@dxos/credentials 2.33.0 → 2.33.1-dev.0a5ae2e2

package/src/proto/gen/index.ts

@@ -49,5 +49,5 @@ export interface TYPES {
 }
 export interface SERVICES {
 }
-export const schemaJson = JSON.parse("{\"nested\":{\"dxos\":{\"nested\":{\"credentials\":{\"nested\":{\"auth\":{\"nested\":{\"Auth\":{\"fields\":{\"partyKey\":{\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"deviceKey\":{\"type\":\"PubKey\",\"id\":2,\"comment\":null},\"identityKey\":{\"type\":\"PubKey\",\"id\":3,\"comment\":null},\"feedKey\":{\"type\":\"PubKey\",\"id\":4,\"comment\":null}},\"comment\":\"The payload for a SignedMessage sent during handshake for replication authentication.\"}}},\"greet\":{\"nested\":{\"BeginResponse\":{\"fields\":{\"info\":{\"keyType\":\"string\",\"type\":\"google.protobuf.Any\",\"id\":1,\"comment\":null}},\"comment\":null},\"ClaimResponse\":{\"fields\":{\"id\":{\"type\":\"bytes\",\"id\":1,\"comment\":null},\"rendezvousKey\":{\"type\":\"bytes\",\"id\":2,\"comment\":null}},\"comment\":null},\"Command\":{\"fields\":{\"command\":{\"type\":\"Type\",\"id\":1,\"comment\":null},\"secret\":{\"type\":\"bytes\",\"id\":2,\"comment\":null},\"params\":{\"rule\":\"repeated\",\"type\":\"google.protobuf.Any\",\"id\":10,\"comment\":null}},\"nested\":{\"Type\":{\"values\":{\"BEGIN\":0,\"HANDSHAKE\":1,\"NOTARIZE\":2,\"FINISH\":3,\"CLAIM\":10},\"comment\":null,\"comments\":{\"BEGIN\":null,\"HANDSHAKE\":null,\"NOTARIZE\":null,\"FINISH\":null,\"CLAIM\":null}}},\"comment\":\"A Greeter command.\"},\"HandshakeResponse\":{\"fields\":{\"nonce\":{\"type\":\"bytes\",\"id\":1,\"comment\":null},\"partyKey\":{\"type\":\"PubKey\",\"id\":2,\"comment\":null}},\"comment\":null},\"KeyHint\":{\"fields\":{\"publicKey\":{\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"type\":{\"type\":\"KeyType\",\"id\":2,\"comment\":null}},\"comment\":null},\"NotarizeResponse\":{\"fields\":{\"copies\":{\"rule\":\"repeated\",\"type\":\"google.protobuf.Any\",\"id\":1,\"comment\":null},\"hints\":{\"rule\":\"repeated\",\"type\":\"KeyHint\",\"id\":2,\"comment\":null}},\"comment\":null}}},\"identity\":{\"nested\":{\"DeviceInfo\":{\"fields\":{\"publicKey\":{\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"displayName\":{\"type\":\"string\",\"id\":2,\"comment\":null}},\"comment\":null},\"IdentityInfo\":{\"fields\":{\"publicKey\":{\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"displayName\":{\"type\":\"string\",\"id\":2,\"comment\":null}},\"comment\":null}}},\"Message\":{\"fields\":{\"payload\":{\"rule\":\"required\",\"type\":\"google.protobuf.Any\",\"id\":1,\"comment\":null}},\"comment\":null},\"party\":{\"nested\":{\"Envelope\":{\"fields\":{\"partyKey\":{\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"message\":{\"type\":\"Message\",\"id\":2,\"comment\":null}},\"comment\":null},\"FeedAdmit\":{\"fields\":{\"partyKey\":{\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"feedKey\":{\"type\":\"PubKey\",\"id\":2,\"comment\":null}},\"comment\":null},\"FeedGenesis\":{\"fields\":{\"feedKey\":{\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"ownerKey\":{\"type\":\"PubKey\",\"id\":2,\"comment\":null}},\"comment\":null},\"KeyAdmit\":{\"fields\":{\"partyKey\":{\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"admitKey\":{\"type\":\"PubKey\",\"id\":2,\"comment\":null},\"admitKeyType\":{\"type\":\"KeyType\",\"id\":3,\"comment\":null}},\"comment\":null},\"PartyCredential\":{\"oneofs\":{\"contents\":{\"oneof\":[\"envelope\",\"partyGenesis\",\"keyAdmit\",\"feedAdmit\",\"feedGenesis\"],\"comment\":null}},\"fields\":{\"type\":{\"type\":\"Type\",\"id\":1,\"comment\":null},\"envelope\":{\"type\":\"Envelope\",\"id\":10,\"comment\":null},\"partyGenesis\":{\"type\":\"PartyGenesis\",\"id\":11,\"comment\":null},\"keyAdmit\":{\"type\":\"KeyAdmit\",\"id\":12,\"comment\":null},\"feedAdmit\":{\"type\":\"FeedAdmit\",\"id\":13,\"comment\":null},\"feedGenesis\":{\"type\":\"FeedGenesis\",\"id\":14,\"comment\":null}},\"nested\":{\"Type\":{\"values\":{\"ENVELOPE\":0,\"PARTY_GENESIS\":1,\"FEED_GENESIS\":2,\"KEY_ADMIT\":3,\"FEED_ADMIT\":4},\"comment\":null,\"comments\":{\"ENVELOPE\":null,\"PARTY_GENESIS\":null,\"FEED_GENESIS\