Craig Raw
3 years ago
7 changed files with 304 additions and 7 deletions
@ -0,0 +1,2 @@ |
|||
mime-type=x-scheme-handler/auth47 |
|||
description=Auth47 Authentication URI |
|||
@ -0,0 +1,246 @@ |
|||
package com.sparrowwallet.sparrow.net; |
|||
|
|||
import com.google.gson.Gson; |
|||
import com.google.gson.GsonBuilder; |
|||
import com.sparrowwallet.drongo.ExtendedKey; |
|||
import com.sparrowwallet.drongo.KeyPurpose; |
|||
import com.sparrowwallet.drongo.crypto.ChildNumber; |
|||
import com.sparrowwallet.drongo.crypto.ECKey; |
|||
import com.sparrowwallet.drongo.protocol.ScriptType; |
|||
import com.sparrowwallet.drongo.wallet.Wallet; |
|||
import com.sparrowwallet.drongo.wallet.WalletNode; |
|||
import com.sparrowwallet.sparrow.AppServices; |
|||
import org.slf4j.Logger; |
|||
import org.slf4j.LoggerFactory; |
|||
|
|||
import java.io.BufferedReader; |
|||
import java.io.IOException; |
|||
import java.io.InputStreamReader; |
|||
import java.io.OutputStream; |
|||
import java.net.*; |
|||
import java.nio.charset.StandardCharsets; |
|||
import java.util.*; |
|||
|
|||
public class Auth47 { |
|||
private static final Logger log = LoggerFactory.getLogger(Auth47.class); |
|||
|
|||
public static final String SCHEME = "auth47"; |
|||
public static final String VERSION = "1.0"; |
|||
public static final String HTTPS_PROTOCOL = "https://"; |
|||
public static final String SRBN_PROTOCOL = "srbn://"; |
|||
|
|||
private final String nonce; |
|||
private final URL callback; |
|||
private final String expiry; |
|||
private boolean srbn; |
|||
private String srbnName; |
|||
private String resource; |
|||
|
|||
public Auth47(URI uri) throws MalformedURLException { |
|||
this.nonce = uri.getHost(); |
|||
|
|||
Map<String, String> parameterMap = new LinkedHashMap<>(); |
|||
String query = uri.getRawQuery(); |
|||
if(query == null) { |
|||
throw new IllegalArgumentException("No callback parameter provided."); |
|||
} |
|||
|
|||
if(query.startsWith("?")) { |
|||
query = query.substring(1); |
|||
} |
|||
|
|||
String[] pairs = query.split("&"); |
|||
for(String pair : pairs) { |
|||
int idx = pair.indexOf("="); |
|||
if(idx < 0) { |
|||
continue; |
|||
} |
|||
parameterMap.put(pair.substring(0, idx), pair.substring(idx + 1)); |
|||
} |
|||
|
|||
String strCallback = parameterMap.get("c"); |
|||
if(strCallback == null) { |
|||
throw new IllegalArgumentException("No callback parameter provided."); |
|||
} |
|||
if(strCallback.startsWith(SRBN_PROTOCOL)) { |
|||
String srbnCallback = HTTPS_PROTOCOL + strCallback.substring(SRBN_PROTOCOL.length()); |
|||
URL srbnUrl = new URL(srbnCallback); |
|||
this.srbn = true; |
|||
this.srbnName = srbnUrl.getUserInfo(); |
|||
this.callback = new URL(HTTPS_PROTOCOL + srbnUrl.getHost()); |
|||
} else { |
|||
this.callback = new URL(strCallback); |
|||
} |
|||
|
|||
this.expiry = parameterMap.get("e"); |
|||
this.resource = parameterMap.get("r"); |
|||
if(resource == null) { |
|||
if(srbn) { |
|||
this.resource = "srbn"; |
|||
} else if(strCallback.startsWith("http")) { |
|||
this.resource = strCallback; |
|||
} else { |
|||
throw new IllegalArgumentException("Invalid callback parameter (not http/s or srbn): " + strCallback); |
|||
} |
|||
} |
|||
} |
|||
|
|||
public void sendResponse(Wallet wallet) throws IOException, Auth47Exception { |
|||
if(!wallet.hasPaymentCode()) { |
|||
throw new Auth47Exception("A software wallet is required to authenticate."); |
|||
} |
|||
|
|||
if(srbn) { |
|||
sendSorobanResponse(wallet); |
|||
} else { |
|||
sendHttpResponse(wallet); |
|||
} |
|||
} |
|||
|
|||
public void sendHttpResponse(Wallet wallet) throws IOException, Auth47Exception { |
|||
String json = getJsonResponse(wallet); |
|||
|
|||
send(json); |
|||
} |
|||
|
|||
public void sendSorobanResponse(Wallet wallet) throws IOException, Auth47Exception { |
|||
String json = getJsonResponse(wallet); |
|||
|
|||
SorobanResponse sorobanResponse = new SorobanResponse(srbnName, json); |
|||
Gson gson = new GsonBuilder().disableHtmlEscaping().create(); |
|||
String jsonRpc = gson.toJson(sorobanResponse); |
|||
|
|||
send(jsonRpc); |
|||
} |
|||
|
|||
private String getJsonResponse(Wallet wallet) { |
|||
String challenge = getChallenge(); |
|||
String signature = sign(wallet, challenge); |
|||
|
|||
Response response = new Response(VERSION, challenge, signature, wallet.getPaymentCode().toString(), null); |
|||
Gson gson = new GsonBuilder().disableHtmlEscaping().create(); |
|||
return gson.toJson(response); |
