This repository has been archived by the owner on Dec 12, 2024. It is now read-only.
generated from TBD54566975/tbd-project-template
-
Notifications
You must be signed in to change notification settings - Fork 55
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Schema Signing & Verification (#123)
* light request validation * Scheme delete api * optional schema signing * schema signing testing * verification not working yet * verification api and test * tests * generate new swagger * create one DB per test
- Loading branch information
Gabe
authored
Oct 11, 2022
1 parent
556edf7
commit cbc49af
Showing
18 changed files
with
931 additions
and
208 deletions.
There are no files selected for viewing
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,108 @@ | ||
| package keyaccess | ||
|
|
||
| import ( | ||
| "crypto" | ||
| "fmt" | ||
|
|
||
| "github.com/TBD54566975/ssi-sdk/cryptosuite" | ||
| didsdk "github.com/TBD54566975/ssi-sdk/did" | ||
| "github.com/goccy/go-json" | ||
| "github.com/lestrrat-go/jwx/jwk" | ||
| "github.com/mr-tron/base58" | ||
| "github.com/multiformats/go-multibase" | ||
| "github.com/multiformats/go-varint" | ||
| "github.com/pkg/errors" | ||
| "github.com/sirupsen/logrus" | ||
| ) | ||
|
|
||
| // GetVerificationInformation resolves a DID and provides a kid and public key needed for data verification | ||
| // it is possible that a DID has multiple verification methods, in which case a kid must be provided, otherwise | ||
| // resolution will fail. | ||
| func GetVerificationInformation(did didsdk.DIDDocument, maybeKID string) (kid string, pubKey crypto.PublicKey, err error) { | ||
| if did.IsEmpty() { | ||
| return "", nil, errors.Errorf("did doc: %+v is empty", did) | ||
| } | ||
| verificationMethods := did.VerificationMethod | ||
| if len(verificationMethods) == 0 { | ||
| return "", nil, errors.Errorf("did doc: %s has no verification methods", did.ID) | ||
| } | ||
|
|
||
| // handle the case where a kid is provided && there are multiple verification methods | ||
| if len(verificationMethods) > 1 { | ||
| if kid == "" { | ||
| return "", nil, errors.Errorf("kid is required for did: %s, which has multiple verification methods", did.ID) | ||
| } | ||
| for _, method := range verificationMethods { | ||
| if method.ID == kid { | ||
| kid = did.ID | ||
| pubKey, err = extractKeyFromVerificationMethod(verificationMethods[0]) | ||
| return | ||
| } | ||
| } | ||
| } | ||
| // TODO(gabe): some DIDs, like did:key have KIDs that aren't used, so we need to know when to use a kid vs the DID | ||
| kid = did.ID | ||
| pubKey, err = extractKeyFromVerificationMethod(verificationMethods[0]) | ||
| return | ||
| } | ||
|
|
||
| func extractKeyFromVerificationMethod(method didsdk.VerificationMethod) (pubKey crypto.PublicKey, err error) { | ||
| if method.PublicKeyMultibase != "" { | ||
| pubKeyBytes, multiBaseErr := multibaseToPubKeyBytes(method.PublicKeyMultibase) | ||
| if multiBaseErr != nil { | ||
| err = multiBaseErr | ||
| return | ||
| } | ||
| pubKey, err = cryptosuite.PubKeyBytesToTypedKey(pubKeyBytes, method.Type) | ||
| return | ||
| } else if method.PublicKeyBase58 != "" { | ||
| pubKeyDecoded, b58Err := base58.Decode(method.PublicKeyBase58) | ||
| if b58Err != nil { | ||
| err = b58Err | ||
| return | ||
| } | ||
| pubKey, err = cryptosuite.PubKeyBytesToTypedKey(pubKeyDecoded, method.Type) | ||
| return | ||
| } else if method.PublicKeyJWK != nil { | ||
| jwkBytes, jwkErr := json.Marshal(method.PublicKeyJWK) | ||
| if err != nil { | ||
| err = jwkErr | ||
| return | ||
| } | ||
| pubKey, err = jwk.ParseKey(jwkBytes) | ||
| return | ||
| } | ||
| err = errors.New("no public key found in verification method") | ||
| return | ||
| } | ||
|
|
||
| // multibaseToPubKey converts a multibase encoded public key to public key bytes for known multibase encodings | ||
| func multibaseToPubKeyBytes(mb string) ([]byte, error) { | ||
| if mb == "" { | ||
| err := fmt.Errorf("could not decode value: %s", mb) | ||
| logrus.WithError(err).Error() | ||
| return nil, err | ||
| } | ||
|
|
||
| encoding, decoded, err := multibase.Decode(mb) | ||
| if err != nil { | ||
| logrus.WithError(err).Error("could not decode did:key") | ||
| return nil, err | ||
| } | ||
| if encoding != didsdk.Base58BTCMultiBase { | ||
| err := fmt.Errorf("expected %d encoding but found %d", didsdk.Base58BTCMultiBase, encoding) | ||
| logrus.WithError(err).Error() | ||
| return nil, err | ||
| } | ||
|
|
||
| // n = # bytes for the int, which we expect to be two from our multicodec | ||
| _, n, err := varint.FromUvarint(decoded) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
| if n != 2 { | ||
| return nil, errors.New("error parsing did:key varint") | ||
| } | ||
| pubKeyBytes := decoded[n:] | ||
| return pubKeyBytes, nil | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.