@aztec/aztec 4.0.0-rc.2 → 4.0.0-rc.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dest/cli/admin_api_key_store.d.ts +3 -3
- package/dest/cli/admin_api_key_store.d.ts.map +1 -1
- package/dest/cli/admin_api_key_store.js +3 -3
- package/dest/cli/aztec_start_action.js +2 -2
- package/dest/cli/aztec_start_options.d.ts +1 -1
- package/dest/cli/aztec_start_options.d.ts.map +1 -1
- package/dest/cli/aztec_start_options.js +4 -3
- package/package.json +34 -34
- package/scripts/aztec.sh +1 -1
- package/src/cli/admin_api_key_store.ts +4 -4
- package/src/cli/aztec_start_action.ts +2 -2
- package/src/cli/aztec_start_options.ts +4 -3
|
@@ -17,7 +17,7 @@ export interface ResolveAdminApiKeyOptions {
|
|
|
17
17
|
/** SHA-256 hex hash of a pre-generated API key. When set, the node uses this hash directly. */
|
|
18
18
|
adminApiKeyHash?: string;
|
|
19
19
|
/** If true, disable admin API key auth entirely. */
|
|
20
|
-
|
|
20
|
+
disableAdminApiKey?: boolean;
|
|
21
21
|
/** If true, force-generate a new key even if one is already persisted. */
|
|
22
22
|
resetAdminApiKey?: boolean;
|
|
23
23
|
/** Root data directory for persistent storage. */
|
|
@@ -27,7 +27,7 @@ export interface ResolveAdminApiKeyOptions {
|
|
|
27
27
|
* Resolves the admin API key for the admin RPC endpoint.
|
|
28
28
|
*
|
|
29
29
|
* Strategy:
|
|
30
|
-
* 1. If opt-out flag is set (`
|
|
30
|
+
* 1. If opt-out flag is set (`disableAdminApiKey`), return undefined (no auth).
|
|
31
31
|
* 2. If a pre-generated hash is provided (`adminApiKeyHash`), use it directly.
|
|
32
32
|
* 3. If a data directory exists, look for a persisted hash file
|
|
33
33
|
* at `<dataDirectory>/admin/api_key_hash`:
|
|
@@ -42,4 +42,4 @@ export interface ResolveAdminApiKeyOptions {
|
|
|
42
42
|
* @returns The resolved API key hash, or undefined if auth is disabled.
|
|
43
43
|
*/
|
|
44
44
|
export declare function resolveAdminApiKey(options: ResolveAdminApiKeyOptions, log: Logger): Promise<AdminApiKeyResolution | undefined>;
|
|
45
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
45
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"admin_api_key_store.d.ts","sourceRoot":"","sources":["../../src/cli/admin_api_key_store.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AASpD;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,yBAAyB;IACxC,+FAA+F;IAC/F,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oDAAoD;IACpD,
|
|
1
|
+
{"version":3,"file":"admin_api_key_store.d.ts","sourceRoot":"","sources":["../../src/cli/admin_api_key_store.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AASpD;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,yBAAyB;IACxC,+FAA+F;IAC/F,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oDAAoD;IACpD,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,kDAAkD;IAClD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,yBAAyB,EAClC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CA2D5C"}
|
|
@@ -8,7 +8,7 @@ const HASH_FILE_NAME = 'api_key_hash';
|
|
|
8
8
|
* Resolves the admin API key for the admin RPC endpoint.
|
|
9
9
|
*
|
|
10
10
|
* Strategy:
|
|
11
|
-
* 1. If opt-out flag is set (`
|
|
11
|
+
* 1. If opt-out flag is set (`disableAdminApiKey`), return undefined (no auth).
|
|
12
12
|
* 2. If a pre-generated hash is provided (`adminApiKeyHash`), use it directly.
|
|
13
13
|
* 3. If a data directory exists, look for a persisted hash file
|
|
14
14
|
* at `<dataDirectory>/admin/api_key_hash`:
|
|
@@ -23,8 +23,8 @@ const HASH_FILE_NAME = 'api_key_hash';
|
|
|
23
23
|
* @returns The resolved API key hash, or undefined if auth is disabled.
