2>Connect with others using Headline</h2>
<p>Connect here in the <a href="https://discord.gg/UQPUgfsqYs">Unlock Discord #headline channel</a>.</p>
<h2>Screenshots of Headline</h2>
<h3>Headline content</h3>
<p><img src="/images/blog/headline/headline-content.png" alt="headline-content.png"></p>
<h3>Headline article</h3>
<p><img src="/images/blog/headline/headline-article.png" alt="headline-article.png"></p>
<h3>Headline memberships</h3>
<p><img src="/images/blog/headline/headline-memberships.png" alt="headline-membershps.png"></p>
<h2>Headline documentation, how-to guides, and FAQs</h2>
<p>See all the <a href="https://docs.viaheadline.xyz/">Headline docs here</a>.</p>



![access-nft-header.png](/images/blog/access-nft/access-nft-header.png)

If you're here, you've most likely heard about Non-Fungible Tokens (NFTs). Interest in the NFT space has snowballed over the years, and as the space evolves and more people join the party, it's easy to lose track of the utility an NFT can provide to its holder, aside from being able to buy and sell them. This is where Access NFTs come into the picture.

This article will discuss Access NFTs, their use cases, benefits, and highlight a number of examples of Access NFTs on the Unlock Protocol platform.

## What is an Access NFT?

The value of an NFT can be a function of its utility, which can include the opportunities, perks, or benefits that owning a particular NFT affords. Access NFTs are a quickly growing category in the NFT space.

Access NFTs are NFTs that, as the name implies, give their holders access to specific communities, experiences, and items in the metaverse or in reality.

## What are the use cases for Access NFTs?

Access NFTs have myriad use cases. Let's go over some of them.

- **NFT ticketing for live or virtual events:**  This is one of the most popular use cases for Access NFTs. In this example, the event is set up so that those looking to attend would need to mint an NFT ticket to attend said event. An example of where access NFTs have been used to grant access to an event was [The Buildspace Africa event](https://www.buildspace.africa/) in January. Live attendees were required to mint their tickets before coming, and it was pretty easy to verify authenticity. Another example is [EthCC, which uses Unlock NFTs for its event ticketing](https://twitter.com/EthCC/status/1504867799889592322).
- **NFTs for token-gated access to a community:**  This is another famous use case of access NFTs as NFTs can be the mechanism to provide exclusive access to a community. Some of the most popular NFT projects can boast of having a solid community. NFT holders often have access to a private Discord server or other community area. They also hold community meetups and parties for their members; all these drive up the project's perceived value and make it worth owning.
- **Access to content:** Another use case for Access NFTs is offering the holder access to some form of content. It could be access to written content such as a blog or a book. It could also be access to video or audio content. An example of where access NFTs are being used to offer access to content is [Julien Genestoux's blog](https://www.ouvre-boite.com/membership/). You can purchase a membership on this blog which gives you access to all the content on his blog alongside a few other perks.

## **What are the benefits of Access NFTs?**

Let's go over some of the benefits of Access NFTs and why they matter.

- **Access NFTs are platform agnostic** — The fact that access NFTs can exist on nearly any platform without restriction and are inherently portable is a major benefit of Access NFTs. Creators no longer need to be tied to a particular platform and be beholden to a centralized platform’s business models or seemingly arbitrarily-enforced rules and policies. Similarly, with platform middlemen, creators often give up significant portions of their revenue to the host platform. With Access NFTs, creators can sell NFTs directly to their fans or audience for access to the content they produce however they like.
- **An easier method of value transfer** — Access NFTs provide a more straightforward method of transferring value. For instance, if a member of a community holds an Access NFT but no longer feels the need to own access to a particular privilege granted by that access NFT, the holder can typically resell it to someone else at will.
- **Easier access to a global market** — Access NFTs make it possible for creators to reach a global audience. Traditional subscription payment methods have limitations in getting to certain areas, as providers tend to neglect certain areas due to governmental policies. Access NFTs work on the blockchain and are decentralized, making it easier for people anywhere to access their favorite creators' content.

## Examples of Unlock Protocol Access NFTs

Let's go over a few projects that integrate with Unlock Protocol to create access NFTs.

### Token-gated access to Discord or Telegram using [Guild.xyz](https://guild.xyz/)

Guild.xyz creates [token-gated access](https://unlock-protocol.com/blog/guildxyz-launch) into online communities based on Access NFTs.

Guild is a place for internet communities to come together and form groups to manage these private communities and start working together better. [Guild.xyz](http://guild.xyz/) is a project from [Agora](https://agora.xyz/) which builds essential tools for internet communities.

If you want to join a community that has implemented Guild, you'd need an NFT that signifies you are a fellow member of that community to join.

### Members-only content on the [LIT AF Podcast](https://litafpodcast.com/)

LIT AF is a podcast produced by [David Preston](https://davidpreston.net/). It's all about retelling uncensored versions of classic literary works with plot twists that literary enthusiasts enjoy. The LIT AF podcast uses access NFTs to allow its members to access member-specific content, and in the future will enable NFT-holders to participate in online events and get discounts.

### A real-world community with [The Willow Tree](https://www.twtdao.xyz/nft)

The Willow Tree is a decentralized autonomous organization (community) of likeminded ravers with a shared passion for underground electronic music and high-end event production. Their mission is to collectively own and operate a global network of nightclubs, a decentralized home for underground electronic culture. They use access NFTs to provide members some perks such as free tickets to all events, a private discord channel, etc.

