@ -1,19 +1,14 @@
import {
Axios ,
AxiosRequestConfig ,
AxiosResponse ,
RawAxiosRequestHeaders ,
} from "axios" ;
import { Axios , AxiosRequestConfig , AxiosResponse } from "axios" ;
import * as didJwt from "did-jwt" ;
import { LRUCache } from "lru-cache" ;
import * as R from "ramda" ;
import { IIdentifier } from "@veramo/core" ;
import { DEFAULT_IMAGE_API_SERVER } from "@/constants/app" ;
import { Contact } from "@/db/tables/contacts" ;
import { accessToken , SimpleSigner } from "@/libs/crypto" ;
import { NonsensitiveDexie } from "@/db/index" ;
import { getIdentity } from "@/libs/util" ;
import { createDidPeerJwt } from "@/libs/didPeer" ;
import { getAccount , getIdentity } from "@/libs/util" ;
export const SCHEMA_ORG_CONTEXT = "https://schema.org" ;
// the object in RegisterAction claims
@ -160,7 +155,7 @@ export interface OfferVerifiableCredential {
// Note that previous VCs may have additional fields.
// https://endorser.ch/doc/html/transactions.html#id7
export interface PlanVerifiableCredential {
"@context" : SCHEMA_ORG_CONTEXT ;
"@context" : "https://schema.org" ;
"@type" : "PlanAction" ;
name : string ;
agent ? : { identifier : string } ;
@ -453,28 +448,30 @@ export function didInfo(
return didInfoForContact ( did , activeDid , contact , allMyDids ) . displayName ;
}
async function getHeaders ( identity : IIdentifier | null ) {
const headers : RawAxiosRequestHeaders = {
export async function getHeaders ( did? : string ) {
const headers : { "Content-Type" : string ; Authorization? : string } = {
"Content-Type" : "application/json" ,
} ;
if ( identity ) {
const token = await accessToken ( identity ) ;
if ( d id) {
const token = await accessToken ( d id) ;
headers [ "Authorization" ] = "Bearer " + token ;
} else {
// it's often OK to request without auth; we assume necessary checks are done earlier
}
return headers ;
}
/ * *
* @param handleId nullable , in which case "undefined" will be returned
* @param identity nullable , in which case no private info will be returned
* @param requesterDid optional , in which case no private info will be returned
* @param axios
* @param apiServer
* /
export async function getPlanFromCache (
handleId : string | null ,
identity : IIdentifier | null ,
axios : Axios ,
apiServer : string ,
requesterDid? : string ,
) : Promise < PlanSummaryRecord | undefined > {
if ( ! handleId ) {
return undefined ;
@ -485,7 +482,7 @@ export async function getPlanFromCache(
apiServer +
"/api/v2/report/plans?handleId=" +
encodeURIComponent ( handleId ) ;
const headers = await getHeaders ( identity ) ;
const headers = await getHeaders ( requesterDid ) ;
try {
const resp = await axios . get ( url , { headers } ) ;
if ( resp . status === 200 && resp . data ? . data ? . length > 0 ) {
@ -518,6 +515,9 @@ export async function setPlanInCache(
planCache . set ( handleId , planSummary ) ;
}
/ * *
* Construct GiveAction VC for submission to server
* /
export function constructGive (
fromDid? : string | null ,
toDid? : string ,
@ -572,7 +572,7 @@ export function constructGive(
export async function createAndSubmitGive (
axios : Axios ,
apiServer : string ,
identity : IIdentifier ,
issuerDid : string ,
fromDid? : string | null ,
toDid? : string ,
description? : string ,
@ -596,7 +596,7 @@ export async function createAndSubmitGive(
) ;
return createAndSubmitClaim (
vcClaim as GenericCredWrapper ,
identity ,
issuerDid ,
apiServer ,
axios ,
) ;
@ -614,7 +614,7 @@ export async function createAndSubmitGive(
export async function createAndSubmitOffer (
axios : Axios ,