|||
} |
|||
|
|||
private void send(String json) throws IOException, Auth47Exception { |
|||
if(log.isDebugEnabled()) { |
|||
log.debug("Sending " + json + " to " + callback); |
|||
} |
|||
|
|||
Proxy proxy = AppServices.getProxy(); |
|||
if(proxy == null && callback.getHost().toLowerCase().endsWith(TorService.TOR_ADDRESS_SUFFIX)) { |
|||
throw new Auth47Exception("A Tor proxy must be configured to authenticate this resource."); |
|||
} |
|||
|
|||
HttpURLConnection connection = proxy == null ? (HttpURLConnection) callback.openConnection() : (HttpURLConnection) callback.openConnection(proxy); |
|||
connection.setRequestMethod("POST"); |
|||
connection.setRequestProperty("Content-Type", "application/json"); |
|||
connection.setDoOutput(true); |
|||
|
|||
try(OutputStream os = connection.getOutputStream()) { |
|||
byte[] jsonBytes = json.getBytes(StandardCharsets.UTF_8); |
|||
os.write(jsonBytes); |
|||
} |
|||
|
|||
int statusCode = connection.getResponseCode(); |
|||
if(statusCode == 404) { |
|||
throw new Auth47Exception("Could not authenticate. Callback URL of " + callback + " returned a 404 response."); |
|||
} |
|||
|
|||
StringBuilder res = new StringBuilder(); |
|||
try(BufferedReader br = new BufferedReader(new InputStreamReader(connection.getInputStream(), StandardCharsets.UTF_8))) { |
|||
String responseLine; |
|||
while((responseLine = br.readLine()) != null) { |
|||
res.append(responseLine.trim()); |
|||
} |
|||
} |
|||
|
|||
if(log.isDebugEnabled()) { |
|||
log.debug("Received " + statusCode + " " + res); |
|||
} |
|||
|
|||
if(statusCode < 200 || statusCode >= 300) { |
|||
throw new Auth47Exception("Could not authenticate. Server returned " + res); |
|||
} |
|||
} |
|||
|
|||
private String sign(Wallet wallet, String challenge) { |
|||
try { |
|||
Wallet notificationWallet = wallet.getNotificationWallet(); |
|||
WalletNode notificationNode = notificationWallet.getNode(KeyPurpose.NOTIFICATION); |
|||
ExtendedKey extendedPrivateKey = notificationWallet.getKeystores().get(0).getBip47ExtendedPrivateKey(); |
|||
List<ChildNumber> derivation = new ArrayList<>(); |
|||
derivation.add(extendedPrivateKey.getKeyChildNumber()); |
|||
derivation.addAll(notificationNode.getDerivation()); |
|||
ECKey privKey = extendedPrivateKey.getKey(derivation); |
|||
return privKey.signMessage(challenge, ScriptType.P2PKH); |
|||
} catch(Exception e) { |
|||
log.error("Error signing auth47 challenge", e); |
|||
throw new IllegalStateException("Error signing auth47 challenge: " + e.getMessage(), e); |
|||
} |
|||
} |
|||
|
|||
private String getChallenge() { |
|||
return SCHEME + "://" + nonce + "?r=" + resource + (expiry == null ? "" : "&e=" + expiry); |
|||
} |
|||
|
|||
public URL getCallback() { |
|||
return callback; |
|||
} |
|||
|
|||
private static class Response { |
|||
public Response(String version, String challenge, String signature, String paymentCode, String address) { |
|||
this.auth47_response = version; |
|||
this.challenge = challenge; |
|||
this.signature = signature; |
|||
this.nym = paymentCode; |
|||
this.address = address; |
|||
} |
|||
|
|||
public String auth47_response; |
|||
public String challenge; |
|||
public String signature; |
|||
public String nym; |
|||
public String address; |
|||
} |
|||
|
|||
private static class SorobanResponse { |
|||
public SorobanResponse(String name, String response) { |
|||
params.add(new SorobanParam(name, response)); |
|||
} |
|||
|
|||
public String jsonrpc = "2.0"; |
|||
public int id = 0; |
|||
public String method = "directory.Add"; |
|||
public List<SorobanParam> params = new ArrayList<>(); |
|||
} |
|||
|
|||
private static class SorobanParam { |
|||
public SorobanParam(String name, String entry) { |
|||
Name = name; |
|||
Entry = entry; |
|||
} |
|||
|
|||
public String Name; |
|||
public String Entry; |
|||
public String Mode = "short"; |
|||
} |
|||
|
|||
public static final class Auth47Exception extends Exception { |
|||
public Auth47Exception(String message) { |
|||
super(message); |
|||
} |
|||
|
|||
public Auth47Exception(String message, Throwable cause) { |
|||
super(message, cause); |
|||
} |
|||
|
|||
public Auth47Exception(Throwable cause) { |
|||
super(cause); |
|||
} |
|||
|
|||
public Auth47Exception(String message, Throwable cause, boolean enableSuppression, boolean writableStackTrace) { |
|||
super(message, cause, enableSuppression, writableStackTrace); |
|||
} |
|||
} |
|||
} |
|||
Loading…
Reference in new issue