@bitgo-beta/sdk-core 8.2.1-beta.2021 → 8.2.1-beta.2023

package/dist/test/unit/bitgo/wallet/safeShareWallet.js

@@ -0,0 +1,303 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * @prettier
+ *
+ * Safe-wallet SPEND sharing. Mirrors test/unit/bitgo/wallet/safeGetUserPrv.ts (sinon-stubbed,
+ * no nock) for the sharing analogue: a safe owner's children are pub-only, so the share path
+ * must re-derive the child prv from the root — never the root material.
+ */
+require("should");
+const sinon = __importStar(require("sinon"));
+const src_1 = require("../../../../src");
+const ecdh_1 = require("../../../../src/bitgo/ecdh");
+const bitcoin_1 = require("../../../../src/bitgo/bitcoin");
+require('should-sinon');
+describe('Safe wallet spend sharing', function () {
+    const prv = 'xprv9s21ZrQH143K3hekyNj7TciR4XNYe1kMj68W2ipjJGNHETWP7o42AjDnSPgKhdZ4x8NBAvaL72RrXjuXNdmkMqLERZza73oYugGtbLFXG8g';
+    const hardened = (0, src_1.deriveSafeChildHardenedFromXprv)(prv, '123');
+    const passphrase = 'test-passphrase';
+    const rootKeyId = 'root-key-id';
+    const SHAREE_PUB = '0279be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798';
+    let mockBitGo;
+    let mockBaseCoin;
+    let keychainsGetStub;
+    let encryptStub;
+    let decryptStub;
+    let createShareStub;
+    let createBulkKeySharesStub;
+    const baseWalletData = {
+        id: 'wallet-id',
+        coin: 'tbtc',
+        keys: ['user-key', 'backup-key', 'bitgo-key'],
+        type: 'hot',
+        multisigType: 'onchain',
+        enterprise: 'ent-id',
+    };
+    const childKeychain = (id) => ({
+        id,
+        pub: hardened.pub,
+        type: 'independent',
+        parent: rootKeyId,
+        derivedFromParentWithHardenedPath: "m/123'",
+    });
+    const publicOnlyKeychain = (id) => ({ id, pub: 'pub-' + id, type: 'independent' });
+    const rootKeychain = {
+        id: rootKeyId,
+        source: 'user',
+        encryptedPrv: `enc:${prv}`,
+        type: 'independent',
+        pub: 'root-pub',
+    };
+    beforeEach(function () {
+        keychainsGetStub = sinon.stub();
+        encryptStub = sinon.stub();
+        decryptStub = sinon.stub();
+        mockBitGo = {
+            encrypt: encryptStub,
+            decrypt: decryptStub,
+            url: sinon.stub().returns('https://test.bitgo.com/'),
+            setRequestTracer: sinon.stub(),
+            getSharingKey: sinon.stub().resolves({ userId: 'sharee-id', pubkey: SHAREE_PUB, path: 'm/0' }),
+        };
+        mockBaseCoin = {
+            getChain: sinon.stub().returns('tbtc'),
+            getFamily: sinon.stub().returns('btc'),
+            getFullName: sinon.stub().returns('Test Bitcoin'),
+            keychains: sinon.stub().returns({
+                get: keychainsGetStub,
+                getKeysForSigning: sinon.stub().resolves([]),
+            }),
+            deriveKeyWithSeed: sinon.stub(),
+            url: sinon.stub().callsFake((path) => `https://test.bitgo.com/api/v2/tbtc${path}`),
+            supportsStaking: sinon.stub().returns(false),
+            supportsTss: sinon.stub().returns(false),
+            getMPCAlgorithm: sinon.stub(),
+            keyIdsForSigning: sinon.stub().returns([0, 1, 2]),
+        };
+        keychainsGetStub.callsFake(({ id }) => Promise.resolve(id === rootKeyId ? rootKeychain : id === 'user-key' ? childKeychain(id) : publicOnlyKeychain(id)));
+        // Reversible encrypt: `shared:<password>:<input>` so tests can verify the ECDH secret and
+        // that the payload encrypts the CHILD prv, not the root.