## Conclusion

From what we've discussed in this article, it's apparent that access NFTs are here to stay and not some internet trend that'll fade into non-existence in a few years.

As more communities and creators continue to find different use cases for access NFTs, there's still potential for so much more to be done.

_This blog post is a guest post from Iniubong Obonguko. Iniubong is a frontend web developer & technical writer. You can read his blog [here](https://blog.iniubongobonguko.com/)._


Access NFTs give their holders access to specific communities, experiences, and items in the metaverse or in reality.

Access NFTs give their holders access to specific communities, experiences, and items in the metaverse or in reality

What is an Access NFT?

<p><img src="/images/blog/access-nft/access-nft-header.png" alt="access-nft-header.png"></p>
<p>If you're here, you've most likely heard about Non-Fungible Tokens (NFTs). Interest in the NFT space has snowballed over the years, and as the space evolves and more people join the party, it's easy to lose track of the utility an NFT can provide to its holder, aside from being able to buy and sell them. This is where Access NFTs come into the picture.</p>
<p>This article will discuss Access NFTs, their use cases, benefits, and highlight a number of examples of Access NFTs on the Unlock Protocol platform.</p>
<h2>What is an Access NFT?</h2>
<p>The value of an NFT can be a function of its utility, which can include the opportunities, perks, or benefits that owning a particular NFT affords. Access NFTs are a quickly growing category in the NFT space.</p>
<p>Access NFTs are NFTs that, as the name implies, give their holders access to specific communities, experiences, and items in the metaverse or in reality.</p>
<h2>What are the use cases for Access NFTs?</h2>
<p>Access NFTs have myriad use cases. Let's go over some of them.</p>
<ul>
<li><strong>NFT ticketing for live or virtual events:</strong>  This is one of the most popular use cases for Access NFTs. In this example, the event is set up so that those looking to attend would need to mint an NFT ticket to attend said event. An example of where access NFTs have been used to grant access to an event was <a href="https://www.buildspace.africa/">The Buildspace Africa event</a> in January. Live attendees were required to mint their tickets before coming, and it was pretty easy to verify authenticity. Another example is <a href="https://twitter.com/EthCC/status/1504867799889592322">EthCC, which uses Unlock NFTs for its event ticketing</a>.</li>
<li><strong>NFTs for token-gated access to a community:</strong>  This is another famous use case of access NFTs as NFTs can be the mechanism to provide exclusive access to a community. Some of the most popular NFT projects can boast of having a solid community. NFT holders often have access to a private Discord server or other community area. They also hold community meetups and parties for their members; all these drive up the project's perceived value and make it worth owning.</li>
<li><strong>Access to content:</strong> Another use case for Access NFTs is offering the holder access to some form of content. It could be access to written content such as a blog or a book. It could also be access to video or audio content. An example of where access NFTs are being used to offer access to content is <a href="https://www.ouvre-boite.com/membership/">Julien Genestoux's blog</a>. You can purchase a membership on this blog which gives you access to all the content on his blog alongside a few other perks.</li>
</ul>
<h2><strong>What are the benefits of Access NFTs?</strong></h2>
<p>Let's go over some of the benefits of Access NFTs and why they matter.</p>
<ul>
<li><strong>Access NFTs are platform agnostic</strong> — The fact that access NFTs can exist on nearly any platform without restriction and are inherently portable is a major benefit of Access NFTs. Creators no longer need to be tied to a particular platform and be beholden to a centralized platform’s business models or seemingly arbitrarily-enforced rules and policies. Similarly, with platform middlemen, creators often give up significant portions of their revenue to the host platform. With Access NFTs, creators can sell NFTs directly to their fans or audience for access to the content they produce however they like.</li>
<li><strong>An easier method of value transfer</strong> — Access NFTs provide a more straightforward method of transferring value. For instance, if a member of a community holds an Access NFT but no longer feels the need to own access to a particular privilege granted by that access NFT, the holder can typically resell it to someone else at will.</li>
<li><strong>Easier access to a global market</strong> — Access NFTs make it possible for creators to reach a global audience. Traditional subscription payment methods have limitations in getting to certain areas, as providers tend to neglect certain areas due to governmental policies. Access NFTs work on the blockchain and are decentralized, making it easier for people anywhere to access their favorite creators' content.</li>
</ul>
<h2>Examples of Unlock Protocol Access NFTs</h2>
<p>Let's go over a few projects that integrate with Unlock Protocol to create access NFTs.</p>
<h3>Token-gated access to Discord or Telegram using <a href="https://guild.xyz/">Guild.xyz</a></h3>
<p>Guild.xyz creates <a href="https://unlock-protocol.com/blog/guildxyz-launch">token-gated access</a> into online communities based on Access NFTs.</p>
<p>Guild is a place for internet communities to come together and form groups to manage these private communities and start working together better. <a href="http://guild.xyz/">Guild.xyz</a> is a project from <a href="https://agora.xyz/">Agora</a> which builds essential tools for internet communities.</p>
<p>If you want to join a community that has implemented Guild, you'd need an NFT that signifies you are a fellow member of that community to join.</p>
<h3>Members-only content on the <a href="https://litafpodcast.com/">LIT AF Podcast</a></h3>
<p>LIT AF is a podcast produced by <a href="https://davidpreston.net/">David Preston</a>. It's all about retelling uncensored versions of classic literary works with plot twists that literary enthusiasts enjoy. The LIT AF podcast uses access NFTs to allow its members to access member-specific content, and in the future will enable NFT-holders to participate in online events and get discounts.</p>
<h3>A real-world community with <a href="https://www.twtdao.xyz/nft">The Willow Tree</a></h3>
<p>The Willow Tree is a decentralized autonomous organization (community) of likeminded ravers with a shared passion for underground electronic music and high-end event production. Their mission is to collectively own and operate a global network of nightclubs, a decentralized home for underground electronic culture. They use access NFTs to provide members some perks such as free tickets to all events, a private discord channel, etc.</p>
<h2>Conclusion</h2>
<p>From what we've discussed in this article, it's apparent that access NFTs are here to stay and not some internet trend that'll fade into non-existence in a few years.</p>
<p>As more communities and creators continue to find different use cases for access NFTs, there's still potential for so much more to be done.</p>
<p><em>This blog post is a guest post from Iniubong Obonguko. Iniubong is a frontend web developer &#x26; technical writer. You can read his blog <a href="https://blog.iniubongobonguko.com/">here</a>.</em></p>



