commit 9bda00df9daa891e9a0096145ac68589c5ea1834 · knotbin.com/airport

+28 -6

islands/DidPlcProgress.tsx

···

       206
        
             return;

     

       207
        
           }

     

       208
        
       

     

       209
       -
           updateStepStatus(1, "in-progress");

     

       210
        
           try {

     

       0
        
       
     

       211
        
             console.log("Submitting update request with token...");

     

       212
        
             // Send the update request with both key and token

     

       213
        
             const res = await fetch("/api/plc/update", {

     
···

       240
        
             setUpdateResult("PLC update completed successfully!");

     

       241
        
       

     

       242
        
             // Add a delay before marking steps as completed for better UX

     

       243
       -
             updateStepStatus(1, "verifying");

     

       244
       -
             updateStepStatus(2, "in-progress");

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       245
        
       

     

       246
       -
             await new Promise((resolve) => setTimeout(resolve, 1500));

     

       247
       -
             updateStepStatus(1, "completed");

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       248
        
       

     

       249
       -
             await new Promise((resolve) => setTimeout(resolve, 1000));

     

       250
        
             updateStepStatus(2, "completed");

     

       251
        
           } catch (error) {

     

       252
        
             console.error("Update failed:", error);

···

       206
        
             return;

     

       207
        
           }

     

       208
        
       

     

       209
       +
           updateStepStatus(1, "completed");

     

       210
        
           try {

     

       211
       +
             updateStepStatus(2, "in-progress");

     

       212
        
             console.log("Submitting update request with token...");

     

       213
        
             // Send the update request with both key and token

     

       214
        
             const res = await fetch("/api/plc/update", {

     
···

       241
        
             setUpdateResult("PLC update completed successfully!");

     

       242
        
       

     

       243
        
             // Add a delay before marking steps as completed for better UX

     

       244
       +
             updateStepStatus(2, "verifying");

     

       245
       +
       

     

       246
       +
             const verifyRes = await fetch("/api/plc/verify", {

     

       247
       +
               method: "POST",

     

       248
       +
               headers: { "Content-Type": "application/json" },

     

       249
       +
               body: JSON.stringify({

     

       250
       +
                 key: keyJson.publicKeyDid,

     

       251
       +
               }),

     

       252
       +
             });

     

       253
       +
       

     

       254
       +
             const verifyText = await verifyRes.text();

     

       255
       +
             console.log("Verification response:", verifyText);

     

       256
       +
       

     

       257
       +
             let verifyData;

     

       258
       +
             try {

     

       259
       +
               verifyData = JSON.parse(verifyText);

     

       260
       +
             } catch {

     

       261
       +
               throw new Error("Invalid verification response from server");

     

       262
       +
             }

     

       263
        
       

     

       264
       +
             if (!verifyRes.ok || !verifyData.success) {

     

       265
       +
               const errorMessage =

     

       266
       +
                 verifyData.message || "Failed to verify PLC update";

     

       267
       +
               console.error("Verification failed:", errorMessage);

     

       268
       +
               throw new Error(errorMessage);

     

       269
       +
             }

     

       270
        
       

     

       271
       +
             console.log("Verification successful, marking steps as completed");

     

       272
        
             updateStepStatus(2, "completed");

     

       273
        
           } catch (error) {

     

       274
        
             console.error("Update failed:", error);

+36 -10

routes/api/plc/update.ts

···

       1
        
       import { getSessionAgent } from "../../../lib/sessions.ts";

     

       2
       -
       import { setCredentialSession } from "../../../lib/cred/sessions.ts";

     

       3
       -
       import { Agent } from "@atproto/api";

     

       4
        
       import { define } from "../../../utils.ts";

     

       0
        
       
     

       5
        
       

     

       6
        
       /**

     

       7
        
        * Handle PLC update operation

     
···

       40
        
               return new Response("Unauthorized", { status: 401 });

     

       41
        
             }

     

       42
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       43
        
             // Get recommended credentials first

     

       44
       -
             console.log("Getting recommended credentials...");

     

       45
       -
             const getDidCredentials =

     

       46
       -
               await agent.com.atproto.identity.getRecommendedDidCredentials();

     

       47
       -
             console.log("Got recommended credentials:", {

     

       48
       -
               rotationKeys: getDidCredentials.data.rotationKeys,

     

       49
       -
               hasRotationKeys: !!getDidCredentials.data.rotationKeys?.length,