apiServer : string ,
identity : IIdentifier ,
issuerDid : string ,
description? : string ,
amount? : number ,
unitCode? : string ,
@ -625,7 +625,7 @@ export async function createAndSubmitOffer(
const vcClaim : OfferVerifiableCredential = {
"@context" : SCHEMA_ORG_CONTEXT ,
"@type" : "Offer" ,
offeredBy : { identifier : identity.d id } ,
offeredBy : { identifier : issuerD id } ,
validThrough : expirationDate || undefined ,
} ;
if ( amount ) {
@ -649,7 +649,7 @@ export async function createAndSubmitOffer(
}
return createAndSubmitClaim (
vcClaim as GenericCredWrapper ,
identity ,
issuerDid ,
apiServer ,
axios ,
) ;
@ -657,7 +657,7 @@ export async function createAndSubmitOffer(
// similar logic is found in endorser-mobile
export const createAndSubmitConfirmation = async (
identifier : IIdentifier ,
issuerDid : string ,
claim : GenericVerifiableCredential ,
lastClaimId : string , // used to set the lastClaimId
handleId : string | undefined ,
@ -674,12 +674,12 @@ export const createAndSubmitConfirmation = async (
"@type" : "AgreeAction" ,
object : goodClaim ,
} ;
return createAndSubmitClaim ( confirmationClaim , identifier , apiServer , axios ) ;
return createAndSubmitClaim ( confirmationClaim , issuerDid , apiServer , axios ) ;
} ;
export async function createAndSubmitClaim (
vcClaim : GenericVerifiableCredential ,
identity : IIdentifier ,
issuerDid : string ,
apiServer : string ,
axios : Axios ,
) : Promise < CreateAndSubmitClaimResult > {
@ -692,34 +692,15 @@ export async function createAndSubmitClaim(
} ,
} ;
// Create a signature using private key of identity
const firstKey = identity . keys [ 0 ] ;
const privateKeyHex = firstKey ? . privateKeyHex ;
if ( ! privateKeyHex ) {
throw {
error : "No private key" ,
message : ` Your identifier ${ identity . did } is not configured correctly. Use a different identifier. ` ,
} ;
}
const signer = await SimpleSigner ( privateKeyHex ) ;
// Create a JWT for the request
const vcJwt : string = await didJwt . createJWT ( vcPayload , {
issuer : identity.did ,
signer ,
} ) ;
const vcJwt : string = await createEndorserJwt ( issuerDid , vcPayload ) ;
// Make the xhr request payload
const payload = JSON . stringify ( { jwtEncoded : vcJwt } ) ;
const url = ` ${ apiServer } /api/v2/claim ` ;
const token = await accessToken ( identity ) ;
const response = await axios . post ( url , payload , {
headers : {
"Content-Type" : "application/json" ,
Authorization : ` Bearer ${ token } ` ,
} ,
} ) ;
@ -944,18 +925,49 @@ export const bvcMeetingJoinClaim = (did: string, startTime: string) => {
} ;
} ;
export async function createEndorserJwtVcFromClaim (
issuerDid : string ,
claim : object ,
) {
// Make a payload for the claim
const vcPayload = {
vc : {
"@context" : [ "https://www.w3.org/2018/credentials/v1" ] ,
type : [ "VerifiableCredential" ] ,
credentialSubject : claim ,
} ,
} ;
return createEndorserJwt ( issuerDid , vcPayload ) ;
}
export async function createEndorserJwt ( issuerDid : string , payload : object ) {
const account = await getAccount ( issuerDid ) ;
if ( account ? . identity ) {
// eslint-disable-next-line @typescript-eslint/no-non-null-assertion
const identity = JSON . parse ( account . identity ! ) ;
const privateKeyHex = identity . keys [ 0 ] . privateKeyHex ;
const signer = await SimpleSigner ( privateKeyHex ) ;
return didJwt . createJWT ( payload , {
issuer : issuerDid ,
signer : signer ,
} ) ;
} else if ( account ? . passkeyCredIdHex ) {
return createDidPeerJwt ( issuerDid , account . passkeyCredIdHex , payload ) ;
