commit 31a765e4bdabd3dd139dbaf1f6ab2d39c7d60115 · gmstn.systems/shard

+10 -10

src/lib/types/atproto.ts

···

       47
       47
        
       });

     

       48
       48
        
       export type AtUri = z.infer<typeof atUriSchema>;

     

       49
       49
        
       

     

       50
       50
       +
       export const verificationMethodSchema = z.object({

     

       51
       51
       +
           id: z.string(),

     

       52
       52
       +
           type: z.string(),

     

       53
       53
       +
           controller: z.string(),

     

       54
       54
       +
           publicKeyMultibase: z.string(),

     

       55
       55
       +
       });

     

       56
       56
       +
       export type VerificationMethod = z.infer<typeof verificationMethodSchema>;

     

       57
       57
       +
       

     

       50
       58
        
       export const didDocumentSchema = z.object({

     

       59
       59
       +
           "@context": z.array(z.string()),

     

       51
       60
        
           id: z.string(),

     

       52
       61
        
           alsoKnownAs: z.optional(z.array(z.string())),

     

       53
       53
       -
           verificationMethod: z.optional(

     

       54
       54
       -
               z.array(

     

       55
       55
       -
                   z.object({

     

       56
       56
       -
                       id: z.string(),

     

       57
       57
       -
                       type: z.string(),

     

       58
       58
       -
                       controller: z.string(),

     

       59
       59
       -
                       publicKeyMultibase: z.string(),

     

       60
       60
       -
                   }),

     

       61
       61
       -
               ),

     

       62
       62
       -
           ),

     

       62
       62
       +
           verificationMethod: z.optional(z.array(verificationMethodSchema)),

     

       63
       63
        
           service: z.optional(

     

       64
       64
        
               z.array(

     

       65
       65
        
                   z.object({

+102

src/lib/utils/did.ts

···

       1
       1
       +
       import type {

     

       2
       2
       +
           DidDocument,

     

       3
       3
       +
           DidWeb,

     

       4
       4
       +
           VerificationMethod,

     

       5
       5
       +
       } from "@/lib/types/atproto";

     

       6
       6
       +
       import { Secp256k1PrivateKeyExportable } from "@atcute/crypto";

     

       7
       7
       +
       import { toString as uint8arraysToString } from "uint8arrays";

     

       8
       8
       +
       

     

       9
       9
       +
       export interface ServiceKeys {

     

       10
       10
       +
           atproto: Secp256k1PrivateKeyExportable;

     

       11
       11
       +
           service: Secp256k1PrivateKeyExportable;

     

       12
       12
       +
       }

     

       13
       13
       +
       

     

       14
       14
       +
       export interface CreateDidWebDocResult {

     

       15
       15
       +
           didDoc: DidDocument;

     

       16
       16
       +
           keys: ServiceKeys;

     

       17
       17
       +
       }

     

       18
       18
       +
       

     

       19
       19
       +
       export const createDidWebDoc = async (

     

       20
       20
       +
           didWeb: DidWeb,

     

       21
       21
       +
       ): Promise<CreateDidWebDocResult> => {

     

       22
       22
       +
           const atprotoKey = await Secp256k1PrivateKeyExportable.createKeypair();

     

       23
       23
       +
           const serviceKey = await Secp256k1PrivateKeyExportable.createKeypair();

     

       24
       24
       +
       

     

       25
       25
       +
           const atprotoMultikey = encodeMultikey(

     

       26
       26
       +
               await atprotoKey.exportPublicKey("raw"),

     

       27
       27
       +
           );

     

       28
       28
       +
           const serviceMultikey = encodeMultikey(

     

       29
       29
       +
               await atprotoKey.exportPublicKey("raw"),

     

       30
       30
       +
           );

     

       31
       31
       +
       

     

       32
       32
       +
           const { domain, serviceEndpoint } = extractInfoFromDidWeb(didWeb);

     

       33
       33
       +
       

     

       34
       34
       +
           const verificationMethod: Array<VerificationMethod> = [

     

       35
       35
       +
               {

     

       36
       36
       +
                   id: `${didWeb}#atproto`,

     

       37
       37
       +
                   type: "Multikey",

     

       38
       38
       +
                   controller: didWeb,

     

       39
       39
       +
                   publicKeyMultibase: atprotoMultikey,

     

       40
       40
       +
               },

     

       41
       41
       +
           ];

     

       42
       42
       +
       

     

       43
       43
       +
           const didDoc: DidDocument = {

     

       44
       44
       +
               "@context": [

     

       45
       45
       +
                   "https://www.w3.org/ns/did/v1",

     

       46
       46
       +
                   "https://w3id.org/security/multikey/v1",

     

       47
       47
       +
               ],

     

       48
       48
       +
               id: didWeb,

     

       49
       49
       +
               verificationMethod,

     

       50
       50
       +
           };

     

       51
       51
       +
       

     

       52
       52
       +
           if (serviceEndpoint) {

     

       53
       53
       +
               const serviceEndpointType = "GemstoneShard";

     

       54
       54
       +
       

     

       55
       55
       +
               const serviceEndpointUrl = `https://${domain}/`;

     

       56
       56
       +
       

     

       57
       57
       +
               // @ts-expect-error we are already adding the verificationMethod array above when we create didDoc.

