@abtnode/auth 1.8.69-beta-76f8a46f → 1.8.69-beta-650a290b

package/lib/auth.js

@@ -184,6 +184,10 @@ const messages = {
     en: 'Invalid Blocklet VC',
     zh: '无效的 Blocklet VC',
   },
+  invalidAppVersion: {
+    en: 'App key-pair rotating can only be performed on the latest version',
+    zh: '只有最新版应用可以变更钥匙对',
+  },
 
   // NFT related
   missingProfileClaim: {

package/lib/lost-passport.js

@@ -1,11 +1,12 @@
 const path = require('path');
 const joinUrl = require('url-join');
 const uniqBy = require('lodash/uniqBy');
+const uniq = require('lodash/uniq');
 const getBlockletInfo = require('@blocklet/meta/lib/info');
 const formatContext = require('@abtnode/util/lib/format-context');
 const getRandomMessage = require('@abtnode/util/lib/get-random-message');
 const getNodeWallet = require('@abtnode/util/lib/get-app-wallet');
-const { getDisplayName } = require('@blocklet/meta/lib/util');
+const { getDisplayName, getBlockletAppIdList } = require('@blocklet/meta/lib/util');
 const { VC_TYPE_NODE_PASSPORT, PASSPORT_STATUS, NODE_DATA_DIR_NAME } = require('@abtnode/constant');
 const get = require('lodash/get');
 const { parseUserAvatar } = require('@abtnode/util/lib/user-avatar');
@@ -31,6 +32,7 @@ const TEAM_TYPES = {
 const getTeamInfo = async ({ type, node, req }) => {
   let teamDid;
   let issuerDid;
+  let issuerDidList;
   let issuerName;
   let issuerWallet;
   let passportColor;
@@ -40,6 +42,7 @@ const getTeamInfo = async ({ type, node, req }) => {
   if (type === TEAM_TYPES.NODE) {
     teamDid = info.did;
     issuerDid = info.did;
+    issuerDidList = [info.did];
     issuerName = info.name;
     issuerWallet = getNodeWallet(info.sk);
     passportColor = 'default';
@@ -49,6 +52,7 @@ const getTeamInfo = async ({ type, node, req }) => {
     const blocklet = await node.getBlocklet({ did: teamDid, attachRuntimeInfo: false });
     const blockletInfo = getBlockletInfo(blocklet, info.sk);
     issuerDid = blockletInfo.wallet.address;
+    issuerDidList = uniq([blockletInfo.wallet.address, ...getBlockletAppIdList(blocklet)]);
     issuerName = getDisplayName(blocklet, true);
     issuerWallet = blockletInfo.wallet;
     passportColor = blockletInfo.passportColor;
@@ -60,6 +64,7 @@ const getTeamInfo = async ({ type, node, req }) => {
   return {
     teamDid,
     issuerDid,
+    issuerDidList,
     issuerName,
     issuerWallet,
     passportColor,
@@ -95,7 +100,7 @@ const createLostPassportListRoute = ({ node, type }) => ({
   onAuth: async ({ userDid, extraParams, updateSession, req }) => {
     const { locale } = extraParams;
 
-    const { teamDid, issuerDid, dataDir } = await getTeamInfo({ node, req, type });
+    const { teamDid, issuerDidList, dataDir } = await getTeamInfo({ node, req, type });
 
     // check user approved
     const user = await getUser(node, teamDid, userDid);
@@ -114,7 +119,7 @@ const createLostPassportListRoute = ({ node, type }) => ({
           return false;
         }
 
-        if (x.issuer.id !== issuerDid) {
+        if (!issuerDidList.includes(x.issuer.id)) {
           return false;
         }
         return !(x.expirationDate && Date.now() > new Date(x.expirationDate).getTime());
@@ -193,7 +198,7 @@ const createLostPassportIssueRoute = ({ node, type, authServicePrefix }) => ({
   onAuth: async ({ claims, userDid, userPk, extraParams, updateSession, baseUrl, req }) => {
     const { locale = 'en', receiverDid, passportName } = extraParams;
 
-    const { teamDid, issuerDid, issuerName, issuerWallet, passportColor, dataDir } = await getTeamInfo({
+    const { teamDid, issuerDidList, issuerName, issuerWallet, passportColor, dataDir } = await getTeamInfo({
       node,
       req,
       type,
@@ -226,7 +231,7 @@ const createLostPassportIssueRoute = ({ node, type, authServicePrefix }) => ({
       (x) =>
         x.name === passportName &&
         x.status === PASSPORT_STATUS.VALID &&
-        x.issuer.id === issuerDid &&
+        issuerDidList.includes(x.issuer.id) &&
         (!x.expirationDate || Date.now() > new Date(x.expirationDate).getTime())
     );
     if (!exist) {

package/lib/server.js

@@ -21,6 +21,7 @@ const {
   SERVER_ROLES,
   NFT_TYPE_SERVERLESS,
   MAIN_CHAIN_ENDPOINT,
+  APP_STRUCT_VERSION,
 } = require('@abtnode/constant');
 const {
   messages,
@@ -290,7 +291,7 @@ const getAuthNFTClaim =
   };
 
 const getKeyPairClaim =
-  (node) =>
+  (node, declare = true) =>
   async ({ extraParams: { locale, appDid, title }, context: { didwallet } }) => {
     checkWalletVersion({ didwallet, locale });
 
