CAIP-222/ReCaps

core/android/src/main/kotlin/com/walletconnect/android/internal/common/model/params/CoreSignParams.kt

@@ -21,7 +21,7 @@ open class CoreSignParams : ClientParams {
     data class SessionAuthenticateApproveParams(
         @Json(name = "participant")
         val responder: Participant,
-        @Json(name = "caip222Response")
-        val caip222Response: List<Cacao>,
+        @Json(name = "cacaos")
+        val cacaos: List<Cacao>,
     ) : CoreSignParams()
 }

core/android/src/main/kotlin/com/walletconnect/android/internal/common/signing/cacao/Cacao.kt

@@ -4,7 +4,14 @@
 import com.squareup.moshi.Json
 import com.squareup.moshi.JsonClass
 import com.walletconnect.android.cacao.SignatureInterface
+import com.walletconnect.android.internal.common.signing.cacao.Cacao.Payload.Companion.ACTION_DELIMITER
+import com.walletconnect.android.internal.common.signing.cacao.Cacao.Payload.Companion.ACTION_POSITION
+import com.walletconnect.android.internal.common.signing.cacao.Cacao.Payload.Companion.ACTION_TYPE_POSITION
+import com.walletconnect.android.internal.common.signing.cacao.Cacao.Payload.Companion.ATT_KEY
+import com.walletconnect.android.internal.common.signing.cacao.Cacao.Payload.Companion.RECAPS_PREFIX
 import com.walletconnect.android.internal.common.signing.signature.Signature
+import org.bouncycastle.util.encoders.Base64
+import org.json.JSONObject
 
 @JsonClass(generateAdapter = true)
 data class Cacao(
@@ -57,19 +64,30 @@
         @Json(name = "resources")
         val resources: List<String>?,
     ) {
+        val actionsString get() = getActionsString(Issuer(iss))
+        val methods get() = getActions(Issuer(iss))
+
         companion object {
             const val CURRENT_VERSION = "1"
             const val ISO_8601_PATTERN = "yyyy-MM-dd'T'HH:mm:ssZZZZZ"
+            const val RECAPS_PREFIX = "urn:recap:"
+            const val ATT_KEY = "att"
+            const val ACTION_TYPE_POSITION = 0
+            const val ACTION_POSITION = 1
+            const val ACTION_DELIMITER = "/"
         }
     }
 }
 
 @JvmSynthetic
 internal fun Cacao.Signature.toSignature(): Signature = Signature.fromString(s)
 
-fun Cacao.Payload.toCAIP122Message(chainName: String = "Ethereum"): String {
+fun Cacao.Payload.toCAIP222Message(chainName: String = "Ethereum"): String {
     var message = "$domain wants you to sign in with your $chainName account:\n${Issuer(iss).address}\n\n"
-    if (statement != null) message += "$statement\n"
+    if (statement != null) message += "$statement"
+    if (resources?.find { r -> r.startsWith(RECAPS_PREFIX) } != null) message += " I further authorize the stated URI to perform the following actions on my behalf: (1) $actionsString for '${
+        Issuer(iss).namespace
+    }'\n"
     message += "\nURI: $aud\nVersion: $version\nChain ID: ${Issuer(iss).chainIdReference}\nNonce: $nonce\nIssued At: $iat"
     if (exp != null) message += "\nExpiration Time: $exp"
     if (nbf != null) message += "\nNot Before: $nbf"
@@ -78,5 +96,29 @@
         message += "\nResources:"
         resources.forEach { resource -> message += "\n- $resource" }
     }
+
     return message
+}
+
+private fun Cacao.Payload.getActionsString(issuer: Issuer): String {
+    return decodeReCaps(issuer).entries.joinToString(", ") { "'${it.key}': " + it.value.joinToString(", ") { value -> "'$value'" } }
+}
+
+private fun Cacao.Payload.getActions(issuer: Issuer): List<String> {
+    return decodeReCaps(issuer).values.flatten()
+}
+
+private fun Cacao.Payload.decodeReCaps(issuer: Issuer): MutableMap<String, MutableList<String>> {
+    val encodedReCaps = resources?.find { resource -> resource.startsWith(RECAPS_PREFIX) }?.removePrefix(RECAPS_PREFIX) ?: throw Exception()
+    val reCaps = Base64.decode(encodedReCaps).toString(Charsets.UTF_8)
+    val requests = (JSONObject(reCaps).get(ATT_KEY) as JSONObject).getJSONArray(issuer.namespace)
+    val actions: MutableMap<String, MutableList<String>> = mutableMapOf()
+
+    for (i in 0 until requests.length()) {
+        val actionString = requests.getJSONObject(i).keys().next() as String
+        val actionType = actionString.split(ACTION_DELIMITER)[ACTION_TYPE_POSITION]
+        val action = actionString.split(ACTION_DELIMITER)[ACTION_POSITION]
+        actions[actionType]?.add(action) ?: actions.put(actionType, mutableListOf(action))
+    }
+    return actions
 }

core/android/src/main/kotlin/com/walletconnect/android/internal/common/signing/cacao/CacaoVerifier.kt

@@ -10,8 +10,8 @@ class CacaoVerifier(private val projectId: ProjectId) {
     fun verify(cacao: Cacao): Boolean = when (cacao.signature.t) {
 