|
|
24
24
|
*/ export async function resolveAdminApiKey(options, log) {
|
|
25
25
|
// Operator explicitly opted out of admin auth
|
|
26
|
-
if (options.
|
|
27
|
-
log.warn('Admin API key authentication is DISABLED (--
|
|
26
|
+
if (options.disableAdminApiKey) {
|
|
27
|
+
log.warn('Admin API key authentication is DISABLED (--disable-admin-api-key / AZTEC_DISABLE_ADMIN_API_KEY)');
|
|
28
28
|
return undefined;
|
|
29
29
|
}
|
|
30
30
|
// Operator provided a pre-generated hash (e.g. via AZTEC_ADMIN_API_KEY_HASH env var)
|
|
@@ -99,7 +99,7 @@ export async function aztecStart(options, userLog, debugLogger) {
|
|
|
99
99
|
// Resolve the admin API key (auto-generated and persisted, or opt-out)
|
|
100
100
|
const apiKeyResolution = await resolveAdminApiKey({
|
|
101
101
|
adminApiKeyHash: options.adminApiKeyHash,
|
|
102
|
-
|
|
102
|
+
disableAdminApiKey: options.disableAdminApiKey,
|
|
103
103
|
resetAdminApiKey: options.resetAdminApiKey,
|
|
104
104
|
dataDirectory: options.dataDirectory
|
|
105
105
|
}, debugLogger);
|
|
@@ -136,7 +136,7 @@ export async function aztecStart(options, userLog, debugLogger) {
|
|
|
136
136
|
userLog(' The key hash has been persisted — on next restart, the same key will be used.');
|
|
137
137
|
}
|
|
138
138
|
userLog('');
|
|
139
|
-
userLog(' To disable admin auth: --
|
|
139
|
+
userLog(' To disable admin auth: --disable-admin-api-key or AZTEC_DISABLE_ADMIN_API_KEY=true');
|
|
140
140
|
userLog(separator);
|
|
141
141
|
userLog('');
|
|
142
142
|
}
|
|
@@ -14,4 +14,4 @@ export declare const NETWORK_FLAG = "network";
|
|
|
14
14
|
export declare const aztecStartOptions: {
|
|
15
15
|
[key: string]: AztecStartOption[];
|
|
16
16
|
};
|
|
17
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
17
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"aztec_start_options.d.ts","sourceRoot":"","sources":["../../src/cli/aztec_start_options.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,MAAM,EAIZ,MAAM,0BAA0B,CAAC;AAelC,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,GAAG,CAAC;IAClB,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC;IACpC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,GAAG,CAAC;CACjC;AAED,eAAO,MAAM,UAAU,0FAoBtB,CAAC;AAuBF,eAAO,MAAM,gBAAgB,UAY5B,CAAC;AAEF,eAAO,MAAM,YAAY,YAAY,CAAC;AAGtC,eAAO,MAAM,iBAAiB,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAAA;
|
|
1
|
+
{"version":3,"file":"aztec_start_options.d.ts","sourceRoot":"","sources":["../../src/cli/aztec_start_options.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,MAAM,EAIZ,MAAM,0BAA0B,CAAC;AAelC,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,GAAG,CAAC;IAClB,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC;IACpC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,GAAG,CAAC;CACjC;AAED,eAAO,MAAM,UAAU,0FAoBtB,CAAC;AAuBF,eAAO,MAAM,gBAAgB,UAY5B,CAAC;AAEF,eAAO,MAAM,YAAY,YAAY,CAAC;AAGtC,eAAO,MAAM,iBAAiB,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAAA;CAuOlE,CAAC"}
|
|
@@ -118,11 +118,12 @@ export const aztecStartOptions = {
|
|
|
118
118
|
env: 'AZTEC_ADMIN_API_KEY_HASH'
|
|
119
119
|
},
|
|
120
120
|
{
|
|
121
|
-
flag: '--
|
|
121
|
+
flag: '--disable-admin-api-key',
|
|
122
122
|
description: 'Disable API key authentication on the admin RPC endpoint. By default, a key is auto-generated, displayed once, and its hash is persisted.',
|
|
123
123
|
defaultValue: false,
|
|
124
|
-
env: '
|
|
125
|
-
|
|
124
|
+
env: 'AZTEC_DISABLE_ADMIN_API_KEY',
|
|
125
|
+
// undefined means the flag was passed without a value (boolean toggle), treat as true.