     

       58
       58
       +
               didDoc.verificationMethod.push({

     

       59
       59
       +
                   id: `${didWeb}#${serviceEndpoint}`,

     

       60
       60
       +
                   type: "Multikey",

     

       61
       61
       +
                   controller: didWeb,

     

       62
       62
       +
                   publicKeyMultibase: serviceMultikey,

     

       63
       63
       +
               });

     

       64
       64
       +
       

     

       65
       65
       +
               didDoc.service = [

     

       66
       66
       +
                   {

     

       67
       67
       +
                       id: `${didWeb}#${serviceEndpoint}`,

     

       68
       68
       +
                       type: serviceEndpointType,

     

       69
       69
       +
                       serviceEndpoint: serviceEndpointUrl,

     

       70
       70
       +
                   },

     

       71
       71
       +
               ];

     

       72
       72
       +
           }

     

       73
       73
       +
       

     

       74
       74
       +
           return {

     

       75
       75
       +
               didDoc,

     

       76
       76
       +
               keys: {

     

       77
       77
       +
                   atproto: atprotoKey,

     

       78
       78
       +
                   service: serviceKey,

     

       79
       79
       +
               },

     

       80
       80
       +
           };

     

       81
       81
       +
       };

     

       82
       82
       +
       

     

       83
       83
       +
       const encodeMultikey = (publicKeyBytes: Uint8Array) => {

     

       84
       84
       +
           // For secp256k1 (K-256), prefix with 0xE701

     

       85
       85
       +
           const prefixed = new Uint8Array(publicKeyBytes.length + 2);

     

       86
       86
       +
           prefixed[0] = 0xe7;

     

       87
       87
       +
           prefixed[1] = 0x01;

     

       88
       88
       +
           prefixed.set(publicKeyBytes, 2);

     

       89
       89
       +
       

     

       90
       90
       +
           // Base58-btc encode with 'z' prefix

     

       91
       91
       +
           const value = uint8arraysToString(prefixed, "base58btc");

     

       92
       92
       +
       

     

       93
       93
       +
           return "z" + value;

     

       94
       94
       +
       };

     

       95
       95
       +
       

     

       96
       96
       +
       const extractInfoFromDidWeb = (didWeb: DidWeb) => {

     

       97
       97
       +
           const fragments = didWeb.split("#");

     

       98
       98
       +
           return {

     

       99
       99
       +
               domain: fragments[0].replace("did:web:", ""),

     

       100
       100
       +
               serviceEndpoint: fragments[1] as string | undefined,

     

       101
       101
       +
           };

     

       102
       102
       +
       };

+43

src/routes/dot-well-known/did-dot-json/route.ts

···

       1
       1
       +
       import { SERVICE_DID } from "@/lib/env";

     

       2
       2
       +
       import type { Did } from "@/lib/types/atproto";

     

       3
       3
       +
       import { didDocumentSchema, didWebSchema } from "@/lib/types/atproto";

     

       4
       4
       +
       import type { Route, RouteHandler } from "@/lib/types/routes";

     

       5
       5
       +
       import { createDidWebDoc } from "@/lib/utils/did";

     

       6
       6
       +
       import { newErrorResponse } from "@/lib/utils/http/responses";

     

       7
       7
       +
       

     

       8
       8
       +
       const routeHandlerFactory = (did: Did) => {

     

       9
       9
       +
           const serveDidPlc: RouteHandler = async () => {

     

       10
       10
       +
               const plcDirectoryReq = new Request(`https://plc.directory/${did}`);

     

       11
       11
       +
               const plcDirectoryRes = await fetch(plcDirectoryReq);

     

       12
       12
       +
               const {

     

       13
       13
       +
                   success,

     

       14
       14
       +
                   data: didDocument,

     

       15
       15
       +
                   error,

     

       16
       16
       +
               } = didDocumentSchema.safeParse(await plcDirectoryRes.json());

     

       17
       17
       +
       

     

       18
       18
       +
               if (!success)

     

       19
       19
       +
                   return newErrorResponse(500, {

     

       20
       20
       +
                       message:

     

       21
       21
       +
                           "did:plc was not set properly. Either the Shard's did:plc is wrong, or the did:plc was not registered with a public ledger.",

     

       22
       22
       +
                       details: error,

     

       23
       23
       +
                   });

     

       24
       24
       +
       

     

       25
       25
       +
               return Response.json(didDocument);

     

       26
       26
       +
           };

     

       27
       27
       +
       

     

       28
       28
       +
           const { success: isDidWeb, data: didWeb } = didWebSchema.safeParse(did);

     

       29
       29
       +
           if (!isDidWeb) return serveDidPlc;

     

       30
       30
       +
       

     

       31
       31
       +
           const serveDidDoc: RouteHandler = () => {

     

       32
       32
       +
               const didDoc = createDidWebDoc(didWeb);

     

       33
       33
       +
       

     

       34
       34
       +
               return Response.json(didDoc);

     

       35
       35
       +
           };

     

       36
       36
       +
       

     

       37
       37
       +
           return serveDidDoc;

     

       38
       38
       +
       };

     

       39
       39
       +
       

     

       40
       40
       +
       export const didWebDocRoute: Route = {

     

       41
       41
       +
           method: "GET",

     

       42
       42
       +
           handler: routeHandlerFactory(SERVICE_DID),

     

       43
       43
       +
       };