![mar-22-banner.jpg](/images/blog/mar-22-update/mar-22-banner.jpg)

## Governance items

- **DAO proposal** - Launched a proposal to modify the Unlock DAO quorum and minimum token requirements (**NOTE**: Do you hold even a single $UDT? If so, [please review and vote on the proposal here!](https://www.tally.xyz/governance/eip155:1:0x7757f7f21F5Fa9b1fd168642B79416051cd0BB94/proposal/91388393958346767282436830202582381357138252819862358258168352110789792788073))

And there are a _huge_ number of March 2022 product updates from Unlock! The team delivered a number of new features this month that include...

## In production

- **Notification toasts in Dashboard** - Added toaster notifications throughout the Unlock interface for communicating status
- **Captcha on checkout flow bot prevention measure** - Deter bots from purchasing NFT tickets in a scripted manner
- **Support for password-protected checkout** - Our checkout flow now supports a “password” flow where a lock manager can set a hook on their contract so that purchasing keys only works if the user enters a password in the checkout flow
- **Support for unlimited duration in Dashboard and Keychain** - Enable lock managers to set unlimited key duration directly from the dashboard
- **Changing number of keys on Dashboard** - Enable lock managers to update maximum keys directly from dashboard
- **Whole new static site** - Completely redesigned [https://www.unlock-protocol.com](https://www.unlock-protocol.com)
- **Skipping metadata collection when all fields are optional** - Enable a purchaser to skip optional metadata collection during checkout
- **Redesigned Keychain** - Redesigned look and feel for the Keychain page, including links to OpenSea for every key
- **Attachment in emails** - You can now set attachments for email being sent on key purchases
- **Customizable recipient on checkout** - It is now possible upon checkout to customize the address of the wallet that will receive the NFT membership, so a purchaser can buy a membership for someone else.
- **Easier checkout flow** - Based on community feedback, we continue to deploy redesigned and improved checkout experiences throughout Unlock

## Coming soon

- **Multiple key ownership in smart contracts** (Coming in April) - Enable wallets to hold more than one key/membership at a time
- **Mimic “Ownable” in smart contracts** (Coming in April) - Enable lock managers to show ownership of locks; aids in situations like OpenSea metadata management
- **Create Lock in specific version** (Coming in April) - Enables a lock manager to choose which version of the lock contract to use

## Developer improvements

- **Refactored unlock-express** - unlock-express now to use Passport (Node.js's most used authentication framework)

Want to know more and try stuff out? [Join the Unlock community in the Discord](https://discord.unlock-protocol.com/)!


Unlock Protocol launched over a dozen new features in March 2022 for NFT ticketing, memberships, and an array of user experience improvements.

Over a dozen new features launched for NFT ticketing, memberships, and an array of user experience improvements