|
|
126
|
+
parseVal: (val)=>val === undefined || val === 'true' || val === '1'
|
|
126
127
|
},
|
|
127
128
|
{
|
|
128
129
|
flag: '--reset-admin-api-key',
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aztec/aztec",
|
|
3
|
-
"version": "4.0.0-rc.
|
|
3
|
+
"version": "4.0.0-rc.4",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"exports": {
|
|
6
6
|
".": "./dest/index.js",
|
|
@@ -28,39 +28,39 @@
|
|
|
28
28
|
"../package.common.json"
|
|
29
29
|
],
|
|
30
30
|
"dependencies": {
|
|
31
|
-
"@aztec/accounts": "4.0.0-rc.
|
|
32
|
-
"@aztec/archiver": "4.0.0-rc.
|
|
33
|
-
"@aztec/aztec-faucet": "4.0.0-rc.
|
|
34
|
-
"@aztec/aztec-node": "4.0.0-rc.
|
|
35
|
-
"@aztec/aztec.js": "4.0.0-rc.
|
|
36
|
-
"@aztec/bb-prover": "4.0.0-rc.
|
|
37
|
-
"@aztec/bb.js": "4.0.0-rc.
|
|
38
|
-
"@aztec/blob-client": "4.0.0-rc.
|
|
39
|
-
"@aztec/bot": "4.0.0-rc.
|
|
40
|
-
"@aztec/builder": "4.0.0-rc.
|
|
41
|
-
"@aztec/cli": "4.0.0-rc.
|
|
42
|
-
"@aztec/constants": "4.0.0-rc.
|
|
43
|
-
"@aztec/entrypoints": "4.0.0-rc.
|
|
44
|
-
"@aztec/ethereum": "4.0.0-rc.
|
|
45
|
-
"@aztec/foundation": "4.0.0-rc.
|
|
46
|
-
"@aztec/kv-store": "4.0.0-rc.
|
|
47
|
-
"@aztec/l1-artifacts": "4.0.0-rc.
|
|
48
|
-
"@aztec/node-lib": "4.0.0-rc.
|
|
49
|
-
"@aztec/noir-contracts.js": "4.0.0-rc.
|
|
50
|
-
"@aztec/noir-protocol-circuits-types": "4.0.0-rc.
|
|
51
|
-
"@aztec/p2p": "4.0.0-rc.
|
|
52
|
-
"@aztec/p2p-bootstrap": "4.0.0-rc.
|
|
53
|
-
"@aztec/protocol-contracts": "4.0.0-rc.
|
|
54
|
-
"@aztec/prover-client": "4.0.0-rc.
|
|
55
|
-
"@aztec/prover-node": "4.0.0-rc.
|
|
56
|
-
"@aztec/pxe": "4.0.0-rc.
|
|
57
|
-
"@aztec/sequencer-client": "4.0.0-rc.
|
|
58
|
-
"@aztec/stdlib": "4.0.0-rc.
|
|
59
|
-
"@aztec/telemetry-client": "4.0.0-rc.
|
|
60
|
-
"@aztec/txe": "4.0.0-rc.
|
|
61
|
-
"@aztec/validator-ha-signer": "4.0.0-rc.
|
|
62
|
-
"@aztec/wallets": "4.0.0-rc.
|
|
63
|
-
"@aztec/world-state": "4.0.0-rc.
