Add sign command which can perform actions

2019-12-01 00:08:28 +02:00
parent 19dd5a2a9d
commit a05e1ba48e
3 changed files with 179 additions and 0 deletions
--- a/lib/core/logic/authentication.js
+++ b/lib/core/logic/authentication.js
@@ -0,0 +1,60 @@
+const persistence = require("../persistence/persistence");
+const cryptoUtil = require("../cryptoUtil");
+
+module.exports.authenticate = function(challenge, authenticationRequest, argv) {
+    persistence().LoadDB()
+        .then(db => {
+            const url = argv.url || authenticationRequest.url;
+            const userIdentifier = argv.userIdentifier || authenticationRequest.userIdentifier;
+            // TODO validate lock definition has all the parameters we need
+            // TODO: validate serviceExtendedPublicKey
+            console.log("Looking for");
+            console.log("url: ", url);
+            console.log("userIdentifier: ", userIdentifier);
+
+            return db.Lock.findOne({
+                where: {
+                    url: url,
+                    userIdentifier: userIdentifier
+                },
+                include: [
+                    {
+                        association: db.Lock.ExtendedPublicKey, 
+                        require: true,
+                        include: [
+                            {
+                                association: db.ExtendedPublicKey.Key, // TODO rename key to wallet
+                                required: true
+                            }
+                        ]
+                    }
+                ]
+            })
+            .then(lock => {
+                if(lock) {
+                    // Sign the message with the key that corresponds with this lock...
+                    const verification = cryptoUtil.verifyChallenge(
+                        lock.serviceExtendedPublicKey, 
+                        challenge
+                        );
+
+                    if (verification) {
+                        const encryptedKey = lock.extendedPublicKey.key.encryptedPrivateKey;
+                        const iv = lock.extendedPublicKey.key.iv;
+                        const password = "vanished";
+                        const walletXpriv = cryptoUtil.decrypt(encryptedKey, password, iv);
+        
+                        var challengeDerivationPath = `${lock.extendedPublicKey.derivationPath}/${challenge.derivationPath.split("c/")[1]}`;
+                        
+                        const signature = cryptoUtil.signMessage(walletXpriv, challengeDerivationPath, challenge.message)
+                        console.log("Signature: ", signature.toString('hex'));
+                    } else {
+                        console.error("Challenge not signed by registered service.");
+                    }
+                    
+                } else {
+                    console.error("Failed to find a lock with these parameters");
+                }
+            })            
+        })
+} 
--- a/lib/core/logic/register.js
+++ b/lib/core/logic/register.js
@@ -0,0 +1,62 @@
+const persistence = require("../persistence/persistence");
+const cryptoUtil = require("../cryptoUtil");
+
+module.exports.registration = function(challenge, registerationRequest) {
+    persistence().LoadDB()
+        .then(db => {
+            // TODO validate lock definition has all the parameters we need
+            // TODO: validate serviceExtendedPublicKey
+            const verification = cryptoUtil.verifyChallenge(
+                registerationRequest.serviceExtendedPublicKey, 
+                challenge
+                );
+            if(verification) {
+                return db.ExtendedPublicKey.findOne({
+                    where: {
+                        xpub: challenge.xpub
+                    },
+                    include: [
+                        {
+                            association: db.ExtendedPublicKey.Key // TODO: update this to wallet
+                        }
+                    ]
+                }).then(extendedPublicKey => {
+                    if (extendedPublicKey) {
+                        const encryptedKey = extendedPublicKey.key.encryptedPrivateKey;
+                        const iv = extendedPublicKey.key.iv;
+                        const password = "vanished";
+                        const walletXpriv = cryptoUtil.decrypt(encryptedKey, password, iv);
+        
+                        var challengeDerivationPath = `${extendedPublicKey.derivationPath}/${challenge.derivationPath.split("c/")[1]}`;
+                        
+                        const signature = cryptoUtil.signMessage(walletXpriv, challengeDerivationPath, challenge.message)
+        
+                        
+                        // TODO: save lock
+                        return db.Lock.create({
+                            userIdentifier: registerationRequest.userIdentifier,
+                            url: registerationRequest.url,
+                            serviceExtendedPublicKey: registerationRequest.serviceExtendedPublicKey,
+                            signature: signature.toString('hex'),
+                            message: challenge.message,
+                            extendedPublicKeyId: extendedPublicKey.id
+                        })
+                    } else {
+                        console.error("Sorry we can't create a lock with xpub: ", challenge.xpub);
+                        return null;
+                    }
+                }).then(lock => {
+                    if(lock) {
+                        console.log("Lock: ", lock.id);
+                        console.log("Signature: ", lock.signature);
+                    } else {
+                        console.error("Failed to create the lock.");
+                    }
+                    
+                })
+            } else {
+                console.error("Challenge not signed by service");
+            }
+            
+        })
+}