Unlock Protocol Product Updates for March 2022

<p><img src="/images/blog/mar-22-update/mar-22-banner.jpg" alt="mar-22-banner.jpg"></p>
<h2>Governance items</h2>
<ul>
<li><strong>DAO proposal</strong> - Launched a proposal to modify the Unlock DAO quorum and minimum token requirements (<strong>NOTE</strong>: Do you hold even a single $UDT? If so, <a href="https://www.tally.xyz/governance/eip155:1:0x7757f7f21F5Fa9b1fd168642B79416051cd0BB94/proposal/91388393958346767282436830202582381357138252819862358258168352110789792788073">please review and vote on the proposal here!</a>)</li>
</ul>
<p>And there are a <em>huge</em> number of March 2022 product updates from Unlock! The team delivered a number of new features this month that include...</p>
<h2>In production</h2>
<ul>
<li><strong>Notification toasts in Dashboard</strong> - Added toaster notifications throughout the Unlock interface for communicating status</li>
<li><strong>Captcha on checkout flow bot prevention measure</strong> - Deter bots from purchasing NFT tickets in a scripted manner</li>
<li><strong>Support for password-protected checkout</strong> - Our checkout flow now supports a “password” flow where a lock manager can set a hook on their contract so that purchasing keys only works if the user enters a password in the checkout flow</li>
<li><strong>Support for unlimited duration in Dashboard and Keychain</strong> - Enable lock managers to set unlimited key duration directly from the dashboard</li>
<li><strong>Changing number of keys on Dashboard</strong> - Enable lock managers to update maximum keys directly from dashboard</li>
<li><strong>Whole new static site</strong> - Completely redesigned <a href="https://www.unlock-protocol.com">https://www.unlock-protocol.com</a></li>
<li><strong>Skipping metadata collection when all fields are optional</strong> - Enable a purchaser to skip optional metadata collection during checkout</li>
<li><strong>Redesigned Keychain</strong> - Redesigned look and feel for the Keychain page, including links to OpenSea for every key</li>
<li><strong>Attachment in emails</strong> - You can now set attachments for email being sent on key purchases</li>
<li><strong>Customizable recipient on checkout</strong> - It is now possible upon checkout to customize the address of the wallet that will receive the NFT membership, so a purchaser can buy a membership for someone else.</li>
<li><strong>Easier checkout flow</strong> - Based on community feedback, we continue to deploy redesigned and improved checkout experiences throughout Unlock</li>
</ul>
<h2>Coming soon</h2>
<ul>
<li><strong>Multiple key ownership in smart contracts</strong> (Coming in April) - Enable wallets to hold more than one key/membership at a time</li>
<li><strong>Mimic “Ownable” in smart contracts</strong> (Coming in April) - Enable lock managers to show ownership of locks; aids in situations like OpenSea metadata management</li>
<li><strong>Create Lock in specific version</strong> (Coming in April) - Enables a lock manager to choose which version of the lock contract to use</li>
</ul>
<h2>Developer improvements</h2>
<ul>
<li><strong>Refactored unlock-express</strong> - unlock-express now to use Passport (Node.js's most used authentication framework)</li>
</ul>
<p>Want to know more and try stuff out? <a href="https://discord.unlock-protocol.com/">Join the Unlock community in the Discord</a>!</p>



As of March 2022, our smart contracts have been audited by 3 different teams: [Code4rena](https://code4rena.com/), [ByteRocket](https://byterocket.com/) and Akira Tech.

We are pleased with the results of these audits as they have identified **no issue that would jeopardize creators or members' funds in a systemic way**. The audits did identify improvements that we have (or will) implement to simplify flows, make risky behaviors less error-prone as well as reduce gas consumption.

This step is an important one, and while we're working on more improvements and upgrades to the core protocol, we will get more audits in the future.

It also builds our confidence that we can move ownership of our contracts to the DAO, which we'll also work on the next few weeks.

You can download the reports as well as see a summary [in our docs website](https://docs.unlock-protocol.com/core-protocol/audits)!


As we're scaling adoption, we have performed our first independent audits.

We received our first 3 audits

Audits

<p>As of March 2022, our smart contracts have been audited by 3 different teams: <a href="https://code4rena.com/">Code4rena</a>, <a href="https://byterocket.com/">ByteRocket</a> and Akira Tech.</p>
<p>We are pleased with the results of these audits as they have identified <strong>no issue that would jeopardize creators or members' funds in a systemic way</strong>. The audits did identify improvements that we have (or will) implement to simplify flows, make risky behaviors less error-prone as well as reduce gas consumption.</p>
<p>This step is an important one, and while we're working on more improvements and upgrades to the core protocol, we will get more audits in the future.</p>
<p>It also builds our confidence that we can move ownership of our contracts to the DAO, which we'll also work on the next few weeks.</p>
<p>You can download the reports as well as see a summary <a href="https://docs.unlock-protocol.com/core-protocol/audits">in our docs website</a>!</p>



Earlier this month, we showed you [how to token-gate a Discord server](/blog/guildxyz-launch) using Unlock and Guild.xyz.

Today, we'll show you how to token-gate a Telegram chat with Unlock as well.

Before jumping into Guild and Telegram, make sure you have [set up a lock from the Unlock dashboard](https://unlock-protocol.com/guides/how-to-create-a-lock/). Remember the name of your lock.

Now, create a guild on [Guild.xyz](https://guild.xyz/). Connect your wallet, name your guild, give it a description, and select `Telegram`.

![guilda-png](/images/blog/guildxyz-telegram/guilda.png)

Now, open Telegram and start a new chat.

First, add the Guild bot (@guildxyz_bot) to your Telegram chat.

Then, in Telegram, configure the settings to allow the Guild bot to manage the chat.

Adjust the chat settings (set to Public, add a name, click "Done," then set the chat back to Private and click "Done").

![guild-1-gif](/images/blog/guildxyz-telegram/guild1.gif)

Set the Guild bot as an admin on the chat.

![guild-2-gif](/images/blog/guildxyz-telegram/guild2.gif)

After you've done the above, there will be a chat ID in the Telegram chat. (It'll look something like `-12345678`.) Copy the chat ID, hop back over the Guild.xyz site, paste the chat ID into the box, and save.

![guild-3-jpg](/images/blog/guildxyz-telegram/guild3.jpg)

Ok! The Telegram side is in good shape now.

Head back over to the Guild.xyz site, and set up the token gate using an Unlock lock.

![guild-screenshot-gif](/images/blog/guildxyz-launch/unlock-protocol-guildxyz.gif)

Save your updates, and you should be all set!