|
|
31
|
+
"@aztec/accounts": "4.0.0-rc.4",
|
|
32
|
+
"@aztec/archiver": "4.0.0-rc.4",
|
|
33
|
+
"@aztec/aztec-faucet": "4.0.0-rc.4",
|
|
34
|
+
"@aztec/aztec-node": "4.0.0-rc.4",
|
|
35
|
+
"@aztec/aztec.js": "4.0.0-rc.4",
|
|
36
|
+
"@aztec/bb-prover": "4.0.0-rc.4",
|
|
37
|
+
"@aztec/bb.js": "4.0.0-rc.4",
|
|
38
|
+
"@aztec/blob-client": "4.0.0-rc.4",
|
|
39
|
+
"@aztec/bot": "4.0.0-rc.4",
|
|
40
|
+
"@aztec/builder": "4.0.0-rc.4",
|
|
41
|
+
"@aztec/cli": "4.0.0-rc.4",
|
|
42
|
+
"@aztec/constants": "4.0.0-rc.4",
|
|
43
|
+
"@aztec/entrypoints": "4.0.0-rc.4",
|
|
44
|
+
"@aztec/ethereum": "4.0.0-rc.4",
|
|
45
|
+
"@aztec/foundation": "4.0.0-rc.4",
|
|
46
|
+
"@aztec/kv-store": "4.0.0-rc.4",
|
|
47
|
+
"@aztec/l1-artifacts": "4.0.0-rc.4",
|
|
48
|
+
"@aztec/node-lib": "4.0.0-rc.4",
|
|
49
|
+
"@aztec/noir-contracts.js": "4.0.0-rc.4",
|
|
50
|
+
"@aztec/noir-protocol-circuits-types": "4.0.0-rc.4",
|
|
51
|
+
"@aztec/p2p": "4.0.0-rc.4",
|
|
52
|
+
"@aztec/p2p-bootstrap": "4.0.0-rc.4",
|
|
53
|
+
"@aztec/protocol-contracts": "4.0.0-rc.4",
|
|
54
|
+
"@aztec/prover-client": "4.0.0-rc.4",
|
|
55
|
+
"@aztec/prover-node": "4.0.0-rc.4",
|
|
56
|
+
"@aztec/pxe": "4.0.0-rc.4",
|
|
57
|
+
"@aztec/sequencer-client": "4.0.0-rc.4",
|
|
58
|
+
"@aztec/stdlib": "4.0.0-rc.4",
|
|
59
|
+
"@aztec/telemetry-client": "4.0.0-rc.4",
|
|
60
|
+
"@aztec/txe": "4.0.0-rc.4",
|
|
61
|
+
"@aztec/validator-ha-signer": "4.0.0-rc.4",
|
|
62
|
+
"@aztec/wallets": "4.0.0-rc.4",
|
|
63
|
+
"@aztec/world-state": "4.0.0-rc.4",
|
|
64
64
|
"@types/chalk": "^2.2.0",
|
|
65
65
|
"abitype": "^0.8.11",
|
|
66
66
|
"chalk": "^5.3.0",
|
package/scripts/aztec.sh
CHANGED
|
@@ -27,7 +27,7 @@ case $cmd in
|
|
|
27
27
|
trap 'kill $server_pid &>/dev/null || true' EXIT
|
|
28
28
|
while ! nc -z 127.0.0.1 8081 &>/dev/null; do sleep 0.2; done
|
|
29
29
|
export NARGO_FOREIGN_CALL_TIMEOUT=300000
|
|
30
|
-
nargo test --silence-warnings
|
|
30
|
+
nargo test --silence-warnings --oracle-resolver http://127.0.0.1:8081 --test-threads 16 "$@"
|
|
31
31
|
;;
|
|
32
32
|
start)
|
|
33
33
|
if [ "${1:-}" == "--local-network" ]; then
|
|
@@ -28,7 +28,7 @@ export interface ResolveAdminApiKeyOptions {
|
|
|
28
28
|
/** SHA-256 hex hash of a pre-generated API key. When set, the node uses this hash directly. */
|
|
29
29
|
adminApiKeyHash?: string;
|
|
30
30
|
/** If true, disable admin API key auth entirely. */
|
|
31
|
-
|
|
31
|
+
disableAdminApiKey?: boolean;
|
|
32
32
|
/** If true, force-generate a new key even if one is already persisted. */
|
|
33
33
|
resetAdminApiKey?: boolean;
|
|
34
34
|
/** Root data directory for persistent storage. */
|
|
@@ -39,7 +39,7 @@ export interface ResolveAdminApiKeyOptions {
|
|
|
39
39
|
* Resolves the admin API key for the admin RPC endpoint.
