bitcore-wallet-service/lib/clientlib.js

'use strict';

var _ = require('lodash');
var async = require('async');
var log = require('npmlog');
var request = require('request')
log.debug = log.verbose;
log.level = 'debug';
var fs = require('fs')

var Bitcore = require('bitcore')
var SignUtils = require('./signutils');

var BASE_URL = 'http://localhost:3001/copay/api';

function _createProposalOpts(opts, signingKey) {
  var msg = opts.toAddress + '|' + opts.amount + '|' + opts.message;
  opts.proposalSignature = SignUtils.sign(msg, signingKey);
  return opts;
};

function _getUrl(path) {
  return BASE_URL + path;
};

function _parseError(body) {
  if (_.isString(body)) {
    try {
      body = JSON.parse(body);
    } catch (e) {
      body = {
        error: body
      };
    }
  }
  var code = body.code || 'ERROR';
  var message = body.error || 'There was an unknown error processing the request';
  log.error(code, message);
};

function _signRequest(url, args, privKey) {
  var message = url + '|' + JSON.stringify(args);
  return SignUtils.sign(message, privKey);
};

function _createXPrivKey(network) {
  return new Bitcore.HDPrivateKey(network).toString();
};

function ClientLib(opts) {
  if (!opts.filename) {
    throw new Error('Please set the config filename');
  }
  this.filename = opts.filename;
};

ClientLib.prototype._save = function(data) {
  fs.writeFileSync(this.filename, JSON.stringify(data));
};

ClientLib.prototype._load = function() {
  try {
    return JSON.parse(fs.readFileSync(this.filename));
  } catch (ex) {}
};

ClientLib.prototype._loadAndCheck = function() {
  var data = this._load();
  if (!data) {
    log.error('Wallet file not found.');
    process.exit(1);
  }

  if (data.verified == 'corrupt') {
    log.error('The wallet is tagged as corrupt. Some of the copayers cannot be verified to have known the wallet secret.');
    process.exit(1);
  }
  if (data.n > 1) {
    var pkrComplete = data.publicKeyRing && data.m && data.publicKeyRing.length === data.n;
    if (!pkrComplete) {
      log.warn('The file ' + this.filename + ' is incomplete. It will allow you to operate with the wallet but it should not be trusted as a backup. Please wait for all copayers to join the wallet and run the tool with -export flag.')
    }
  }
  return data;
};

ClientLib.prototype.createWallet = function(walletName, copayerName, m, n, network, cb) {
  var self = this;
  network = network || 'livenet';
  if (!_.contains(['testnet', 'livenet'], network))
    return cb('Invalid network');

  var data = this._load();
  if (data) return cb('File ' + this.filename + ' already contains a wallet');

  // Generate wallet key pair to verify copayers
  var privKey = new Bitcore.PrivateKey(null, network);
  var pubKey = privKey.toPublicKey();

  data = {
    m: m,
    n: n,
    walletPrivKey: privKey.toString(),
  };

  var args = {
    name: walletName,
    m: m,
    n: n,
    pubKey: pubKey.toString(),
    network: network,
  };

  request({
    method: 'post',
    url: _getUrl('/v1/wallets/'),
    body: args,
    json: true,
  }, function(err, res, body) {
    if (err) return cb(err);
    if (res.statusCode != 200) {
      _parseError(body);
      return cb('Request error');
    }

    var walletId = body.walletId;
    var secret = walletId + ':' + privKey.toString() + ':' + (network == 'testnet' ? 'T' : 'L');
    data.secret = secret;

    self._save(data);
    self._joinWallet(data, secret, copayerName, function(err) {
      if (err) return cb(err);

      return cb(null, data.secret);
    });
  });
};