To invite someone to the token-gated chat, direct them to the Guild site for your guild. When someone attempts to join, Guild will manage the process and, if the visitor has the correct Unlock key in their wallet, Guild will link the new member over to the Telegram chat for you, seamlessly.

![telegram-with-correct-key.png](/images/blog/guildxyz-telegram/telegram-with-correct-key.png)

![telegram-link-to-chat.png](/images/blog/guildxyz-telegram/telegram-link-to-chat.png)

That's it! You now have a token-gated Telegram chat.

**Related:** Guild's Reka and Raz joined the Unlock Developer Meetup earlier this month and shared more thoughts!

<div style="position: relative; overflow: hidden; width: 100%; padding-top: 56.25%;"><iframe style="position: absolute; top: 0; left: 0; bottom: 0; right: 0; width: 100%; height: 100%;" src="https://www.youtube.com/embed/X5DKS48rDBE" title="Unlock Protocol and Guild.xyz Integration" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div>


Here's how to token-gate a Telegram chat with Unlock Protocol and Guild.xyz in minutes.

How to token-gate Telegram in minutes

Token-gating Telegram with Unlock Protocol and Guild.xyz!

<p>Earlier this month, we showed you <a href="/blog/guildxyz-launch">how to token-gate a Discord server</a> using Unlock and Guild.xyz.</p>
<p>Today, we'll show you how to token-gate a Telegram chat with Unlock as well.</p>
<p>Before jumping into Guild and Telegram, make sure you have <a href="https://unlock-protocol.com/guides/how-to-create-a-lock/">set up a lock from the Unlock dashboard</a>. Remember the name of your lock.</p>
<p>Now, create a guild on <a href="https://guild.xyz/">Guild.xyz</a>. Connect your wallet, name your guild, give it a description, and select <code>Telegram</code>.</p>
<p><img src="/images/blog/guildxyz-telegram/guilda.png" alt="guilda-png"></p>
<p>Now, open Telegram and start a new chat.</p>
<p>First, add the Guild bot (@guildxyz_bot) to your Telegram chat.</p>
<p>Then, in Telegram, configure the settings to allow the Guild bot to manage the chat.</p>
<p>Adjust the chat settings (set to Public, add a name, click "Done," then set the chat back to Private and click "Done").</p>
<p><img src="/images/blog/guildxyz-telegram/guild1.gif" alt="guild-1-gif"></p>
<p>Set the Guild bot as an admin on the chat.</p>
<p><img src="/images/blog/guildxyz-telegram/guild2.gif" alt="guild-2-gif"></p>
<p>After you've done the above, there will be a chat ID in the Telegram chat. (It'll look something like <code>-12345678</code>.) Copy the chat ID, hop back over the Guild.xyz site, paste the chat ID into the box, and save.</p>
<p><img src="/images/blog/guildxyz-telegram/guild3.jpg" alt="guild-3-jpg"></p>
<p>Ok! The Telegram side is in good shape now.</p>
<p>Head back over to the Guild.xyz site, and set up the token gate using an Unlock lock.</p>
<p><img src="/images/blog/guildxyz-launch/unlock-protocol-guildxyz.gif" alt="guild-screenshot-gif"></p>
<p>Save your updates, and you should be all set!</p>
<p>To invite someone to the token-gated chat, direct them to the Guild site for your guild. When someone attempts to join, Guild will manage the process and, if the visitor has the correct Unlock key in their wallet, Guild will link the new member over to the Telegram chat for you, seamlessly.</p>
<p><img src="/images/blog/guildxyz-telegram/telegram-with-correct-key.png" alt="telegram-with-correct-key.png"></p>
<p><img src="/images/blog/guildxyz-telegram/telegram-link-to-chat.png" alt="telegram-link-to-chat.png"></p>
<p>That's it! You now have a token-gated Telegram chat.</p>
<p><strong>Related:</strong> Guild's Reka and Raz joined the Unlock Developer Meetup earlier this month and shared more thoughts!</p>
<div style="position: relative; overflow: hidden; width: 100%; padding-top: 56.25%;"><iframe style="position: absolute; top: 0; left: 0; bottom: 0; right: 0; width: 100%; height: 100%;" src="https://www.youtube.com/embed/X5DKS48rDBE" title="Unlock Protocol and Guild.xyz Integration" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div>



![siwe-header.png](/images/blog/siwe-blog/siwe-header.png)

## What is Sign-In with Ethereum?

In simple terms, Sign-In with Ethereum is a new standard form of authentication that enables end-users to access resources on the internet using their Ethereum account instead of relying on traditional authentication providers such as Google, Facebook, and the like.

According to the [EIP-4361 standard](https://eips.ethereum.org/EIPS/eip-4361), the Sign-In with Ethereum specification "describes how Ethereum accounts authenticate with off-chain services by signing a standard message format parameterized by scope, session details, and security mechanisms (e.g., a nonce). The goals of this specification are to provide a self-custody alternative to centralized identity providers, improve interoperability across off-chain services for Ethereum-based authentication, and provide wallet vendors a consistent machine-readable message format to achieve improved user experiences and consent management."

## Why does Sign-In with Ethereum matter?

Historically, websites, web applications, and mobile apps not built with blockchain technology relied on centralized identity providers with centralized control over users' information. In most cases, these centralized identity providers were the only existing authentication infrastructure and were convenient to end users.