} else {
throw new Error ( "No identity data found to sign for DID " + issuerDid ) ;
}
}
export async function register (
activeDid : string ,
apiServer : string ,
axios : Axios ,
contact : Contact ,
) {
const identity = await getIdentity ( activeDid ) ;
const vcClaim : RegisterVerifiableCredential = {
"@context" : SCHEMA_ORG_CONTEXT ,
"@type" : "RegisterAction" ,
agent : { identifier : identity.did } ,
agent : { identifier : activeD id} ,
object : SERVICE_ID ,
participant : { identifier : contact.did } ,
} ;
@ -968,26 +980,10 @@ export async function register(
} ,
} ;
// Create a signature using private key of identity
if ( identity . keys [ 0 ] . privateKeyHex == null ) {
return { error : "Private key not found." } ;
}
// eslint-disable-next-line @typescript-eslint/no-non-null-assertion
const privateKeyHex : string = identity . keys [ 0 ] . privateKeyHex ! ;
const signer = await SimpleSigner ( privateKeyHex ) ;
const alg = undefined ;
// Create a JWT for the request
const vcJwt : string = await didJwt . createJWT ( vcPayload , {
alg : alg ,
issuer : identity.did ,
signer : signer ,
} ) ;
const vcJwt = await createEndorserJwt ( activeDid , vcPayload ) ;
// Make the xhr request payload
const payload = JSON . stringify ( { jwtEncoded : vcJwt } ) ;
const url = apiServer + "/api/v2/claim" ;
const headers = await getHeaders ( identity ) ;
const resp = await axios . post ( url , payload , { headers } ) ;
const resp = await axios . post ( url , { jwtEncoded : vcJwt } ) ;
if ( resp . data ? . success ? . handleId ) {
return { success : true } ;
} else if ( resp . data ? . success ? . embeddedRecordError ) {
@ -1017,7 +1013,7 @@ export async function setVisibilityUtil(
const url =
apiServer + "/api/report/" + ( visibility ? "canSeeMe" : "cannotSeeMe" ) ;
const identity = await getIdentity ( activeDid ) ;
const headers = await getHeaders ( identity ) ;
const headers = await getHeaders ( identity . did ) ;
const payload = JSON . stringify ( { did : contact.did } ) ;
try {
@ -1046,16 +1042,16 @@ export async function setVisibilityUtil(
*
* @param apiServer endorser server URL string
* @param axios Axios instance
* @param { IIdentifier } identity - The identity object to check rate limits for .
* @param { string } issuerDid - The DID for which to check rate limits .
* @returns { Promise < AxiosResponse > } The Axios response object .
* /
export async function fetchEndorserRateLimits (
apiServer : string ,
axios : Axios ,
identity : IIdentifier ,
issuerDid : string ,
) {
const url = ` ${ apiServer } /api/report/rateLimits ` ;
const headers = await getHeaders ( identity ) ;
const headers = await getHeaders ( issuerDid ) ;
return await axios . get ( url , { headers } as AxiosRequestConfig ) ;
}
@ -1064,15 +1060,11 @@ export async function fetchEndorserRateLimits(
*
* @param apiServer image server URL string
* @param axios Axios instance
* @param { IIdentifier } identity - The identity object to check rate limits for .
* @param { string } issuerDid - The DID for which to check rate limits .
* @returns { Promise < AxiosResponse > } The Axios response object .
* /
export async function fetchImageRateLimits (
apiServer : string ,
axios : Axios ,
identity : IIdentifier ,
) {
export async function fetchImageRateLimits ( axios : Axios , issuerDid : string ) {
const url = DEFAULT_IMAGE_API_SERVER + "/image-limits" ;
const headers = await getHeaders ( identity ) ;
const headers = await getHeaders ( issuerDid ) ;
return await axios . get ( url , { headers } as AxiosRequestConfig ) ;
}
