Search…
Open Climate
Prompts & Working Groups
Co-organizers
PAST COLLABATHONS
Technical Considerations
Deep dive in to setting up micro-services to facilitate ledger interactions.
Proxy Signing Service
​Sawtooth is built for enterprises and has some limitations that need to be considered when allowing public write access to a database. To interact with Transaction Processors(TPs) memory must be managed in the signed batch of transactions. These complexities have lead to building a simple Relay Process Command(RPC) which is described below. This is built with Node.js and happens inside an express.js server instance 'app':
index.js { transaction proxying }
1
app.get('/adv-build', (req, res, next) => {
2
var auth = false
3
if (req.session) auth = authed(req.session.user)
4
if (!auth) {
5
delete req.session
6
res.redirect('/login')
7
} else {
8
//[1-4Now all the memory access has been permission by Batch Processor (BP) signature (authorization is important). The transactions have been listed, that batch has been built and signed and "finished" into a package.]
9
}
10
});
Copied!
This authorization check should happen in middleware; here for linearity.
Here a JSON web token is verified against our secret key. This token could be delivered by magic link.
1
function authed(user) {
2
var auth = false
3
try {
4
if (user && localUsers[jwt.verify(user.token, sessionSecretKey).sub] != null) {
5
auth = true //If session exists, proceed to page
6
}
7
} catch (e) { console.log('JWT Error: ' + e)}
8
return auth
9
}
Copied!
Once the user is verified a method to hand form data over is used; here in url query:
index.js [1]
1
var payload = {
2
[req.query.vt || 'Verb']: req.query.verb || 'inc',
3
[req.query.nt || 'Name']: req.query.action || 'test',
4
[req.query.at || 'Value']: req.query.desc || parseInt(req.query.num) || 1
5
}
6
if (req.query.addr || req.query.rt) {
7
payload[req.query.rt || 'addr'] = req.query.addr || null
8
}
9
if (req.query.family === 'emre') {
10
payload = `${
11
req.query.verb || '0002019CO2T8642'},${
12
req.query.action || 'create'},${
13
req.query.desc || '000_2019_CO2_T_8642_test_Qmtest'}`
14
}
Copied!
This supports building any type of transaction. It was modeled off the intKey transaction family but includes methods to change to any transaction payload with three strings. More complex transactions will need more work here and refinement is suggested. By default this will generate a transaction that will increment an intKey at the 'test' address. If emission records(emre) are requested a test transaction is also built there. From here we will be talking through selecting both of these types.
index.js [2]
1
let payloadBytes
2
var inputs = [], //addresses to read
3
outputs = [] //addresses to write
4
const _hash = (x) => // crypto = require('crypto')
5
crypto.createHash('sha512').update(x).digest('hex').toLowerCase()
6
const _hash64 = (x) =>
7
crypto.createHash('sha512').update(x).digest('hex').toLowerCase().substring(0, 64)
8
const INT_KEY_FAMILY = 'intkey'
9
const INT_KEY_NAMESPACE = _hash(INT_KEY_FAMILY).substring(0, 6)
10
​
11
const EMSSIONS_KEY_FAMILY = 'emre'
12
const EMSSIONS_KEY_NAMESPACE = _hash(EMSSIONS_KEY_FAMILY).substring(0, 6)
13
switch (req.query.family) {
14
case 'emre':
15
inputs.push(EMSSIONS_KEY_NAMESPACE + _hash64(payload.split(',')[0])) //test for allowed names?
16
outputs.push(EMSSIONS_KEY_NAMESPACE + _hash64(payload.split(',')[0]))
17
payloadBytes = Buffer.from(payload, 'utf-8')
18
break;
19
case 'intkey'://intkey
20
default: //intkey
21
inputs.push(INT_KEY_NAMESPACE + _hash(payload.Name).slice(-64))
22
outputs.push(INT_KEY_NAMESPACE + _hash(payload.Name).slice(-64))
23
payloadBytes = cbor.encode(payload)
24
}
Copied!
TPs are expecting properly formatted payloads in properly signed and addressed batches. Depending on how the TP is made will determine the type of payload it is expecting. IntKey expects a concise binary object representation (cbor) while emission records uses a standard utf-8 buffer available in node.
Depending on which TP is intended will determine the addressing scheme. Both of these transactions only take the same input and write to the same output. To build reference tables and utilize internal data dependencies for these addressing schemes will also require more addresses to be added to these input and output arrays.
Now that we have out payload encoded for each of their possible TPs let's look at how signing occurs.
index.js [3]
1
const transactionHeaderBytes = protobuf.TransactionHeader.encode({
2
familyName: req.query.family || 'intkey', //can these be arrays? this could be a goverenace limitation
3
familyVersion: req.query.version || '1.0',
4
inputs: inputs,
5
outputs: outputs,
6
signerPublicKey: signer.getPublicKey().asHex(),//public keys for signers
7
batcherPublicKey: signer.getPublicKey().asHex(),//'signer' is batch processor key
8
dependencies: [],
9
payloadSha512: createHash('sha512').update(payloadBytes).digest('hex')
10
}).finish()
11
const signature = signer.sign(transactionHeaderBytes)//sign header bytes
12
​
13
const transaction = protobuf.Transaction.create({
14
header: transactionHeaderBytes,
15
headerSignature: signature,
16
payload: payloadBytes
17
}) //
18
const transactions = [transaction] //can include multiple in batch
19
const batchHeaderBytes = protobuf.BatchHeader.encode({
20
signerPublicKey: signer.getPublicKey().asHex(),
21
transactionIds: transactions.map((txn) => txn.headerSignature),
22
}).finish()
23
​
24
const bsignature = signer.sign(batchHeaderBytes)
25
​
26
const batch = protobuf.Batch.create({
27
header: batchHeaderBytes,
28
headerSignature: bsignature,
29
transactions: transactions
30
})
31
​
32
const batchListBytes = protobuf.BatchList.encode({
33
batches: [batch]
34
}).finish()
Copied!
All that's left to do is send off the batch to our sawtooth api running normally at port 8008
index.js [4]
1
request.post({
2
url: 'http://127.0.0.1:8008/batches',
3
body: batchListBytes,
4
headers: { 'Content-Type': 'application/octet-stream' }
5
}, (err, response) => {
6
var link = JSON.parse(response.body).link
7
if (err) {
8
res.setHeader('Content-Type', 'application/json');
9
res.send(JSON.stringify({ payload, err, res: response.body }, null, 3))
10
console.log(err)
11
} else {
12
if (link) {
13
console.log('Followed: ' + link)
14
request.get({
15
url: link
16
}, (e, r) => {
17
if (e) return console.log(e)
18
res.setHeader('Content-Type', 'application/json');
19
var body = JSON.parse(r.body)
20
var link = body.link.replace(/127.0.0.1:8008/g, req.headers.host)
21
res.send(JSON.stringify({ payload, inputs, outputs, data: body.data, link }, null, 3))
22
})
23
} else {
24
res.setHeader('Content-Type', 'application/json');
25
res.send(JSON.stringify({ payload, inputs, outputs, body: JSON.parse(response.body) }, null, 3))
26
}
27
}
28
})
Copied!
Following which the confirmation/status link is re-wrapped and returned to the user.
​
Last modified 2yr ago
Copy link