For example, Google provides you with an email address to send emails and sign up for services on the internet. In return, you agree to provide them with data they can use to tweak their algorithms to track you, serve you ads and [subconsciously influence your decisions](https://knowledge.wharton.upenn.edu/article/algorithms-decision-making/). Google, Facebook, and others similarly provide identity services "for free," in exchange for keeping their users reliant on their silos.

A key question needs to be raised. What then happens to user data in the event of a data breach at one of these centralized services with millions of customers? Or what happens if a user simply wants to cut the cord with one of these centralized entities?

Enter "Sign-In with Ethereum."

The new Sign-In with Ethereum standard eliminates uncertainties about who has access to your private information, your digital footprint, and so on. Since the blockchain powers it, the Sign-In with Ethereum standard by default was designed with decentralization in mind.

## How is Sign-In with Ethereum different from current approaches?

The Sign-In with Ethereum authentication method differs from current centralized approaches because it is based on a new self-custodial option for internet users who wish to assume more control and responsibility for their own digital identity. (“Self-custody” means that you and only you have possession of your digital assets and only you control the private key. This also comes with a great deal of responsibility — you are responsible for safeguarding access to your private key because it is not stored anywhere else.)

Already, many services support workflows to authenticate identity using Ethereum accounts by way of message signing. With Sign-In with Ethereum, there is an opportunity to standardize the sign-in flow and improve interoperability across existing services while also providing wallet vendors a reliable method to identify signing requests.

## How to integrate with Unlock

Sign-In with Ethereum is the future of user authentication for the ".eth" era, and an increasing number of blockchain-tech companies have implemented their versions of the EIP-4361 standard, including Unlock Protocol.

Unlock Protocol recently announced their implementation of the EIP-4361 standard by updating [their documentation](https://docs.unlock-protocol.com/unlock/developers/sign-in-with-ethereum) and in [this blog post](https://unlock-protocol.com/blog/sign-in-with-ethereum) by its founder Julien Genestoux.

Until now, the act of prompting users for their wallet address to authenticate them was quite an arduous development process as there are many wallet providers; asking users to connect their wallets to your application requires the implementation of multiple APIs and approaches.

Unlock offers an easier way to implement the Sign-In with Ethereum authentication method with a few lines of code.

Unlock has created a flow similar to the popular OAuth flow that users are familiar with. When the user has signed the message, they get redirected to the application. The redirect URL contains a code that the developer can decode to retrieve the user's information. If the user also does not have a wallet address, they can sign up using Unlock.

Unlock does all the heavy-lifting, so developers can focus on building what matters.

Here’s how you can implement Sign-in with Ethereum into your application.

![iniubong-final.gif](/images/blog/siwe-blog/iniubong-final.gif)

We'll use Vue.Js for this demo and Tailwind for styling, but the concepts explained here can be replicated in any other framework.

> 💡 Editor's note: Please practice good code hygiene on any code or links you access on any website, including this one. Code samples referenced here may have changed after publication of this blog post, so please review them carefully before copying or implementing.

You can find all the code for this demo in the CodeSandbox below. Feel free to fork and tweak the code as you wish.
[https://codesandbox.io/embed/smoosh-dream-urw2qt?fontsize=14&hidenavigation=1&theme=dark](https://codesandbox.io/embed/smoosh-dream-urw2qt?fontsize=14&hidenavigation=1&theme=dark)

To get started, we need to create a Sign-In link with our application's URL as such:

```
https://app.unlock-protocol.com/checkout?client_id=urw2qt.csb.app&redirect_uri=https://urw2qt.csb.app
```

Just replace `urw2qt.csb.app` with your URL. Here, I'm using the link to the app generated by [CodeSandbox](https://urw2qt.csb.app).

For this to work, both `client_id` and `redirect_uri` are required fields, and the `client_id` field must match the host part of the `redirect_uri` for security reasons.

When the user clicks on the Sign-In link from our application, they get prompted to connect their wallet through whichever means they prefer. Once successfully connected, they will also be redirected to the application, this time with an extra query parameter. The value of this parameter is base64 encoded and can be decoded by your application to retrieve the signature message and the signed message. Using these two values, you can retrieve the address of the signer.

If the user refuses to connect and sign a message in their wallet, they get redirected back to the `redirect_uri`, and a new query string parameter is attached `?error=access-denied`.

## Too easy, right? That's the power of Unlock.

For more information on implementing Sign-In with Ethereum, visit the [official documentation](https://docs.unlock-protocol.com/unlock/developers/sign-in-with-ethereum).

_This blog post is a guest post from Iniubong Obonguko. Iniubong is a frontend web developer & technical writer. You can read his blog [here](https://blog.iniubongobonguko.com/)._


Sign-In with Ethereum is a new standard form of authentication that enables end-users to access resources on the internet using their Ethereum account.

Sign-In with Ethereum is a new standard form of authentication

What is Sign-In with Ethereum?