":null,\"KEY_ADMIT\":null,\"FEED_ADMIT\":null}}},\"comment\":null},\"PartyGenesis\":{\"fields\":{\"partyKey\":{\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"feedKey\":{\"type\":\"PubKey\",\"id\":2,\"comment\":null},\"admitKey\":{\"type\":\"PubKey\",\"id\":3,\"comment\":null},\"admitKeyType\":{\"type\":\"KeyType\",\"id\":4,\"comment\":null}},\"comment\":null},\"PartyInvitation\":{\"fields\":{\"id\":{\"type\":\"bytes\",\"id\":1,\"comment\":null},\"partyKey\":{\"type\":\"PubKey\",\"id\":2,\"comment\":null},\"issuerKey\":{\"type\":\"PubKey\",\"id\":3,\"comment\":null},\"inviteeKey\":{\"type\":\"PubKey\",\"id\":4,\"comment\":null}},\"comment\":null}}},\"SignedMessage\":{\"fields\":{\"signed\":{\"rule\":\"required\",\"type\":\"Signed\",\"id\":1,\"comment\":null},\"signatures\":{\"rule\":\"repeated\",\"type\":\"Signature\",\"id\":2,\"comment\":null}},\"nested\":{\"Signature\":{\"fields\":{\"key\":{\"rule\":\"required\",\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"signature\":{\"rule\":\"required\",\"type\":\"bytes\",\"id\":2,\"comment\":null},\"keyChain\":{\"type\":\"KeyChain\",\"id\":3,\"comment\":null}},\"comment\":null},\"Signed\":{\"fields\":{\"created\":{\"rule\":\"required\",\"type\":\"string\",\"id\":1,\"comment\":null},\"nonce\":{\"rule\":\"required\",\"type\":\"bytes\",\"id\":2,\"comment\":null},\"payload\":{\"rule\":\"required\",\"type\":\"google.protobuf.Any\",\"id\":10,\"comment\":null}},\"comment\":null}},\"comment\":\"A generic container message used whenever messages are signed (e.g. PartyCredential)\"}}},\"halo\":{\"nested\":{\"keys\":{\"nested\":{\"KeyChain\":{\"fields\":{\"publicKey\":{\"rule\":\"required\",\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"message\":{\"rule\":\"required\",\"type\":\"SignedMessage\",\"id\":2,\"comment\":null},\"parents\":{\"rule\":\"repeated\",\"type\":\"KeyChain\",\"id\":3,\"comment\":null}},\"comment\":null},\"KeyRecord\":{\"fields\":{\"type\":{\"rule\":\"required\",\"type\":\"KeyType\",\"id\":1,\"comment\":\"- The `KeyType` type of the key. This is often unknown for keys from other sources.\"},\"publicKey\":{\"rule\":\"required\",\"type\":\"PubKey\",\"id\":2,\"comment\":\"- The public key as a Buffer (required).\"},\"secretKey\":{\"type\":\"PrivKey\",\"id\":3,\"comment\":\"- The secret key as a Buffer (this will never be visible outside the Keyring).\"},\"hint\":{\"type\":\"bool\",\"id\":4,\"comment\":\"- Is this key from a Greeting \\\"hint\\\"?\"},\"own\":{\"type\":\"bool\",\"id\":5,\"comment\":\"- Is this our key? Usually true if `secretKey` is present,\\nmay be false for \\\"inception keys\\\" such as the Party key.\"},\"trusted\":{\"type\":\"bool\",\"id\":6,\"comment\":\"- Is this key to be trusted?\"},\"added\":{\"type\":\"string\",\"id\":7,\"comment\":\"- An RFC-3339 date/time string for when the key was added to the Keyring.\"},\"created\":{\"type\":\"string\",\"id\":8,\"comment\":\"- An RFC-3339 date/time string for when the key was created.\"}},\"comment\":null},\"KeyRecordList\":{\"fields\":{\"keys\":{\"rule\":\"repeated\",\"type\":\"KeyRecord\",\"id\":1,\"comment\":null}},\"comment\":null},\"KeyType\":{\"values\":{\"UNKNOWN\":0,\"IDENTITY\":1,\"DEVICE\":2,\"PARTY\":3,\"FEED\":4,\"DXNS_ADDRESS\":5},\"comment\":null,\"comments\":{\"UNKNOWN\":null,\"IDENTITY\":null,\"DEVICE\":null,\"PARTY\":null,\"FEED\":null,\"DXNS_ADDRESS\":null}},\"PrivKey\":{\"fields\":{\"data\":{\"type\":\"bytes\",\"id\":1,\"comment\":null}},\"comment\":null},\"PubKey\":{\"fields\":{\"data\":{\"type\":\"bytes\",\"id\":1,\"comment\":null}},\"comment\":null}}}}}}},\"google\":{\"nested\":{\"protobuf\":{\"nested\":{\"Any\":{\"fields\":{\"type_url\":{\"type\":\"string\",\"id\":1},\"value\":{\"type\":\"bytes\",\"id\":2}},\"comment\":null},\"BoolValue\":{\"fields\":{\"value\":{\"type\":\"bool\",\"id\":1}},\"comment\":null},\"BytesValue\":{\"fields\":{\"value\":{\"type\":\"bytes\",\"id\":1}},\"comment\":null},\"DoubleValue\":{\"fields\":{\"value\":{\"type\":\"double\",\"id\":1}},\"comment\":null},\"FloatValue\":{\"fields\":{\"value\":{\"type\":\"float\",\"id\":1}},\"comment\":null},\"Int32Value\":{\"fields\":{\"value\":{\"type\":\"int32\",\"id\":1}},\"comment\":null},\"Int64Value\":{\"fields\":{\"value\":{\"type\":\"int64\",\"id\":1}},\"comment\":null},\"StringValue\":{\"fields\":{\"value\":{\"type\":\"string\",\"id\":1}},\"comment\":null},\"UInt32Value\":{\"fields\":{\"value\":{\"type\":\"uint32\",\"id\":1}},\"comment\":null},\"UInt64Value\":{\"fields\":{\"value\":{\"type\":\"uint64\",\"id\":1}},\"comment\":null}}}}}}}");