ClientLib.prototype._joinWallet = function(data, secret, copayerName, cb) {
  var self = this;
  data = data || {};

  var secretSplit = secret.split(':');
  var walletId = secretSplit[0];

  var walletPrivKey = Bitcore.PrivateKey.fromString(secretSplit[1]);
  var network = secretSplit[2] == 'T' ? 'testnet' : 'livenet';
  data.xPrivKey = _createXPrivKey(network);

  var xPubKey = new Bitcore.HDPublicKey(data.xPrivKey);
  var xPubKeySignature = SignUtils.sign(xPubKey.toString(), walletPrivKey);

  var signingPrivKey = (new Bitcore.HDPrivateKey(data.xPrivKey)).derive('m/1/0').privateKey;
  var args = {
    walletId: walletId,
    name: copayerName,
    xPubKey: xPubKey.toString(),
    xPubKeySignature: xPubKeySignature,
  };

  request({
    method: 'post',
    url: _getUrl('/v1/wallets/' + walletId + '/copayers'),
    body: args,
    json: true,
  }, function(err, res, body) {
    if (err) return cb(err);
    if (res.statusCode != 200) {
      _parseError(body);
      return cb('Request error');
    }

    var wallet = body.wallet;
    data.copayerId = body.copayerId;
    data.walletPrivKey = walletPrivKey;
    data.signingPrivKey = signingPrivKey.toString();
    data.m = wallet.m;
    data.n = wallet.n;
    data.publicKeyRing = wallet.publicKeyRing;
    self._save(data);

    return cb();
  });
};

ClientLib.prototype.joinWallet = function(secret, copayerName, cb) {
  var self = this;

  var data = this._load();
  if (data) return cb('File ' + this.filename + ' already contains a wallet');

  self._joinWallet(data, secret, copayerName, cb);
};

ClientLib.prototype.status = function(cb) {
  var self = this;

  var data = this._loadAndCheck();

  var url = '/v1/wallets/';
  var signature = _signRequest(url, {}, data.signingPrivKey);

  request({
    headers: {
      'x-identity': data.copayerId,
      'x-signature': signature,
    },
    method: 'get',
    url: _getUrl(url),
    json: true,
  }, function(err, res, body) {
    if (err) return cb(err);
    if (res.statusCode != 200) {
      _parseError(body);
      return cb('Request error');
    }
    var wallet = body;
    // TODO
    //console.log('[clilib.js.214:wallet:]',wallet); //TODO

    if (wallet.n > 0 && wallet.status === 'complete' && !data.verified) {
      var pubKey = Bitcore.PrivateKey.fromString(data.walletPrivKey).toPublicKey().toString();
      var fake = [];
      _.each(wallet.copayers, function(copayer) {


        console.log('[clilib.js.224]', copayer.xPubKey, copayer.xPubKeySignature, pubKey); //TODO
        if (!SignUtils.verify(copayer.xPubKey, copayer.xPubKeySignature, pubKey)) {

          console.log('[clilib.js.227] FAKE'); //TODO
          fake.push(copayer);
        }
      });
      if (fake.length > 0) {
        log.error('Some copayers in the wallet could not be verified to have known the wallet secret');
        data.verified = 'corrupt';
      } else {
        data.verified = 'ok';
      }
      self._save(data);
    }

    return cb(null, wallet);
  });
};

/**
 * send
 *
 * @param inArgs
 * @param inArgs.toAddress
 * @param inArgs.amount
 * @param inArgs.message
 */
ClientLib.prototype.send = function(inArgs, cb) {
  var self = this;

  var data = this._loadAndCheck();
  var args = _createProposalOpts(inArgs, data.signingPrivKey);

  var url = '/v1/txproposals/';
  var signature = _signRequest(url, args, data.signingPrivKey);
  request({
    headers: {
      'x-identity': data.copayerId,
      'x-signature': signature,
    },
    method: 'post',
    url: _getUrl(url),
    body: args,
    json: true,
  }, function(err, res, body) {
    if (err) return cb(err);
    if (res.statusCode != 200) {
      _parseError(body);
      return cb('Request error');
    }
    return cb(null, body);
  });

};

// Get addresses
ClientLib.prototype.addresses = function(cb) {
  var self = this;

  var data = this._loadAndCheck();

  var url = '/v1/addresses/';
  var signature = _signRequest(url, {}, data.signingPrivKey);

  request({
    headers: {
      'x-identity': data.copayerId,
      'x-signature': signature,
    },
    method: 'get',
    url: _getUrl(url),
    json: true,
  }, function(err, res, body) {
    if (err) return cb(err);
    if (res.statusCode != 200) {
      _parseError(body);
      return cb('Request error');
    }
    return cb(null, body);
  });
};


