authConfirmation.js

'use strict';

/*

This is incomplete!
To do:
- modify bitcore to accept string indexes
- add app column to my_addresses table
- add choice of cosigners when m<n
- implement signAuthRequest()
- update handling of "sign" command in cosigners so that they accept auth requests, not just payments
- post the result to site url
- allow to change keys of the wallet, update definitions for all apps/domains saved so far
- send the chain of key changes with the response

*/

var ecdsaSig = require('ocore/signature.js');

angular.module('copayApp.controllers').controller('authConfirmationController',
  function($scope, $timeout, configService, profileService, go, authService) {
    
    function extractDomainFromUrl(url){
        var domain_with_path = url.replace(/^https?:\/\//i, '');
        var domain = domain_with_path.replace(/\/.*$/, '');
        domain = domain.replace(/^www\./i, '');
        return domain;
    }
    
    var self = this;
	var bbWallet = require('ocore/wallet.js');
    
    // the wallet to sign with
    $scope.walletId = profileService.focusedClient.credentials.walletId;
    
    var objRequest = authService.objRequest;
    if (!objRequest)
        throw Error("no request");
    
    var app_name;
    if (objRequest.app)
        app_name = objRequest.app;
    else if (objRequest.url)
        app_name = extractDomainFromUrl(objRequest.url);
    else
        throw Error("neither app nor url");
    
    if (objRequest.question)
        $scope.question = objRequest.question;
    else
        $scope.question = "Log in to "+app_name+"?";
    
    var arrSigningDeviceAddresses = []; // todo allow to choose the devices that are to sign
    
    $scope.yes = function() {
        console.log("yes");
        var credentials = lodash.find(profileService.profile.credentials, {walletId: $scope.walletId});
        if (!credentials)
            throw Error("unknown wallet: "+$scope.walletId);
        var coin = (credentials.network == 'livenet' ? "0" : "1");

        var signWithLocalPrivateKey = function(wallet_id, account, is_change, address_index, text_to_sign, handleSig){
            var path = "m/44'/" + coin + "'/" + account + "'/"+is_change+"/"+address_index;
            var xPrivKey = new Bitcore.HDPrivateKey.fromString(profileService.focusedClient.credentials.xPrivKey); // todo unlock the key if encrypted
            var privateKey = xPrivKey.derive(path).privateKey;
            //var privKeyBuf = privateKey.toBuffer();
            var privKeyBuf = privateKey.bn.toBuffer({size:32}); // https://github.com/bitpay/bitcore-lib/issues/47
            handleSig(ecdsaSig.sign(text_to_sign, privKeyBuf));
        };

        // create a new app/domain-bound address if not created already
        bbWallet.issueOrSelectAddressForApp(credentials.walletId, app_name, function(address){
            bbWallet.signAuthRequest(credentials.walletId, objRequest, arrSigningDeviceAddresses, signWithLocalPrivateKey, function(err){
                go.walletHome();
            });
        });
    };

    $scope.no = function() {
        // do nothing
        console.log("no");
        go.walletHome();
    };


  });