+export const schemaJson = JSON.parse("{\"nested\":{\"dxos\":{\"nested\":{\"credentials\":{\"nested\":{\"auth\":{\"nested\":{\"Auth\":{\"fields\":{\"partyKey\":{\"type\":\"PubKey\",\"id\":1,\"comment\":\"The publicKey of the target Party for these credentials.\"},\"deviceKey\":{\"type\":\"PubKey\",\"id\":2,\"comment\":\"The publicKey of the authenticating Device.\"},\"identityKey\":{\"type\":\"PubKey\",\"id\":3,\"comment\":\"The publicKey of the authenticating Identity.\"},\"feedKey\":{\"type\":\"PubKey\",\"id\":4,\"comment\":\"The publicKey of the authenticating Identity.\"},\"feedAdmit\":{\"type\":\"google.protobuf.Any\",\"id\":5,\"comment\":\"FeedAdmit message to the should be written to a control feed in case the `feedKey` is not admitted to the party.\"}},\"comment\":\"The payload for a SignedMessage sent during handshake for replication authentication.\"}}},\"greet\":{\"nested\":{\"BeginResponse\":{\"fields\":{\"info\":{\"keyType\":\"string\",\"type\":\"google.protobuf.Any\",\"id\":1,\"comment\":null}},\"comment\":null},\"ClaimResponse\":{\"fields\":{\"id\":{\"type\":\"bytes\",\"id\":1,\"comment\":null},\"rendezvousKey\":{\"type\":\"bytes\",\"id\":2,\"comment\":null}},\"comment\":null},\"Command\":{\"fields\":{\"command\":{\"type\":\"Type\",\"id\":1,\"comment\":null},\"secret\":{\"type\":\"bytes\",\"id\":2,\"comment\":null},\"params\":{\"rule\":\"repeated\",\"type\":\"google.protobuf.Any\",\"id\":10,\"comment\":null}},\"nested\":{\"Type\":{\"values\":{\"BEGIN\":0,\"HANDSHAKE\":1,\"NOTARIZE\":2,\"FINISH\":3,\"CLAIM\":10},\"comment\":null,\"comments\":{\"BEGIN\":null,\"HANDSHAKE\":null,\"NOTARIZE\":null,\"FINISH\":null,\"CLAIM\":null}}},\"comment\":\"A Greeter command.\"},\"HandshakeResponse\":{\"fields\":{\"nonce\":{\"type\":\"bytes\",\"id\":1,\"comment\":null},\"partyKey\":{\"type\":\"PubKey\",\"id\":2,\"comment\":null}},\"comment\":null},\"KeyHint\":{\"fields\":{\"publicKey\":{\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"type\":{\"type\":\"KeyType\",\"id\":2,\"comment\":null}},\"comment\":null},\"NotarizeResponse\":{\"fields\":{\"copies\":{\"rule\":\"repeated\",\"type\":\"google.protobuf.Any\",\"id\":1,\"comment\":null},\"hints\":{\"rule\":\"repeated\",\"type\":\"KeyHint\",\"id\":2,\"comment\":null}},\"comment\":null}}},\"identity\":{\"nested\":{\"DeviceInfo\":{\"fields\":{\"publicKey\":{\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"displayName\":{\"type\":\"string\",\"id\":2,\"comment\":null}},\"comment\":null},\"IdentityInfo\":{\"fields\":{\"publicKey\":{\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"displayName\":{\"type\":\"string\",\"id\":2,\"comment\":null}},\"comment\":null}}},\"Message\":{\"fields\":{\"payload\":{\"rule\":\"required\",\"type\":\"google.protobuf.Any\",\"id\":1,\"comment\":null}},\"comment\":null},\"party\":{\"nested\":{\"Envelope\":{\"fields\":{\"partyKey\":{\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"message\":{\"type\":\"Message\",\"id\":2,\"comment\":null}},\"comment\":null},\"FeedAdmit\":{\"fields\":{\"partyKey\":{\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"feedKey\":{\"type\":\"PubKey\",\"id\":2,\"comment\":null}},\"comment\":null},\"FeedGenesis\":{\"fields\":{\"feedKey\":{\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"ownerKey\":{\"type\":\"PubKey\",\"id\":2,\"comment\":null}},\"comment\":null},\"KeyAdmit\":{\"fields\":{\"partyKey\":{\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"admitKey\":{\"type\":\"PubKey\",\"id\":2,\"comment\":null},\"admitKeyType\":{\"type\":\"KeyType\",\"id\":3,\"comment\":null}},\"comment\":null},\"PartyCredential\":{\"oneofs\":{\"contents\":{\"oneof\":[\"envelope\",\"partyGenesis\",\"keyAdmit\",\"feedAdmit\",\"feedGenesis\"],\"comment