// Creates a new address 
// TODO: verify derivation!!
ClientLib.prototype.address = function(cb) {
  var self = this;

  var data = this._loadAndCheck();

  var url = '/v1/addresses/';
  var signature = _signRequest(url, {}, data.signingPrivKey);

  request({
    headers: {
      'x-identity': data.copayerId,
      'x-signature': signature,
    },
    method: 'post',
    url: _getUrl(url),
    json: true,
  }, function(err, res, body) {
    if (err) return cb(err);
    if (res.statusCode != 200) {
      _parseError(body);
      return cb('Request error');
    }
    return cb(null, body);
  });
};

ClientLib.prototype.history = function(limit, cb) {

};

ClientLib.prototype.balance = function(cb) {
  var self = this;

  var data = this._loadAndCheck();

  var url = '/v1/balance/';
  var signature = _signRequest(url, {}, data.signingPrivKey);

  request({
    headers: {
      'x-identity': data.copayerId,
      'x-signature': signature,
    },
    method: 'get',
    url: _getUrl(url),
    json: true,
  }, function(err, res, body) {
    if (err) return cb(err);
    if (res.statusCode != 200) {
      _parseError(body);
      return cb('Request error');
    }
    return cb(null, body);
  });
};


ClientLib.prototype.txProposals = function(opts, cb) {
  var self = this;

  var data = this._loadAndCheck();

  var url = '/v1/txproposals/';
  var signature = _signRequest(url, {}, data.signingPrivKey);

  request({
    headers: {
      'x-identity': data.copayerId,
      'x-signature': signature,
    },
    method: 'get',
    url: _getUrl(url),
    json: true,
  }, function(err, res, body) {
    if (err) return cb(err);
    if (res.statusCode != 200) {
      _parseError(body);
      return cb('Request error');
    }
    return cb(null, body);
  });
};

ClientLib.prototype.sign = function(txp, cb) {
  var self = this;
  var data = this._loadAndCheck();


  //Derive proper key to sign, for each input
  var privs = [],
    derived = {};

  var network = new Bitcore.Address(txp.toAddress).network.name;
  var xpriv = new Bitcore.HDPrivateKey(data.xPrivKey, network);

  _.each(txp.inputs, function(i) {
    if (!derived[i.path]) {
      derived[i.path] = xpriv.derive(i.path).privateKey;
    }
    privs.push(derived[i.path]);
  });

  var t = new Bitcore.Transaction();
  _.each(txp.inputs, function(i) {
    t.from(i, i.publicKeys, txp.requiredSignatures);
  });

  t.to(txp.toAddress, txp.amount)
    .change(txp.changeAddress)
    .sign(privs);

  var signatures = [];
  _.each(privs, function(p) {
    var s = t.getSignatures(p)[0].signature.toDER().toString('hex');
    signatures.push(s);
  });

  var url = '/v1/txproposals/' + txp.id + '/signatures/';
  var args = {
    signatures: signatures
  };
  var reqSignature = _signRequest(url, args, data.signingPrivKey);
  console.log('[clientlib.js.441:reqSignature:]', url, args, reqSignature); //TODO

  request({
    headers: {
      'x-identity': data.copayerId,
      'x-signature': reqSignature,
    },
    method: 'post',
    url: _getUrl(url),
    body: args,
    json: true,
  }, function(err, res, body) {
    if (err) return cb(err);
    if (res.statusCode != 200) {
      _parseError(body);
      return cb('Request error');
    }
    return cb(null, body);
  });
};

ClientLib.prototype.reject = function(txp, reason, cb) {
  var self = this;
  var data = this._loadAndCheck();

  var url = '/v1/txproposals/' + txp.id + '/rejections/';
  var args = {
    reason: reason || '',
  };
  var reqSignature = _signRequest(url, args, data.signingPrivKey);

  request({
    headers: {
      'x-identity': data.copayerId,
      'x-signature': reqSignature,
    },
    method: 'post',
    url: _getUrl(url),
    body: args,
    json: true,
  }, function(err, res, body) {
    if (err) return cb(err);
    if (res.statusCode != 200) {
      _parseError(body);
      return cb('Request error');
    }
    return cb(null, body);
  });
};

module.exports = ClientLib;