Added comments to insecure, recommended, and secure owner-check programs

programs/2-owner-checks/insecure/src/lib.rs

@@ -10,17 +10,24 @@ pub mod owner_checks_insecure {
     use super::*;
 
     pub fn log_message(ctx: Context<LogMessage>) -> ProgramResult {
+        // Unpack the token account data from the AccountInfo
         let token = SplTokenAccount::unpack(&ctx.accounts.token.data.borrow())?;
+
+        // Check if the authority matches the token owner
         if ctx.accounts.authority.key != &token.owner {
             return Err(ProgramError::InvalidAccountData);
         }
+
+        // Log the token amount
         msg!("Your account balance is: {}", token.amount);
         Ok(())
     }
 }
 
 #[derive(Accounts)]
 pub struct LogMessage<'info> {
+    // Token account information
     token: AccountInfo<'info>,
+    // Authority that must sign the transaction
     authority: Signer<'info>,
 }

programs/2-owner-checks/recommended/src/lib.rs

@@ -8,14 +8,17 @@ pub mod owner_checks_recommended {
     use super::*;
 
     pub fn log_message(ctx: Context<LogMessage>) -> ProgramResult {
+        // Log the token amount directly from the TokenAccount
         msg!("Your account balance is: {}", ctx.accounts.token.amount);
         Ok(())
     }
 }
 
 #[derive(Accounts)]
 pub struct LogMessage<'info> {
+    // Token account information with a constraint to ensure the authority is the owner
     #[account(constraint = authority.key == &token.owner)]
     token: Account<'info, TokenAccount>,
+    // Authority that must sign the transaction
     authority: Signer<'info>,
 }

programs/2-owner-checks/secure/src/lib.rs

@@ -10,20 +10,29 @@ pub mod owner_checks_secure {
     use super::*;
 
     pub fn log_message(ctx: Context<LogMessage>) -> ProgramResult {
+        // Unpack the token account data from the AccountInfo
         let token = SplTokenAccount::unpack(&ctx.accounts.token.data.borrow())?;
+
+        // Ensure the token account is actually an SPL Token account
         if ctx.accounts.token.owner != &spl_token::ID {
             return Err(ProgramError::InvalidAccountData);
         }
+
+        // Check if the authority matches the token owner
         if ctx.accounts.authority.key != &token.owner {
             return Err(ProgramError::InvalidAccountData);
         }
+
+        // Log the token amount
         msg!("Your account balance is: {}", token.amount);
         Ok(())
     }
 }
 
 #[derive(Accounts)]
 pub struct LogMessage<'info> {
+    // Token account information
     token: AccountInfo<'info>,
+    // Authority that must sign the transaction
     authority: Signer<'info>,
 }