api_token_generate.go

// Copyright (C) 2023 Gobalsky Labs Limited
//
// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU Affero General Public License as
// published by the Free Software Foundation, either version 3 of the
// License, or (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU Affero General Public License for more details.
//
// You should have received a copy of the GNU Affero General Public License
// along with this program.  If not, see <http://www.gnu.org/licenses/>.

package cmd

import (
	"context"
	"errors"
	"fmt"
	"io"
	"time"

	"code.vegaprotocol.io/vega/cmd/vegawallet/commands/cli"
	"code.vegaprotocol.io/vega/cmd/vegawallet/commands/flags"
	"code.vegaprotocol.io/vega/cmd/vegawallet/commands/printer"
	"code.vegaprotocol.io/vega/paths"
	v2 "code.vegaprotocol.io/vega/wallet/service/v2"
	"code.vegaprotocol.io/vega/wallet/service/v2/connections"
	tokenStoreV1 "code.vegaprotocol.io/vega/wallet/service/v2/connections/store/longliving/v1"
	"code.vegaprotocol.io/vega/wallet/wallets"

	"github.com/spf13/cobra"
)

var (
	generateAPITokenLong = cli.LongDesc(`
		Generate a long-living API token
	`)

	generateAPITokenExample = cli.Examples(`
		# Generate a long-living API token
		{{.Software}} api-token generate --description DESCRIPTION --wallet-name WALLET
	`)
)

type GenerateAPITokenHandler func(f GenerateAPITokenFlags, params connections.GenerateAPITokenParams) (connections.Token, error)

func NewCmdGenerateAPIToken(w io.Writer, rf *RootFlags) *cobra.Command {
	h := func(f GenerateAPITokenFlags, params connections.GenerateAPITokenParams) (connections.Token, error) {
		vegaPaths := paths.New(rf.Home)

		walletStore, err := wallets.InitialiseStoreFromPaths(vegaPaths, false)
		if err != nil {
			return "", fmt.Errorf("couldn't initialise wallets store: %w", err)
		}
		defer walletStore.Close()

		tokenStore, err := tokenStoreV1.InitialiseStore(vegaPaths, f.passphrase)
		if err != nil {
			if errors.Is(err, tokenStoreV1.ErrWrongPassphrase) {
				return "", fmt.Errorf("could not unlock the token store: %w", err)
			}
			return "", fmt.Errorf("couldn't load the token store: %w", err)
		}
		defer tokenStore.Close()

		handler := connections.NewGenerateAPITokenHandler(walletStore, tokenStore, v2.NewStdTime())
		return handler.Handle(context.Background(), params)
	}

	return BuildCmdGenerateAPIToken(w, ensureAPITokenStoreIsInit, h, rf)
}

func BuildCmdGenerateAPIToken(w io.Writer, preCheck APITokenPreCheck, handler GenerateAPITokenHandler, rf *RootFlags) *cobra.Command {
	f := &GenerateAPITokenFlags{}

	cmd := &cobra.Command{
		Use:     "generate",
		Short:   "Generate a long-living API token",
		Long:    generateAPITokenLong,
		Example: generateAPITokenExample,
		RunE: func(_ *cobra.Command, _ []string) error {
			if err := preCheck(rf); err != nil {
				return err
			}

			params, err := f.Validate()
			if err != nil {
				return err
			}

			res, err := handler(*f, params)
			if err != nil {
				return err
			}

			switch rf.Output {
			case flags.InteractiveOutput:
				printGeneratedAPIToken(w, params, res)
			case flags.JSONOutput:
				return printer.FprintJSON(w, struct {
					Token connections.Token `json:"token"`
				}{
					Token: res,
				})
			}
			return nil
		},
	}

	cmd.Flags().StringVar(&f.Description,
		"description",
		"",
		"Description of the token purpose",
	)

	cmd.Flags().StringVar(&f.PassphraseFile,
		"tokens-passphrase-file",
		"",
		"Path to the file containing the tokens database passphrase",
	)

	cmd.Flags().StringVar(&f.WalletName,
		"wallet-name",
		"",
		"Name of the wallet associated to the token",
	)

	cmd.Flags().StringVar(&f.WalletPassphraseFile,
		"wallet-passphrase-file",
		"",
		"Path to the file containing the wallet's passphrase",
	)

	cmd.Flags().DurationVar(&f.ExpiresIn,
		"expires-in",
		0,
		"How duration for which the token will be valid",
	)

	autoCompleteWallet(cmd, f.WalletName, "wallet-name")

	return cmd
}

type GenerateAPITokenFlags struct {
	Description          string
	PassphraseFile       string
	WalletName           string
	WalletPassphraseFile string
	ExpiresIn            time.Duration
	passphrase           string
}

func (f *GenerateAPITokenFlags) Validate() (connections.GenerateAPITokenParams, error) {
	if len(f.WalletName) == 0 {
		return connections.GenerateAPITokenParams{}, flags.MustBeSpecifiedError("wallet-name")
	}

	passphrase, err := flags.GetPassphraseWithOptions(flags.PassphraseOptions{Name: "tokens"}, f.PassphraseFile)
	if err != nil {
		return connections.GenerateAPITokenParams{}, err
	}
	f.passphrase = passphrase

	walletPassphrase, err := flags.GetPassphraseWithOptions(flags.PassphraseOptions{Name: "wallet"}, f.WalletPassphraseFile)
	if err != nil {
		return connections.GenerateAPITokenParams{}, err
	}

	var expiresIn *time.Duration
	if f.ExpiresIn != 0 {
		expiresIn = &f.ExpiresIn
	}

	tokenParams := connections.GenerateAPITokenParams{
		Description: f.Description,
		ExpiresIn:   expiresIn,
		Wallet: connections.GenerateAPITokenWalletParams{
			Name:       f.WalletName,
			Passphrase: walletPassphrase,
		},
	}
	params := tokenParams
	return params, nil
}

func printGeneratedAPIToken(w io.Writer, params connections.GenerateAPITokenParams, token connections.Token) {
	p := printer.NewInteractivePrinter(w)

	str := p.String()
	defer p.Print(str)

	str.CheckMark().Text("The API token has been successfully generated: ").SuccessText(token.String()).NextSection()

	str.RedArrow().DangerText("Important").NextLine()
	str.DangerText("This token can be used by third-party applications to access the wallet ").DangerBold(params.Wallet.Name).DangerText(" and send transactions from it, automatically, without human intervention!").NextLine()
	str.DangerBold("Only distribute it to applications you have absolute trust in.").NextLine()
}