|
|
40
40
|
*
|
|
41
41
|
* Strategy:
|
|
42
|
-
* 1. If opt-out flag is set (`
|
|
42
|
+
* 1. If opt-out flag is set (`disableAdminApiKey`), return undefined (no auth).
|
|
43
43
|
* 2. If a pre-generated hash is provided (`adminApiKeyHash`), use it directly.
|
|
44
44
|
* 3. If a data directory exists, look for a persisted hash file
|
|
45
45
|
* at `<dataDirectory>/admin/api_key_hash`:
|
|
@@ -58,8 +58,8 @@ export async function resolveAdminApiKey(
|
|
|
58
58
|
log: Logger,
|
|
59
59
|
): Promise<AdminApiKeyResolution | undefined> {
|
|
60
60
|
// Operator explicitly opted out of admin auth
|
|
61
|
-
if (options.
|
|
62
|
-
log.warn('Admin API key authentication is DISABLED (--
|
|
61
|
+
if (options.disableAdminApiKey) {
|
|
62
|
+
log.warn('Admin API key authentication is DISABLED (--disable-admin-api-key / AZTEC_DISABLE_ADMIN_API_KEY)');
|
|
63
63
|
return undefined;
|
|
64
64
|
}
|
|
65
65
|
|
|
@@ -109,7 +109,7 @@ export async function aztecStart(options: any, userLog: LogFn, debugLogger: Logg
|
|
|
109
109
|
const apiKeyResolution = await resolveAdminApiKey(
|
|
110
110
|
{
|
|
111
111
|
adminApiKeyHash: options.adminApiKeyHash,
|
|
112
|
-
|
|
112
|
+
disableAdminApiKey: options.disableAdminApiKey,
|
|
113
113
|
resetAdminApiKey: options.resetAdminApiKey,
|
|
114
114
|
dataDirectory: options.dataDirectory,
|
|
115
115
|
},
|
|
@@ -148,7 +148,7 @@ export async function aztecStart(options: any, userLog: LogFn, debugLogger: Logg
|
|
|
148
148
|
userLog(' The key hash has been persisted — on next restart, the same key will be used.');
|
|
149
149
|
}
|
|
150
150
|
userLog('');
|
|
151
|
-
userLog(' To disable admin auth: --
|
|
151
|
+
userLog(' To disable admin auth: --disable-admin-api-key or AZTEC_DISABLE_ADMIN_API_KEY=true');
|
|
152
152
|
userLog(separator);
|
|
153
153
|
userLog('');
|
|
154
154
|
}
|
|
@@ -150,12 +150,13 @@ export const aztecStartOptions: { [key: string]: AztecStartOption[] } = {
|
|
|
150
150
|
env: 'AZTEC_ADMIN_API_KEY_HASH',
|
|
151
151
|
},
|
|
152
152
|
{
|
|
153
|
-
flag: '--
|
|
153
|
+
flag: '--disable-admin-api-key',
|
|
154
154
|
description:
|
|
155
155
|
'Disable API key authentication on the admin RPC endpoint. By default, a key is auto-generated, displayed once, and its hash is persisted.',
|
|
156
156
|
defaultValue: false,
|
|
157
|
-
env: '
|
|
158
|
-
|
|
157
|
+
env: 'AZTEC_DISABLE_ADMIN_API_KEY',
|
|
158
|
+
// undefined means the flag was passed without a value (boolean toggle), treat as true.
|
|
159
|
+
parseVal: val => val === undefined || val === 'true' || val === '1',
|
|
159
160
|
},
|
|
160
161
|
{
|
|
161
162
|
flag: '--reset-admin-api-key',
|