+        encryptStub.callsFake(({ input, password }) => Promise.resolve(`shared:${password}:${input}`));
+        decryptStub.callsFake(({ input, password }) => {
+            if (password !== passphrase)
+                return null;
+            if (typeof input === 'string' && input.startsWith('enc:'))
+                return input.slice(4);
+            return null;
+        });
+        createShareStub = sinon.stub(src_1.Wallet.prototype, 'createShare').resolves({});
+        createBulkKeySharesStub = sinon.stub(src_1.Wallet.prototype, 'createBulkKeyShares').resolves({ shares: [] });
+    });
+    afterEach(function () {
+        sinon.restore();
+    });
+    function makeWallet(overrides = {}) {
+        return new src_1.Wallet(mockBitGo, mockBaseCoin, {
+            ...baseWalletData,
+            ...overrides,
+        });
+    }
+    async function getShareOptions(wallet, params = {}) {
+        await wallet.shareWallet({
+            email: 'shareto@test.com',
+            permissions: 'spend',
+            walletPassphrase: passphrase,
+            ...params,
+        });
+        return createShareStub.firstCall.args[0];
+    }
+    describe('hot safe wallet, spend share', function () {
+        it('derives child material, uses the registered child pub, and never ships root material', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            const options = await getShareOptions(wallet);
+            options.skipKeychain.should.equal(false);
+            options.keychain.should.be.ok();
+            options.keychain.pub.should.equal(hardened.pub);
+            const json = JSON.stringify(options.keychain);
+            json.should.not.containEql(prv); // root xprv never leaves
+            json.should.not.containEql('root-pub'); // root pub never leaves
+        });
+        it('the encrypted prv ECDH-decrypts (sharee side) to the CHILD prv', async function () {
+            const shareeKey = (0, bitcoin_1.makeRandomKey)();
+            const shareePub = shareeKey.publicKey.toString('hex');
+            mockBitGo.getSharingKey = sinon.stub().resolves({ userId: 'sharee-id', pubkey: shareePub, path: 'm/0' });
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            const options = await getShareOptions(wallet);
+            const shareeSecret = (0, ecdh_1.getSharedSecret)(shareeKey, Buffer.from(options.keychain.fromPubKey, 'hex')).toString('hex');
+            options.keychain.encryptedPrv.should.equal(`shared:${shareeSecret}:${hardened.prv}`);
+        });
+        it('a view-only share needs no keychain and does not fetch the root', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            await wallet.shareWallet({ email: 'shareto@test.com', permissions: 'view', walletPassphrase: passphrase });
+            createShareStub.firstCall.args[0].skipKeychain.should.equal(true);
+            createShareStub.firstCall.args[0].should.have.property('keychain', undefined);
+            keychainsGetStub.notCalled.should.equal(true);
+        });
+        it('a wrong passphrase rejects with IncorrectPasswordError and posts nothing', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            await wallet
+                .shareWallet({ email: 'shareto@test.com', permissions: 'spend', walletPassphrase: 'wrong-passphrase' })
+                .should.be.rejectedWith(src_1.IncorrectPasswordError);
+            createShareStub.notCalled.should.equal(true);
+        });
+        it('a missing passphrase throws instead of silently skipKeychain', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            await wallet
+                .shareWallet({ email: 'shareto@test.com', permissions: 'spend' })
+                .should.be.rejectedWith(/Missing walletPassphrase argument/);
+            createShareStub.notCalled.should.equal(true);
+        });
+        it('fails closed when the derived pub does not match the registered child pub', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            keychainsGetStub.callsFake(({ id }) => Promise.resolve(id === rootKeyId
+                ? rootKeychain
+                : id === 'user-key'
+                    ? { ...childKeychain(id), pub: 'wrong-child-pub', derivedFromParentWithHardenedPath: "m/123'" }
+                    : publicOnlyKeychain(id)));
+            await wallet
+                .shareWallet({ email: 'shareto@test.com', permissions: 'spend', walletPassphrase: passphrase })
+                .should.be.rejectedWith(src_1.SafeDerivedPublicKeyMismatchError);
+        });
+    });
+    describe('unsupported safe slots', function () {
+        it('TSS safe wallet throws SafeShareNotImplementedError without fetching the root', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1', multisigType: 'tss' });
+            await wallet
+                .shareWallet({ email: 'shareto@test.com', permissions: 'spend', walletPassphrase: passphrase })
+                .should.be.rejectedWith(src_1.SafeShareNotImplementedError);
+            // child fetched (safe branch), root never fetched (guard fires first)
+            keychainsGetStub.calledOnce.should.equal(true);
+            keychainsGetStub.firstCall.args[0].should.deepEqual({ id: 'user-key' });
+        });
+        it('ed25519 onchain safe wallet throws SafeShareNotImplementedError', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1', coin: 'txlm' });