<p><img src="/images/blog/siwe-blog/siwe-header.png" alt="siwe-header.png"></p>
<h2>What is Sign-In with Ethereum?</h2>
<p>In simple terms, Sign-In with Ethereum is a new standard form of authentication that enables end-users to access resources on the internet using their Ethereum account instead of relying on traditional authentication providers such as Google, Facebook, and the like.</p>
<p>According to the <a href="https://eips.ethereum.org/EIPS/eip-4361">EIP-4361 standard</a>, the Sign-In with Ethereum specification "describes how Ethereum accounts authenticate with off-chain services by signing a standard message format parameterized by scope, session details, and security mechanisms (e.g., a nonce). The goals of this specification are to provide a self-custody alternative to centralized identity providers, improve interoperability across off-chain services for Ethereum-based authentication, and provide wallet vendors a consistent machine-readable message format to achieve improved user experiences and consent management."</p>
<h2>Why does Sign-In with Ethereum matter?</h2>
<p>Historically, websites, web applications, and mobile apps not built with blockchain technology relied on centralized identity providers with centralized control over users' information. In most cases, these centralized identity providers were the only existing authentication infrastructure and were convenient to end users.</p>
<p>For example, Google provides you with an email address to send emails and sign up for services on the internet. In return, you agree to provide them with data they can use to tweak their algorithms to track you, serve you ads and <a href="https://knowledge.wharton.upenn.edu/article/algorithms-decision-making/">subconsciously influence your decisions</a>. Google, Facebook, and others similarly provide identity services "for free," in exchange for keeping their users reliant on their silos.</p>
<p>A key question needs to be raised. What then happens to user data in the event of a data breach at one of these centralized services with millions of customers? Or what happens if a user simply wants to cut the cord with one of these centralized entities?</p>
<p>Enter "Sign-In with Ethereum."</p>
<p>The new Sign-In with Ethereum standard eliminates uncertainties about who has access to your private information, your digital footprint, and so on. Since the blockchain powers it, the Sign-In with Ethereum standard by default was designed with decentralization in mind.</p>
<h2>How is Sign-In with Ethereum different from current approaches?</h2>
<p>The Sign-In with Ethereum authentication method differs from current centralized approaches because it is based on a new self-custodial option for internet users who wish to assume more control and responsibility for their own digital identity. (“Self-custody” means that you and only you have possession of your digital assets and only you control the private key. This also comes with a great deal of responsibility — you are responsible for safeguarding access to your private key because it is not stored anywhere else.)</p>
<p>Already, many services support workflows to authenticate identity using Ethereum accounts by way of message signing. With Sign-In with Ethereum, there is an opportunity to standardize the sign-in flow and improve interoperability across existing services while also providing wallet vendors a reliable method to identify signing requests.</p>
<h2>How to integrate with Unlock</h2>
<p>Sign-In with Ethereum is the future of user authentication for the ".eth" era, and an increasing number of blockchain-tech companies have implemented their versions of the EIP-4361 standard, including Unlock Protocol.</p>
<p>Unlock Protocol recently announced their implementation of the EIP-4361 standard by updating <a href="https://docs.unlock-protocol.com/unlock/developers/sign-in-with-ethereum">their documentation</a> and in <a href="https://unlock-protocol.com/blog/sign-in-with-ethereum">this blog post</a> by its founder Julien Genestoux.</p>
<p>Until now, the act of prompting users for their wallet address to authenticate them was quite an arduous development process as there are many wallet providers; asking users to connect their wallets to your application requires the implementation of multiple APIs and approaches.</p>
<p>Unlock offers an easier way to implement the Sign-In with Ethereum authentication method with a few lines of code.</p>
<p>Unlock has created a flow similar to the popular OAuth flow that users are familiar with. When the user has signed the message, they get redirected to the application. The redirect URL contains a code that the developer can decode to retrieve the user's information. If the user also does not have a wallet address, they can sign up using Unlock.</p>
<p>Unlock does all the heavy-lifting, so developers can focus on building what matters.</p>
<p>Here’s how you can implement Sign-in with Ethereum into your application.</p>
<p><img src="/images/blog/siwe-blog/iniubong-final.gif" alt="iniubong-final.gif"></p>
<p>We'll use Vue.Js for this demo and Tailwind for styling, but the concepts explained here can be replicated in any other framework.</p>
<blockquote>
<p>💡 Editor's note: Please practice good code hygiene on any code or links you access on any website, including this one. Code samples referenced here may have changed after publication of this blog post, so please review them carefully before copying or implementing.</p>
</blockquote>
<p>You can find all the code for this demo in the CodeSandbox below. Feel free to fork and tweak the code as you wish.
<a href="https://codesandbox.io/embed/smoosh-dream-urw2qt?fontsize=14&#x26;hidenavigation=1&#x26;theme=dark">https://codesandbox.io/embed/smoosh-dream-urw2qt?fontsize=14&#x26;hidenavigation=1&#x26;theme=dark</a></p>
<p>To get started, we need to create a Sign-In link with our application's URL as such:</p>
<pre><code>https://app.unlock-protocol.com/checkout?client_id=urw2qt.csb.app&#x26;redirect_uri=https://urw2qt.csb.app
</code></pre>
<p>Just replace <code>urw2qt.csb.app</code> with your URL. Here, I'm using the link to the app generated by <a href="https://urw2qt.csb.app">CodeSandbox</a>.</p>
<p>For this to work, both <code>client_id</code> and <code>redirect_uri</code> are required fields, and the <code>client_id</code> field must match the host part of the <code>redirect_uri</code> for security reasons.</p>
<p>When the user clicks on the Sign-In link from our application, they get prompted to connect their wallet through whichever means they prefer. Once successfully connected, they will also be redirected to the application, this time with an extra query parameter. The value of this parameter is base64 encoded and can be decoded by your application to retrieve the signature message and the signed message. Using these two values, you can retrieve the address of the signer.</p>
<p>If the user refuses to connect and sign a message in their wallet, they get redirected back to the <code>redirect_uri</code>, and a new query string parameter is attached <code>?error=access-denied</code>.</p>
<h2>Too easy, right? That's the power of Unlock.</h2>
<p>For more information on implementing Sign-In with Ethereum, visit the <a href="https://docs.unlock-protocol.com/unlock/developers/sign-in-with-ethereum">official documentation</a>.</p>
<p><em>This blog post is a guest post from Iniubong Obonguko. Iniubong is a frontend web developer &#x26; technical writer. You can read his blog <a href="https://blog.iniubongobonguko.com/">here</a>.</em></p>