\":null}},\"fields\":{\"type\":{\"type\":\"Type\",\"id\":1,\"comment\":null},\"envelope\":{\"type\":\"Envelope\",\"id\":10,\"comment\":null},\"partyGenesis\":{\"type\":\"PartyGenesis\",\"id\":11,\"comment\":null},\"keyAdmit\":{\"type\":\"KeyAdmit\",\"id\":12,\"comment\":null},\"feedAdmit\":{\"type\":\"FeedAdmit\",\"id\":13,\"comment\":null},\"feedGenesis\":{\"type\":\"FeedGenesis\",\"id\":14,\"comment\":null}},\"nested\":{\"Type\":{\"values\":{\"ENVELOPE\":0,\"PARTY_GENESIS\":1,\"FEED_GENESIS\":2,\"KEY_ADMIT\":3,\"FEED_ADMIT\":4},\"comment\":null,\"comments\":{\"ENVELOPE\":null,\"PARTY_GENESIS\":null,\"FEED_GENESIS\":null,\"KEY_ADMIT\":null,\"FEED_ADMIT\":null}}},\"comment\":null},\"PartyGenesis\":{\"fields\":{\"partyKey\":{\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"feedKey\":{\"type\":\"PubKey\",\"id\":2,\"comment\":null},\"admitKey\":{\"type\":\"PubKey\",\"id\":3,\"comment\":null},\"admitKeyType\":{\"type\":\"KeyType\",\"id\":4,\"comment\":null}},\"comment\":null},\"PartyInvitation\":{\"fields\":{\"id\":{\"type\":\"bytes\",\"id\":1,\"comment\":null},\"partyKey\":{\"type\":\"PubKey\",\"id\":2,\"comment\":null},\"issuerKey\":{\"type\":\"PubKey\",\"id\":3,\"comment\":null},\"inviteeKey\":{\"type\":\"PubKey\",\"id\":4,\"comment\":null}},\"comment\":null}}},\"SignedMessage\":{\"fields\":{\"signed\":{\"rule\":\"required\",\"type\":\"Signed\",\"id\":1,\"comment\":null},\"signatures\":{\"rule\":\"repeated\",\"type\":\"Signature\",\"id\":2,\"comment\":null}},\"nested\":{\"Signature\":{\"fields\":{\"key\":{\"rule\":\"required\",\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"signature\":{\"rule\":\"required\",\"type\":\"bytes\",\"id\":2,\"comment\":null},\"keyChain\":{\"type\":\"KeyChain\",\"id\":3,\"comment\":null}},\"comment\":null},\"Signed\":{\"fields\":{\"created\":{\"rule\":\"required\",\"type\":\"string\",\"id\":1,\"comment\":null},\"nonce\":{\"rule\":\"required\",\"type\":\"bytes\",\"id\":2,\"comment\":null},\"payload\":{\"rule\":\"required\",\"type\":\"google.protobuf.Any\",\"id\":10,\"comment\":null}},\"comment\":null}},\"comment\":\"A generic container message used whenever messages are signed (e.g. PartyCredential)\"}}},\"halo\":{\"nested\":{\"keys\":{\"nested\":{\"KeyChain\":{\"fields\":{\"publicKey\":{\"rule\":\"required\",\"type\":\"PubKey\",\"id\":1,\"comment\":null},\"message\":{\"rule\":\"required\",\"type\":\"SignedMessage\",\"id\":2,\"comment\":null},\"parents\":{\"rule\":\"repeated\",\"type\":\"KeyChain\",\"id\":3,\"comment\":null}},\"comment\":null},\"KeyRecord\":{\"fields\":{\"type\":{\"rule\":\"required\",\"type\":\"KeyType\",\"id\":1,\"comment\":\"- The `KeyType` type of the key. This is often unknown for keys from other sources.\"},\"publicKey\":{\"rule\":\"required\",\"type\":\"PubKey\",\"id\":2,\"comment\":\"- The public key as a Buffer (required).\"},\"secretKey\":{\"type\":\"PrivKey\",\"id\":3,\"comment\":\"- The secret key as a Buffer (this will never be visible outside the Keyring).\"},\"hint\":{\"type\":\"bool\",\"id\":4,\"comment\":\"- Is this key from a Greeting \\\"hint\\\"?\"},\"own\":{\"type\":\"bool\",\"id\":5,\"comment\":\"- Is this our key? Usually true if `secretKey` is present,\\nmay be false for \\\"inception keys\\\" such as the Party key.\"},\"trusted\":{\"type\":\"bool\",\"id\":6,\"comment\":\"- Is this key to be trusted?\"},\"added\":{\"type\":\"string\",\"id\":7,\"comment\":\"- An RFC-3339 date/time string for when the key was added to the Keyring.\"},\"created\":{\"type\":\"string\",\"id\":8,\"comment\":\"- An RFC-3339 date/time string for when the key was created.