@@ -319,6 +320,7 @@ const getKeyPairClaim =
       mfa: !process.env.DID_CONNECT_MFA_DISABLED,
       description: description[locale] || description.en,
       moniker: (urlFriendly(slugify(appName)) || 'application').toLowerCase(),
+      declare: !!declare,
       migrateFrom,
       targetType: {
         role: 'application',
@@ -334,7 +336,7 @@ const getRotateKeyPairClaims = (node) => {
     {
       authPrincipal: async ({ extraParams: { locale, appDid } }) => {
         const description = {
-          en: 'Please select ',
+          en: 'Please create a new key-pair for this application',
           zh: '请为应用创建新的钥匙对',
         };
 
@@ -348,6 +350,9 @@ const getRotateKeyPairClaims = (node) => {
         if (!blocklet) {
           throw new Error(messages.invalidBlocklet[locale]);
         }
+        if (blocklet.structVersion !== APP_STRUCT_VERSION) {
+          throw new Error(messages.invalidAppVersion[locale]);
+        }
 
         // Try to use blocklet chain config if possible
         // Since migration happens on the chain the app holds some actual assets
@@ -388,18 +393,33 @@ const getLaunchBlockletClaims = (node, authMethod) => {
   return claims;
 };
 
-// FIXME: @wangshijun should be changed to blocklet appSK owner claim?
-const getSetupBlockletClaims = (node, authMethod, blocklet) => {
-  const claims = {};
-
-  if (authMethod === 'vc') {
-    claims.serverPassport = ['verifiableCredential', getAuthVcClaim({ node, blocklet })];
-  }
-  if (authMethod === 'nft') {
-    claims.serverNFT = ['asset', getAuthNFTClaim({ node })];
-  }
+const getSetupBlockletClaims = () => {
+  const description = {
+    en: 'Sign following message to prove that you are the owner of the app',
+    zh: '签名如下消息以证明你是应用的拥有者',
+  };
 
-  return claims;
+  return [
+    {
+      authPrincipal: async ({ context, extraParams: { locale } }) => {
+        const blocklet = await context.request.getBlocklet();
+        return {
+          description: description[locale] || description.en,
+          target: blocklet.appDid,
+        };
+      },
+    },
+    {
+      signature: async ({ context, extraParams: { locale } }) => {
+        const blocklet = await context.request.getBlocklet();
+        return {
+          description: messages.receivePassport[locale],
+          data: `I am the owner of app ${blocklet.appDid}`,
+          type: 'mime:text/plain',
+        };
+      },
+    },
+  ];
 };
 
 const getOwnershipNFTClaim = async (node, locale) => {

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.8.69-beta-76f8a46f",
+  "version": "1.8.69-beta-650a290b",
   "description": "Simple lib to manage auth in ABT Node",
   "main": "lib/index.js",
   "files": [
@@ -20,18 +20,18 @@
   "author": "linchen <linchen1987@foxmail.com> (http://github.com/linchen1987)",
   "license": "MIT",
   "dependencies": {
-    "@abtnode/constant": "1.8.69-beta-76f8a46f",
-    "@abtnode/logger": "1.8.69-beta-76f8a46f",
-    "@abtnode/util": "1.8.69-beta-76f8a46f",
-    "@arcblock/did": "1.18.58",
-    "@arcblock/jwt": "^1.18.58",
-    "@arcblock/vc": "1.18.58",
-    "@blocklet/constant": "1.8.69-beta-76f8a46f",
-    "@blocklet/meta": "1.8.69-beta-76f8a46f",
-    "@ocap/client": "1.18.58",
-    "@ocap/mcrypto": "1.18.58",
-    "@ocap/util": "1.18.58",
-    "@ocap/wallet": "1.18.58",
+    "@abtnode/constant": "1.8.69-beta-650a290b",
+    "@abtnode/logger": "1.8.69-beta-650a290b",
+    "@abtnode/util": "1.8.69-beta-650a290b",
+    "@arcblock/did": "1.18.59",
+    "@arcblock/jwt": "^1.18.59",
+    "@arcblock/vc": "1.18.59",
+    "@blocklet/constant": "1.8.69-beta-650a290b",
+    "@blocklet/meta": "1.8.69-beta-650a290b",
+    "@ocap/client": "1.18.59",
+    "@ocap/mcrypto": "1.18.59",
+    "@ocap/util": "1.18.59",
+    "@ocap/wallet": "1.18.59",
     "axios": "^0.27.2",
     "joi": "17.7.0",
     "jsonwebtoken": "^9.0.0",
@@ -43,5 +43,5 @@
   "devDependencies": {
     "jest": "^27.5.1"
   },
-  "gitHead": "07415e674443b85648ea80b734f7a3690abfc15e"
+  "gitHead": "a33c9ce6a52b8d522d13860e85809dcbba236712"
 }