     

       50
       -
             });

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       51
        
       

     

       52
       -
             const rotationKeys = getDidCredentials.data.rotationKeys ?? [];

     

       53
        
             if (!rotationKeys.length) {

     

       54
        
               console.log("No existing rotation keys found");

     

       55
        
               throw new Error("No rotation keys provided in recommended credentials");

···

       1
        
       import { getSessionAgent } from "../../../lib/sessions.ts";

     

       0
        
       
     

       0
        
       
     

       2
        
       import { define } from "../../../utils.ts";

     

       3
       +
       import * as plc from "@did-plc/lib";

     

       4
        
       

     

       5
        
       /**

     

       6
        
        * Handle PLC update operation

     
···

       39
        
               return new Response("Unauthorized", { status: 401 });

     

       40
        
             }

     

       41
        
       

     

       42
       +
             const session = await agent.com.atproto.server.getSession();

     

       43
       +
             const did = session.data.did;

     

       44
       +
             if (!did) {

     

       45
       +
               console.log("No DID found in session");

     

       46
       +
               return new Response(

     

       47
       +
                 JSON.stringify({

     

       48
       +
                   success: false,

     

       49
       +
                   message: "No DID found in your session",

     

       50
       +
                 }),

     

       51
       +
                 {

     

       52
       +
                   status: 400,

     

       53
       +
                   headers: { "Content-Type": "application/json" },

     

       54
       +
                 }

     

       55
       +
               );

     

       56
       +
             }

     

       57
       +
             console.log("Using agent DID:", did);

     

       58
       +
       

     

       59
        
             // Get recommended credentials first

     

       60
       +
             console.log("Getting did:plc document...");

     

       61
       +
             const plcClient = new plc.Client("https://plc.directory");

     

       62
       +
             const didDoc = await plcClient.getDocumentData(did);

     

       63
       +
             if (!didDoc) {

     

       64
       +
               console.log("No DID document found for agent DID");

     

       65
       +
               return new Response(

     

       66
       +
                 JSON.stringify({

     

       67
       +
                   success: false,

     

       68
       +
                   message: "No DID document found for your account",

     

       69
       +
                 }),

     

       70
       +
                 {

     

       71
       +
                   status: 400,

     

       72
       +
                   headers: { "Content-Type": "application/json" },

     

       73
       +
                 }

     

       74
       +
               );

     

       75
       +
             }

     

       76
       +
             console.log("Got DID document:", didDoc);

     

       77
        
       

     

       78
       +
             const rotationKeys = didDoc.rotationKeys ?? [];

     

       79
        
             if (!rotationKeys.length) {

     

       80
        
               console.log("No existing rotation keys found");

     

       81
        
               throw new Error("No rotation keys provided in recommended credentials");

+131

routes/api/plc/verify.ts

···

       1
       +
       import { getSessionAgent } from "../../../lib/sessions.ts";

     

       2
       +
       import { define } from "../../../utils.ts";

     

       3
       +
       import * as plc from "@did-plc/lib";

     

       4
       +
       

     

       5
       +
       /**

     

       6
       +
        * Verify if a rotation key exists in the PLC document

     

       7
       +
        * Body must contain:

     

       8
       +
        * - key: The rotation key to verify

     

       9
       +
        * @param ctx - The context object containing the request and response

     

       10
       +
        * @returns A response object with the verification result

     

       11
       +
        */

     

       12
       +
       export const handler = define.handlers({

     

       13
       +
         async POST(ctx) {

     

       14
       +
           const res = new Response();

     

       15
       +
           try {

     

       16
       +
             const body = await ctx.req.json();

     

       17
       +
             const { key: newKey } = body;

     

       18
       +
             console.log("Request body:", { newKey });

     

       19
       +
       

     

       20
       +
             if (!newKey) {

     

       21
       +
               console.log("Missing key in request");

     

       22
       +
               return new Response("Missing param key in request body", {

     

       23
       +
                 status: 400,

     

       24
       +
               });

     

       25
       +
             }

     

       26
       +
       

     

       27
       +
             const agent = await getSessionAgent(ctx.req, res);

     

       28
       +
             if (!agent) {

     

       29
       +
               console.log("No agent found");

     

       30
       +
               return new Response("Unauthorized", { status: 401 });

     

       31
       +
             }

     

       32
       +
       

     