\"}},\"comment\":null},\"KeyRecordList\":{\"fields\":{\"keys\":{\"rule\":\"repeated\",\"type\":\"KeyRecord\",\"id\":1,\"comment\":null}},\"comment\":null},\"KeyType\":{\"values\":{\"UNKNOWN\":0,\"IDENTITY\":1,\"DEVICE\":2,\"PARTY\":3,\"FEED\":4,\"DXNS_ADDRESS\":5},\"comment\":null,\"comments\":{\"UNKNOWN\":null,\"IDENTITY\":null,\"DEVICE\":null,\"PARTY\":null,\"FEED\":null,\"DXNS_ADDRESS\":null}},\"PrivKey\":{\"fields\":{\"data\":{\"type\":\"bytes\",\"id\":1,\"comment\":null}},\"comment\":null},\"PubKey\":{\"fields\":{\"data\":{\"type\":\"bytes\",\"id\":1,\"comment\":null}},\"comment\":null}}}}}}},\"google\":{\"nested\":{\"protobuf\":{\"nested\":{\"Any\":{\"fields\":{\"type_url\":{\"type\":\"string\",\"id\":1},\"value\":{\"type\":\"bytes\",\"id\":2}},\"comment\":null},\"BoolValue\":{\"fields\":{\"value\":{\"type\":\"bool\",\"id\":1}},\"comment\":null},\"BytesValue\":{\"fields\":{\"value\":{\"type\":\"bytes\",\"id\":1}},\"comment\":null},\"DoubleValue\":{\"fields\":{\"value\":{\"type\":\"double\",\"id\":1}},\"comment\":null},\"FloatValue\":{\"fields\":{\"value\":{\"type\":\"float\",\"id\":1}},\"comment\":null},\"Int32Value\":{\"fields\":{\"value\":{\"type\":\"int32\",\"id\":1}},\"comment\":null},\"Int64Value\":{\"fields\":{\"value\":{\"type\":\"int64\",\"id\":1}},\"comment\":null},\"StringValue\":{\"fields\":{\"value\":{\"type\":\"string\",\"id\":1}},\"comment\":null},\"UInt32Value\":{\"fields\":{\"value\":{\"type\":\"uint32\",\"id\":1}},\"comment\":null},\"UInt64Value\":{\"fields\":{\"value\":{\"type\":\"uint64\",\"id\":1}},\"comment\":null}}}}}}}");
 export const schema = Schema.fromJson<TYPES, SERVICES>(schemaJson, substitutions);

package/src/auth/auth.test.js

@@ -1,515 +0,0 @@
-//
-// Copyright 2019 DXOS.org
-//
-
-// DXOS testing browser.
-
-import expect from 'expect';
-import moment from 'moment';
-
-import { randomBytes } from '@dxos/crypto';
-
-import { Filter, Keyring } from '../keys';
-import {
-  admitsKeys,
-  createEnvelopeMessage,
-  createKeyAdmitMessage,
-  createPartyGenesisMessage,
-  PartyState
-} from '../party';
-import { codecLoop, KeyType } from '../proto';
-import { createAuthMessage } from './auth-message';
-import { PartyAuthenticator } from './authenticator';
-
-const createPartyKeyrings = async () => {
-  // This Keyring has the full key pairs, which is the case when creating a new Party.
-  const keyring = new Keyring();
-  for (const type of Object.values(KeyType)) {
-    if (typeof type === 'string') {
-      await keyring.createKeyRecord({ type: KeyType[type] });
-    }
-  }
-
-  const partyKey = keyring.findKey(Filter.matches({ type: KeyType.PARTY })).publicKey;
-
-  /* This Keyring will have nothing but the public key of the Party. This mimics the initial state
-   * when joining a Party, since all that is known at that time know at that time is the public key.
-   */
-  const bareKeyring = new Keyring();
-  await bareKeyring.addPublicKey({
-    publicKey: partyKey,
-    type: KeyType.PARTY,
-    trusted: true,
-    own: false
-  });
-
-  return {
-    partyKey,
-    keyring,
-    bareKeyring
-  };
-};
-
-/* eslint-disable unused-imports/no-unused-vars */
-const chainToString = (chain, depth = 0) => {
-  let ret = chain.publicKey.toHex() + '\n';
-  if (chain.parents.length) {
-    depth += 1;
-    for (const parent of chain.parents) {
-      let spaces = '';
-      for (let i = 0; i < depth; i++) {
-        spaces += '  ';
-      }
-      ret += `${spaces}-> ${chainToString(parent, depth)}`;
-    }
-  }
-  return ret;
-};
-/* eslint-enable @typescript-eslint/no-unused-vars */
-
-const messageMap = (messages) => {
-  const map = new Map();
-  for (const message of messages) {
-    const admits = admitsKeys(message);
-    for (const key of admits) {
-      map.set(key.toHex(), message);
-    }
-  }
-  return map;
-};
-
-const getIdentityKeyChainForDevice = (keyring, devicePublicKey, messages) => {
-  // Excludes all the FEED keys.
-  return Keyring.buildKeyChain(devicePublicKey, messages,
-    keyring.findKeys(Filter.matches({ type: KeyType.FEED })).map(key => key.publicKey));
-};
-
-it('Chain of Keys', async () => {
-  const haloKeyring = new Keyring();
-  const identityKey = await haloKeyring.createKeyRecord({ type: KeyType.PARTY });
-  const deviceKeyA = await haloKeyring.createKeyRecord({ type: KeyType.DEVICE });
-  const deviceKeyB = await haloKeyring.createKeyRecord({ type: KeyType.DEVICE });
-  const deviceKeyC = await haloKeyring.createKeyRecord({ type: KeyType.DEVICE });
-  const feedKeyA = await haloKeyring.createKeyRecord({ type: KeyType.FEED });
-
-  const messages = new Map();
-
-  // The first message in the chain in always a PartyGenesis for the Halo.
