The good: managed to verify @keychain requestSignBuffer with a self written php class. Now I can process keychain logins without redirecting the request to a node server

The bad: though I had AI to help me, I can't shake the feeling of wanting to wash my eyes with acid