add admin native auth token generation

Itheum · Feb 24, 2024 · 50b2152 · 50b2152
1 parent 65735f9
commit 50b2152
Show file tree

Hide file tree

Showing 5 changed files with 671 additions and 517 deletions.
diff --git a/apps/api/config.ts b/apps/api/config.ts
@@ -2,6 +2,7 @@ export const config = () => ({
   app: {
     name: process.env.APP_NAME || 'aggregator',
     env: process.env.APP_ENV || 'mainnet',
+    url: process.env.APP_DOMAIN || 'https://itheum.io',
   },
   features: {
     publicApi: {
@@ -22,8 +23,12 @@ export const config = () => ({
     },
     chain: {
       apiUrl: process.env.CHAIN_API_URL || 'https://api.multiversx.com',
+      wallet: {
+        admin: process.env.WALLET_ADMIN_PEM || '####',
+      },
       nativeAuth: {
-        acceptedOrigins: ['https://utils.multiversx.com'],
+        maxExpirySeconds: 3600,
+        acceptedOrigins: ['https://itheum.io', 'https://utils.multiversx.com'],
       },
     },
     redis: {

diff --git a/apps/cache-warmer/config.ts b/apps/cache-warmer/config.ts
@@ -17,6 +17,12 @@ export const config = () => ({
     aggregator: process.env.CONTRACT_AGGREGATOR || '####',
   },
   services: {
+    chain: {
+      apiUrl: process.env.CHAIN_API_URL || 'https://api.multiversx.com',
+      nativeAuth: {
+        acceptedOrigins: ['https://utils.multiversx.com'],
+      },
+    },
     redis: {
       host: process.env.REDIS_HOST || '127.0.0.1',
       port: parseInt(process.env.REDIS_PORT || '6379'),

diff --git a/libs/common/src/admin/admin.service.ts b/libs/common/src/admin/admin.service.ts
@@ -1,15 +1,17 @@
+import { config } from 'apps/api/config'
 import { Injectable } from '@nestjs/common'
 import { AppConfigService } from '../config'
 import { UserSigner } from '@multiversx/sdk-wallet'
-import { Account, Transaction } from '@multiversx/sdk-core'
+import { Account, SignableMessage, Transaction } from '@multiversx/sdk-core'
+import { NativeAuthClient } from '@multiversx/sdk-native-auth-client'
 
 @Injectable()
 export class AdminService {
   public readonly signer: UserSigner
   public readonly account: Account
 
   constructor(private readonly appConfigService: AppConfigService) {
-    this.signer = UserSigner.fromPem('####')
+    this.signer = UserSigner.fromPem(config().services.chain.wallet.admin)
     this.account = new Account(this.signer.getAddress())
   }
 
@@ -37,4 +39,20 @@ export class AdminService {
 
     return tx
   }
+
+  async generateNativeAuthToken() {
+    const client = new NativeAuthClient({
+      apiUrl: config().services.chain.apiUrl,
+      expirySeconds: config().services.chain.nativeAuth.maxExpirySeconds,
+      origin: config().app.url,
+    })
+
+    const init = await client.initialize()
+    const address = this.account.address.bech32()
+    const signable = new SignableMessage({ message: Buffer.from(`${address}${init}`) })
+    const signature = await this.signer.sign(signable.serializeForSigning())
+    const signatureHex = signature.toString('hex')
+
+    return client.getToken(address, init, signatureHex)
+  }
 }