-  messages.set(identityKey.publicKey.toHex(), createPartyGenesisMessage(haloKeyring, identityKey, feedKeyA.publicKey, deviceKeyA));
-  messages.set(deviceKeyA.publicKey.toHex(), messages.get(identityKey.publicKey.toHex()));
-  messages.set(feedKeyA.publicKey.toHex(), messages.get(identityKey.publicKey.toHex()));
-
-  // Next is DeviceB greeted by DeviceA.
-  messages.set(deviceKeyB.publicKey.toHex(),
-    createEnvelopeMessage(haloKeyring, identityKey.publicKey,
-      createKeyAdmitMessage(haloKeyring, identityKey.publicKey, deviceKeyB, [deviceKeyB]),
-      [deviceKeyA]
-    ));
-
-  // Next is DeviceC greeted by DeviceB.
-  messages.set(deviceKeyC.publicKey.toHex(),
-    createEnvelopeMessage(haloKeyring, identityKey.publicKey,
-      createKeyAdmitMessage(haloKeyring, identityKey.publicKey, deviceKeyC, [deviceKeyC]),
-      [deviceKeyB]
-    ));
-
-  const targetKeyring = new Keyring();
-  await targetKeyring.addPublicKey({
-    publicKey: identityKey.publicKey,
-    type: KeyType.IDENTITY,
-    trusted: true,
-    own: false
-  });
-
-  for (const deviceKey of [deviceKeyA, deviceKeyB, deviceKeyC]) {
-    const emptyKeyring = new Keyring();
-    const chain = Keyring.buildKeyChain(deviceKey.publicKey, messages);
-    // In the target keyring, which only has the Identity, it should chase all the way back to the Identity.
-    expect(identityKey.publicKey).toEqual((await targetKeyring.findTrusted(chain)).publicKey);
-    // And in the halo, which has all the keys, it should chase straight back to this key.
-    expect(deviceKey.publicKey).toEqual((await haloKeyring.findTrusted(chain)).publicKey);
-    // And in an empty Keyring, we should not get anything.
-    expect(await emptyKeyring.findTrusted(chain)).toBeUndefined();
-  }
-});
-
-it('PartyAuthenticator - good direct', async () => {
-  const { keyring, partyKey } = await createPartyKeyrings();
-  const party = new PartyState(partyKey);
-  const auth = new PartyAuthenticator(party);
-
-  const identityKeyRecord = keyring.findKey(Keyring.signingFilter({ type: KeyType.IDENTITY }));
-
-  const messages = [
-    createPartyGenesisMessage(keyring,
-      keyring.findKey(Filter.matches({ type: KeyType.PARTY })),
-      keyring.findKey(Keyring.signingFilter({ type: KeyType.FEED })).publicKey,
-      identityKeyRecord
-    )
-  ];
-
-  // Only add the Identity to the party keyring.
-  await party.processMessages(messages);
-
-  const wrappedCredentials = codecLoop(
-    createAuthMessage(
-      keyring,
-      partyKey,
-      identityKeyRecord,
-      identityKeyRecord
-    )
-  );
-
-  const ok = await auth.authenticate(wrappedCredentials.payload);
-  expect(ok).toBe(true);
-});
-
-it('PartyAuthenticator - good chain', async () => {
-  const { keyring, partyKey } = await createPartyKeyrings();
-  const party = new PartyState(partyKey);
-  const auth = new PartyAuthenticator(party);
-
-  const identityKeyRecord = keyring.findKey(Keyring.signingFilter({ type: KeyType.IDENTITY }));
-  const deviceKeyRecord = keyring.findKey(Keyring.signingFilter({ type: KeyType.DEVICE }));
-  const secondDeviceKeyRecord = await keyring.createKeyRecord({ type: KeyType.DEVICE });
-
-  const messages = [
-    createPartyGenesisMessage(keyring,
-      keyring.findKey(Filter.matches({ type: KeyType.PARTY })),
-      keyring.findKey(Keyring.signingFilter({ type: KeyType.FEED })).publicKey,
-      identityKeyRecord
-    )
-  ];
-
-  // Only add the Identity to the party keyring.
-  await party.processMessages(messages);
-
-  const wrappedCredentials = codecLoop(
-    createAuthMessage(
-      keyring,
-      partyKey,
-      identityKeyRecord,
-      getIdentityKeyChainForDevice(
-        keyring,
-        secondDeviceKeyRecord.publicKey,
-        messageMap([
-          ...messages,
-          createKeyAdmitMessage(keyring, partyKey, deviceKeyRecord, [identityKeyRecord]),
-          createKeyAdmitMessage(keyring, partyKey, secondDeviceKeyRecord, [deviceKeyRecord])
-        ]
-        )
-      )
-    )
-  );
-
-  const ok = await auth.authenticate(wrappedCredentials.payload);
-  expect(ok).toBe(true);
-});
-
-it('PartyAuthenticator - bad chain', async () => {
-  const { keyring, partyKey } = await createPartyKeyrings();
-  const party = new PartyState(partyKey);
-  const auth = new PartyAuthenticator(party);
-
-  const identityKeyRecord = keyring.findKey(Keyring.signingFilter({ type: KeyType.IDENTITY }));
-  const deviceKeyRecord = keyring.findKey(Keyring.signingFilter({ type: KeyType.DEVICE }));
-  const secondDeviceKeyRecord = await keyring.createKeyRecord({ type: KeyType.DEVICE });
-
-  const messages = [
-    createPartyGenesisMessage(keyring,
-      keyring.findKey(Filter.matches({ type: KeyType.PARTY })),
-      keyring.findKey(Keyring.signingFilter({ type: KeyType.FEED })).publicKey,
-      identityKeyRecord
-    )
-  ];
-
-  // Only add the Identity to the party keyring.