       33
       +
             const session = await agent.com.atproto.server.getSession();

     

       34
       +
             const did = session.data.did;

     

       35
       +
             if (!did) {

     

       36
       +
               console.log("No DID found in session");

     

       37
       +
               return new Response(

     

       38
       +
                 JSON.stringify({

     

       39
       +
                   success: false,

     

       40
       +
                   message: "No DID found in your session",

     

       41
       +
                 }),

     

       42
       +
                 {

     

       43
       +
                   status: 400,

     

       44
       +
                   headers: { "Content-Type": "application/json" },

     

       45
       +
                 }

     

       46
       +
               );

     

       47
       +
             }

     

       48
       +
             console.log("Using agent DID:", did);

     

       49
       +
       

     

       50
       +
             // Fetch the PLC document to check rotation keys

     

       51
       +
             console.log("Getting did:plc document...");

     

       52
       +
             const plcClient = new plc.Client("https://plc.directory");

     

       53
       +
             const didDoc = await plcClient.getDocumentData(did);

     

       54
       +
             if (!didDoc) {

     

       55
       +
               console.log("No DID document found for agent DID");

     

       56
       +
               return new Response(

     

       57
       +
                 JSON.stringify({

     

       58
       +
                   success: false,

     

       59
       +
                   message: "No DID document found for your account",

     

       60
       +
                 }),

     

       61
       +
                 {

     

       62
       +
                   status: 400,

     

       63
       +
                   headers: { "Content-Type": "application/json" },

     

       64
       +
                 }

     

       65
       +
               );

     

       66
       +
             }

     

       67
       +
             console.log("Got DID document:", didDoc);

     

       68
       +
       

     

       69
       +
             const rotationKeys = didDoc.rotationKeys ?? [];

     

       70
       +
             if (!rotationKeys.length) {

     

       71
       +
               console.log("No existing rotation keys found");

     

       72
       +
               throw new Error("No rotation keys found in did:plc document");

     

       73
       +
             }

     

       74
       +
       

     

       75
       +
             // Check if the key exists in rotation keys

     

       76
       +
             if (rotationKeys.includes(newKey)) {

     

       77
       +
               return new Response(

     

       78
       +
                 JSON.stringify({

     

       79
       +
                   success: true,

     

       80
       +
                   message: "Rotation key exists in PLC document",

     

       81
       +
                 }),

     

       82
       +
                 {

     

       83
       +
                   status: 200,

     

       84
       +
                   headers: {

     

       85
       +
                     "Content-Type": "application/json",

     

       86
       +
                     ...Object.fromEntries(res.headers), // Include session cookie headers

     

       87
       +
                   },

     

       88
       +
                 }

     

       89
       +
               );

     

       90
       +
             }

     

       91
       +
       

     

       92
       +
             // If we get here, the key was not found

     

       93
       +
             return new Response(

     

       94
       +
               JSON.stringify({

     

       95
       +
                 success: false,

     

       96
       +
                 message: "Rotation key not found in PLC document",

     

       97
       +
               }),

     

       98
       +
               {

     

       99
       +
                 status: 404,

     

       100
       +
                 headers: { "Content-Type": "application/json" },

     

       101
       +
               }

     

       102
       +
             );

     

       103
       +
           } catch (error) {

     

       104
       +
             console.error("PLC verification error:", error);

     

       105
       +
             const errorMessage =

     

       106
       +
               error instanceof Error

     

       107
       +
                 ? error.message

     

       108
       +
                 : "Failed to verify rotation key";

     

       109
       +
             console.log("Sending error response:", errorMessage);

     

       110
       +
       

     

       111
       +
             return new Response(

     

       112
       +
               JSON.stringify({

     

       113
       +
                 success: false,

     

       114
       +
                 message: errorMessage,

     

       115
       +
                 error:

     

       116
       +
                   error instanceof Error

     

       117
       +
                     ? {

     

       118
       +
                         name: error.name,

     

       119
       +
                         message: error.message,

     

       120
       +
                         stack: error.stack,

     

       121
       +
                       }

     

       122
       +
                     : String(error),

     

       123
       +
               }),

     

       124
       +
               {

     

       125
       +
                 status: 400,

     

       126
       +
                 headers: { "Content-Type": "application/json" },

     

       127
       +
               }

     

       128
       +
             );

     

       129
       +
           }

     

       130
       +
         },

     

       131
       +
       });