![unfurl.png](/images/blog/unfurl/unfurl.png)

_Unfurl Connect is a grantee of the Unlock Protocol Grant Program. Unlock's Grant program provides grants to developers around the world creating solutions using Unlock Protocol. Learn more about the Unlock Protocol Grant Program at [https://unlock-protocol.com/grants](https://unlock-protocol.com/grants)._

## What is Unfurl Connect?

Unfurl Connect is a lock-aware identity provider – think “Connect with Google”, but with locks. It is fully Open ID Connect compliant so it works with virtually everything. Unfurl Connect was built by David Layton and was funded by the Unlock Protocol Grants Program.

## How does Unfurl Connect work?

Security roles are assigned/provided by querying the Unlock subgraphs on the backend with the relevant keys in the user's link wallet addresses and mapping the corresponding locks via the client's (lock manager) supplied lock-to-role mapping.

## What are the benefits of Unfurl Connect?

With Unfurl Connect, any app can go from no payment system, no login, and no user management to the gold standard for web security with 20-60 minutes of effort using Unlock and Unfurl. This should halve the development time for most SaaS-style MVPs using Unlock.

Additionally the added convenience, credibility/quality, and eventual network effect of this uniform experience across crypto-paid applications should drive adoption for Unlock but the penetration of crypto in general.

<div style="position: relative; overflow: hidden; width: 100%; padding-top: 56.25%;"><iframe style="position: absolute; top: 0; left: 0; bottom: 0; right: 0; width: 100%; height: 100%;" src="https://www.youtube.com/embed/bGV-W9i9GWM" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div>

## Unfurl resources

- **Website:** [https://unfurl-connect.com](https://unfurl-connect.com)
- **Source code:** [https://github.com/Unfurl-Connect](https://github.com/Unfurl-Connect)
- **Creator profile:** [https://www.linkedin.com/in/david-matthew-layton](https://www.linkedin.com/in/david-matthew-layton)
- **Dev languages:** Javascript, TypeScript


Unfurl Connect is a lock-aware identity provider – think “Connect with Google”, but with locks. It is fully Open ID Connect compliant so it works with virtually everything. Unfurl Connect was built by David Layton and was funded by the Unlock Protocol Grants Program.

An Open ID Connect compliant identity solution created with Unlock Protocol NFTs

Unfurl Connect | Unlock Grantee Spotlight

<p><img src="/images/blog/unfurl/unfurl.png" alt="unfurl.png"></p>
<p><em>Unfurl Connect is a grantee of the Unlock Protocol Grant Program. Unlock's Grant program provides grants to developers around the world creating solutions using Unlock Protocol. Learn more about the Unlock Protocol Grant Program at <a href="https://unlock-protocol.com/grants">https://unlock-protocol.com/grants</a>.</em></p>
<h2>What is Unfurl Connect?</h2>
<p>Unfurl Connect is a lock-aware identity provider – think “Connect with Google”, but with locks. It is fully Open ID Connect compliant so it works with virtually everything. Unfurl Connect was built by David Layton and was funded by the Unlock Protocol Grants Program.</p>
<h2>How does Unfurl Connect work?</h2>
<p>Security roles are assigned/provided by querying the Unlock subgraphs on the backend with the relevant keys in the user's link wallet addresses and mapping the corresponding locks via the client's (lock manager) supplied lock-to-role mapping.</p>
<h2>What are the benefits of Unfurl Connect?</h2>
<p>With Unfurl Connect, any app can go from no payment system, no login, and no user management to the gold standard for web security with 20-60 minutes of effort using Unlock and Unfurl. This should halve the development time for most SaaS-style MVPs using Unlock.</p>
<p>Additionally the added convenience, credibility/quality, and eventual network effect of this uniform experience across crypto-paid applications should drive adoption for Unlock but the penetration of crypto in general.</p>
<div style="position: relative; overflow: hidden; width: 100%; padding-top: 56.25%;"><iframe style="position: absolute; top: 0; left: 0; bottom: 0; right: 0; width: 100%; height: 100%;" src="https://www.youtube.com/embed/bGV-W9i9GWM" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div>
<h2>Unfurl resources</h2>
<ul>
<li><strong>Website:</strong> <a href="https://unfurl-connect.com">https://unfurl-connect.com</a></li>
<li><strong>Source code:</strong> <a href="https://github.com/Unfurl-Connect">https://github.com/Unfurl-Connect</a></li>
<li><strong>Creator profile:</strong> <a href="https://www.linkedin.com/in/david-matthew-layton">https://www.linkedin.com/in/david-matthew-layton</a></li>
<li><strong>Dev languages:</strong> Javascript, TypeScript</li>
</ul>