-  await party.processMessages(messages);
-
-  // A bad chain, it doesn't track back to the Identity.
-  const chain = getIdentityKeyChainForDevice(
-    keyring,
-    secondDeviceKeyRecord.publicKey,
-    messageMap([
-      ...messages,
-      createKeyAdmitMessage(keyring, partyKey, deviceKeyRecord, [deviceKeyRecord]),
-      createKeyAdmitMessage(keyring, partyKey, secondDeviceKeyRecord, [deviceKeyRecord])
-    ]
-    )
-  );
-
-  const wrappedCredentials = codecLoop(
-    createAuthMessage(
-      keyring,
-      partyKey,
-      identityKeyRecord,
-      chain
-    )
-  );
-
-  const ok = await auth.authenticate(wrappedCredentials.payload);
-  expect(ok).toBe(false);
-});
-
-// TODO(dboreham): This test isn't discriminating errors because when I broke the code entirely it still passed.
-it('PartyAuthenticator - wrong key', async () => {
-  const { keyring, partyKey } = await createPartyKeyrings();
-  const party = new PartyState(partyKey);
-  const auth = new PartyAuthenticator(party);
-  const wrongKey = await keyring.createKeyRecord();
-
-  const messages = [
-    createPartyGenesisMessage(keyring,
-      keyring.findKey(Filter.matches({ type: KeyType.PARTY })),
-      keyring.findKey(Keyring.signingFilter({ type: KeyType.FEED })).publicKey,
-      keyring.findKey(Keyring.signingFilter({ type: KeyType.IDENTITY }))
-    )
-  ];
-  await party.processMessages(messages);
-
-  const wrappedCredentials = codecLoop(
-    createAuthMessage(
-      keyring,
-      partyKey,
-      keyring.findKey(Keyring.signingFilter({ type: KeyType.IDENTITY })),
-      wrongKey
-    )
-  );
-
-  const ok = await auth.authenticate(wrappedCredentials.payload);
-  expect(ok).toBe(false);
-});
-
-it('PartyAuthenticator - wrong party', async () => {
-  const { keyring, partyKey } = await createPartyKeyrings();
-  const party = new PartyState(partyKey);
-  const auth = new PartyAuthenticator(party);
-  const identityKeyRecord = keyring.findKey(Keyring.signingFilter({ type: KeyType.IDENTITY }));
-
-  const messages = [
-    createPartyGenesisMessage(keyring,
-      keyring.findKey(Filter.matches({ type: KeyType.PARTY })),
-      keyring.findKey(Keyring.signingFilter({ type: KeyType.FEED })).publicKey,
-      identityKeyRecord
-    )
-  ];
-  await party.processMessages(messages);
-
-  const wrappedCredentials = codecLoop(
-    createAuthMessage(
-      keyring,
-      randomBytes(32),
-      identityKeyRecord,
-      identityKeyRecord
-    )
-  );
-
-  const ok = await auth.authenticate(wrappedCredentials.payload);
-  expect(ok).toBe(false);
-});
-
-it('PartyAuthenticator - missing deviceKey', async () => {
-  const { keyring, partyKey } = await createPartyKeyrings();
-  const party = new PartyState(partyKey);
-  const auth = new PartyAuthenticator(party);
-
-  const identityKeyRecord = keyring.findKey(Keyring.signingFilter({ type: KeyType.IDENTITY }));
-
-  const messages = [
-    createPartyGenesisMessage(keyring,
-      keyring.findKey(Filter.matches({ type: KeyType.PARTY })),
-      keyring.findKey(Keyring.signingFilter({ type: KeyType.FEED })).publicKey,
-      keyring.findKey(Keyring.signingFilter({ type: KeyType.IDENTITY }))
-    )
-  ];
-  await party.processMessages(messages);
-
-  const wrappedCredentials = {
-    __type_url: 'dxos.credentials.Message',
-    payload:
-      keyring.sign({
-        __type_url: 'dxos.credentials.auth.Auth',
-        partyKey,
-        identityKey: identityKeyRecord.publicKey
-      }, [identityKeyRecord])
-  };
-
-  const ok = await auth.authenticate(wrappedCredentials.payload);
-  expect(ok).toBe(false);
-});
-
-it('PartyAuthenticator - tampered message', async () => {
-  const { keyring, partyKey } = await createPartyKeyrings();
-  const party = new PartyState(partyKey);
-  const auth = new PartyAuthenticator(party);
-  const identityKeyRecord = keyring.findKey(Keyring.signingFilter({ type: KeyType.IDENTITY }));
-
-  const messages = [
-    createPartyGenesisMessage(keyring,
-      keyring.findKey(Filter.matches({ type: KeyType.PARTY })),
-      keyring.findKey(Keyring.signingFilter({ type: KeyType.FEED })).publicKey,
-      identityKeyRecord
-    )
-  ];
-
-  await party.processMessages(messages);
-
-  const wrappedCredentials = codecLoop(
-    createAuthMessage(
-      keyring,
-      partyKey,
-      identityKeyRecord,
-      identityKeyRecord
-    )
-  );
-
-  const before = await auth.authenticate(wrappedCredentials.payload);
-  expect(before).toBe(true);
-
-  wrappedCredentials.payload.signed.payload.deviceKey = randomBytes(32);
-
-  const after = await auth.authenticate(wrappedCredentials.payload);
-  expect(after).toBe(false);
-});