+            mockBaseCoin.getFamily.returns('xlm');
+            await wallet
+                .shareWallet({ email: 'shareto@test.com', permissions: 'spend', walletPassphrase: passphrase })
+                .should.be.rejectedWith(src_1.SafeShareNotImplementedError);
+            keychainsGetStub.calledOnce.should.equal(true);
+        });
+    });
+    describe('regression: non-safe and sharee paths', function () {
+        it('a genuine cold wallet still yields skipKeychain', async function () {
+            const wallet = makeWallet({ type: 'cold' });
+            const options = await getShareOptions(wallet);
+            options.skipKeychain.should.equal(true);
+            options.should.have.property('keychain', undefined);
+        });
+        it('a sharee re-sharing (child has encryptedPrv) takes the ordinary path and never fetches the root', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            const shareeChild = {
+                id: 'user-key',
+                pub: 'sharee-pub',
+                type: 'independent',
+                encryptedPrv: `enc:sharee-prv`,
+            };
+            keychainsGetStub.callsFake(({ id }) => Promise.resolve(id === 'user-key' ? shareeChild : publicOnlyKeychain(id)));
+            const options = await getShareOptions(wallet);
+            options.skipKeychain.should.equal(false);
+            options.keychain.pub.should.equal('sharee-pub');
+            // root (safe-owner detour) must never be reached for a sharee with an encrypted child prv
+            keychainsGetStub
+                .getCalls()
+                .filter((c) => c.args?.[0]?.id === rootKeyId)
+                .length.should.equal(0);
+        });
+        it('a malformed safe wallet (child with no parent) fails closed instead of cold-skipping', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            keychainsGetStub.callsFake(({ id }) => Promise.resolve(id === 'user-key' ? publicOnlyKeychain(id) : publicOnlyKeychain(id)));
+            await wallet
+                .shareWallet({ email: 'shareto@test.com', permissions: 'spend', walletPassphrase: passphrase })
+                .should.be.rejectedWith(/safe child could not be resolved/);
+            createShareStub.notCalled.should.equal(true);
+        });
+        it('a non-safe hot wallet spend share is unchanged', async function () {
+            const wallet = makeWallet({});
+            const userKeychain = {
+                id: 'user-key',
+                pub: 'hot-pub',
+                type: 'independent',
+                encryptedPrv: `enc:hot-prv`,
+            };
+            keychainsGetStub.callsFake(({ id }) => Promise.resolve(id === 'user-key' ? userKeychain : publicOnlyKeychain(id)));
+            const options = await getShareOptions(wallet);
+            options.skipKeychain.should.equal(false);
+            options.keychain.pub.should.equal('hot-pub');
+        });
+        it('an lnbtc wallet takes the userAuth path and never enters the safe branch', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1', coin: 'lbtc' });
+            mockBaseCoin.getFamily.returns('lnbtc');
+            const safeChildSpy = sinon.spy(wallet, 'getSafeOwnerChildKeychain');
+            // stubbing the private keychain fetch so lnbtc resolves a keychain without full lightning mocks
+            sinon.stub(wallet, 'getEncryptedWalletKeychainForWalletSharing').resolves({
+                id: 'user-key',
+                pub: 'ln-pub',
+                encryptedPrv: `enc:ln-prv`,
+                type: 'independent',
+            });
+            const options = await getShareOptions(wallet);
+            options.keychain.pub.should.equal('ln-pub');
+            safeChildSpy.notCalled.should.equal(true);
+        });
+    });
+    describe('createBulkWalletShare on a safe wallet', function () {
+        const bulkParams = {
+            walletPassphrase: passphrase,
+            keyShareOptions: [
+                { userId: 'u1', pubKey: SHAREE_PUB, path: 'm/0', permissions: 'spend' },
+                { userId: 'u2', pubKey: SHAREE_PUB, path: 'm/0', permissions: 'spend' },
+            ],
+        };
+        it('derives the child once (one root decrypt) and fans it out per user', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1' });
+            await wallet.createBulkWalletShare(bulkParams);
+            createBulkKeySharesStub.calledOnce.should.equal(true);
+            const options = createBulkKeySharesStub.firstCall.args[0];
+            options.length.should.equal(2);
+            options.forEach((o) => o.keychain.pub.should.equal(hardened.pub));
+            // child + root exactly once (single root decrypt)
+            const rootCalls = keychainsGetStub.getCalls().filter((c) => c.args?.[0]?.id === rootKeyId);
+            rootCalls.length.should.equal(1);
+        });
+        it('the real error propagates instead of shareOptions cannot be empty', async function () {
+            const wallet = makeWallet({ safe: 'safe-id-1', multisigType: 'tss' });
+            await wallet.createBulkWalletShare(bulkParams).should.be.rejectedWith(src_1.SafeShareNotImplementedError);
+            createBulkKeySharesStub.notCalled.should.equal(true);
+        });
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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