-
-it('PartyAuthenticator - tampered signature', async () => {
-  const { keyring, partyKey } = await createPartyKeyrings();
-  const party = new PartyState(partyKey);
-  const auth = new PartyAuthenticator(party);
-  const identityKeyRecord = keyring.findKey(Keyring.signingFilter({ type: KeyType.IDENTITY }));
-
-  const messages = [
-    createPartyGenesisMessage(keyring,
-      keyring.findKey(Filter.matches({ type: KeyType.PARTY })),
-      keyring.findKey(Keyring.signingFilter({ type: KeyType.FEED })).publicKey,
-      identityKeyRecord
-    )
-  ];
-
-  await party.processMessages(messages);
-
-  const wrappedCredentials = codecLoop(
-    createAuthMessage(
-      keyring,
-      partyKey,
-      identityKeyRecord,
-      identityKeyRecord
-    )
-  );
-
-  const before = await auth.authenticate(wrappedCredentials.payload);
-  expect(before).toBe(true);
-
-  wrappedCredentials.payload.signatures[0].signature = randomBytes(64);
-
-  const after = await auth.authenticate(wrappedCredentials.payload);
-  expect(after).toBe(false);
-});
-
-it('PartyAuthenticator - signature too old', async () => {
-  const { keyring, partyKey } = await createPartyKeyrings();
-  const party = new PartyState(partyKey);
-  const auth = new PartyAuthenticator(party);
-  const identityKeyRecord = keyring.findKey(Keyring.signingFilter({ type: KeyType.IDENTITY }));
-  const deviceKeyRecord = keyring.findKey(Keyring.signingFilter({ type: KeyType.DEVICE }));
-
-  const messages = [
-    createPartyGenesisMessage(keyring,
-      keyring.findKey(Filter.matches({ type: KeyType.PARTY })),
-      keyring.findKey(Keyring.signingFilter({ type: KeyType.FEED })).publicKey,
-      identityKeyRecord
-    )
-  ];
-
-  await party.processMessages(messages);
-
-  const wrappedCredentials = {
-    __type_url: 'dxos.credentials.Message',
-    payload:
-      keyring.sign({
-        __type_url: 'dxos.credentials.auth.Auth',
-        partyKey,
-        identityKey: identityKeyRecord.publicKey,
-        deviceKey: deviceKeyRecord.publicKey
-      },
-      [identityKeyRecord],
-      null,
-      moment().subtract(2, 'days').format('YYYY-MM-DDTHH:mm:ssZ')
-      )
-  };
-
-  const ok = await auth.authenticate(wrappedCredentials.payload);
-  expect(ok).toBe(false);
-});
-
-it('PartyAuthenticator - signature too far in future', async () => {
-  const { keyring, partyKey } = await createPartyKeyrings();
-  const party = new PartyState(partyKey);
-  const auth = new PartyAuthenticator(party);
-  const identityKeyRecord = keyring.findKey(Keyring.signingFilter({ type: KeyType.IDENTITY }));
-  const deviceKeyRecord = keyring.findKey(Keyring.signingFilter({ type: KeyType.DEVICE }));
-
-  const messages = [
-    createPartyGenesisMessage(keyring,
-      keyring.findKey(Filter.matches({ type: KeyType.PARTY })),
-      keyring.findKey(Keyring.signingFilter({ type: KeyType.FEED })).publicKey,
-      identityKeyRecord
-    )
-  ];
-
-  await party.processMessages(messages);
-
-  const wrappedCredentials = {
-    __type_url: 'dxos.credentials.Message',
-    payload:
-      keyring.sign({
-        __type_url: 'dxos.credentials.auth.Auth',
-        partyKey,
-        identityKey: identityKeyRecord.publicKey,
-        deviceKey: deviceKeyRecord.publicKey
-      },
-      [identityKeyRecord],
-      null,
-      moment().add(2, 'days').format('YYYY-MM-DDTHH:mm:ssZ')
-      )
-  };
-
-  const ok = await auth.authenticate(wrappedCredentials.payload);
-  expect(ok).toBe(false);
-});
-
-it('PartyAuthenticator - signature date invalid', async () => {
-  const { keyring, partyKey } = await createPartyKeyrings();
-  const party = new PartyState(partyKey);
-  const auth = new PartyAuthenticator(party);
-  const identityKeyRecord = keyring.findKey(Keyring.signingFilter({ type: KeyType.IDENTITY }));
-  const deviceKeyRecord = keyring.findKey(Keyring.signingFilter({ type: KeyType.DEVICE }));
-
-  const messages = [
-    createPartyGenesisMessage(keyring,
-      keyring.findKey(Filter.matches({ type: KeyType.PARTY })),
-      keyring.findKey(Keyring.signingFilter({ type: KeyType.FEED })).publicKey,
-      identityKeyRecord
-    )
-  ];
-
-  await party.processMessages(messages);
-
-  const wrappedCredentials = {
-    __type_url: 'dxos.credentials.Message',
-    payload:
-      keyring.sign({
-        __type_url: 'dxos.credentials.auth.Auth',
-        partyKey,
-        identityKey: identityKeyRecord.publicKey,
-        deviceKey: deviceKeyRecord.publicKey
-      },
-      [identityKeyRecord],
-      null,
-      'INVALID'
-      )
-  };
-
-  const ok = await auth.authenticate(wrappedCredentials.payload);
-  expect(ok).toBe(false);
-});