         SignatureType.EIP191.header, SignatureType.EIP1271.header -> {
-            val plainMessage = cacao.payload.toCAIP122Message()
-            val hexMessage = Numeric.toHexString(cacao.payload.toCAIP122Message().toByteArray())
+            val plainMessage = cacao.payload.toCAIP222Message()
+            val hexMessage = Numeric.toHexString(cacao.payload.toCAIP222Message().toByteArray())
             val address = Issuer(cacao.payload.iss).address
 
             if (cacao.signature.toSignature().verify(plainMessage, address, cacao.signature.t, projectId)) {

core/android/src/main/kotlin/com/walletconnect/android/internal/common/signing/cacao/Issuer.kt

@@ -9,6 +9,8 @@ data class Issuer(val value: String) {
         get() = value.split(ISS_DELIMITER)[ISS_POSITION_OF_REFERENCE]
     val address: String
         get() = value.split(ISS_DELIMITER)[ISS_POSITION_OF_ADDRESS]
+    val namespace
+        get() = value.split(ISS_DELIMITER)[ISS_POSITION_OF_NAMESPACE]
     val accountId
         get() = "$chainId:$address"
 

core/android/src/main/kotlin/com/walletconnect/android/internal/common/storage/rpc/JsonRpcHistory.kt

@@ -27,7 +27,7 @@
 
     fun updateRequestWithResponse(requestId: Long, response: String): JsonRpcHistoryRecord? {
         val record = jsonRpcHistoryQueries.getJsonRpcHistoryRecord(requestId, mapper = ::toRecord).executeAsOneOrNull()
         return if (record != null) {
             updateRecord(record, requestId, response)
         } else {
             logger.log("No JsonRpcRequest matching response")
@@ -51,18 +51,22 @@
     fun getListOfPendingRecordsByTopic(topic: Topic): List<JsonRpcHistoryRecord> =
         jsonRpcHistoryQueries.getJsonRpcRecordsByTopic(topic.value, mapper = ::toRecord)
             .executeAsList()
             .filter { record -> record.response == null }
 
     fun getListOfPendingRecords(): List<JsonRpcHistoryRecord> =
         jsonRpcHistoryQueries.getJsonRpcRecords(mapper = ::toRecord)
             .executeAsList()
             .filter { record -> record.response == null }
 
     fun getPendingRecordById(id: Long): JsonRpcHistoryRecord? {
         val record = jsonRpcHistoryQueries.getJsonRpcHistoryRecord(id, mapper = ::toRecord).executeAsOneOrNull()
         return if (record != null && record.response == null) record else null
     }
 
+    fun getRecordById(id: Long): JsonRpcHistoryRecord? {
+        return jsonRpcHistoryQueries.getJsonRpcHistoryRecord(id, mapper = ::toRecord).executeAsOneOrNull()
+    }
+
     private fun toRecord(requestId: Long, topic: String, method: String, body: String, response: String?): JsonRpcHistoryRecord =
         JsonRpcHistoryRecord(requestId, topic, method, body, response)
 }

core/android/src/main/kotlin/com/walletconnect/android/internal/utils/Expiration.kt

@@ -2,6 +2,4 @@
 
 package com.walletconnect.android.internal.utils
 
-val INACTIVE_PAIRING: Long = CURRENT_TIME_IN_SECONDS + FIVE_MINUTES_IN_SECONDS
-val ACTIVE_PAIRING: Long = CURRENT_TIME_IN_SECONDS + MONTH_IN_SECONDS
 val ACTIVE_SESSION: Long = CURRENT_TIME_IN_SECONDS + WEEK_IN_SECONDS

core/android/src/main/kotlin/com/walletconnect/android/keyserver/domain/IdentitiesInteractor.kt

@@ -18,7 +18,7 @@ import com.walletconnect.android.internal.common.signing.cacao.Cacao
 import com.walletconnect.android.internal.common.signing.cacao.CacaoType
 import com.walletconnect.android.internal.common.signing.cacao.CacaoVerifier
 import com.walletconnect.android.internal.common.signing.cacao.Issuer
-import com.walletconnect.android.internal.common.signing.cacao.toCAIP122Message
+import com.walletconnect.android.internal.common.signing.cacao.toCAIP222Message
 import com.walletconnect.android.internal.common.storage.identity.IdentitiesStorageRepository
 import com.walletconnect.android.internal.utils.getIdentityTag
 import com.walletconnect.android.keyserver.domain.use_case.RegisterIdentityUseCase
@@ -154,7 +154,7 @@ class IdentitiesInteractor(
 
     private fun generateAndSignCacao(accountId: AccountId, identityKey: PublicKey, statement: String, domain: String, resources: List<String>, onSign: (String) -> Cacao.Signature?): Result<Cacao> {
         val payload = generatePayload(accountId, identityKey, statement, domain, resources).getOrThrow()
-        val message = payload.toCAIP122Message()
+        val message = payload.toCAIP222Message()
         val signature = onSign(message) ?: throw UserRejectedSigning()
         return Result.success(Cacao(CacaoType.EIP4361.toHeader(), payload, signature))
     }

core/android/src/test/java/CacaoTestJvmTest.java

@@ -13,7 +13,7 @@
 import java.nio.charset.StandardCharsets;
 import java.util.ArrayList;
 
 class CacaoTestJvmTest {
     ArrayList<String> resources = new ArrayList<>();
     byte[] privateKey = UtilFunctionsKt.hexToBytes("305c6cde3846927892cd32762f6120539f3ec74c9e3a16b9b798b1e85351ae2a");
 
@@ -40,7 +40,7 @@
         );
 
         String chainName = "Ethereum";
-        String message = CacaoKt.toCAIP122Message(payload, chainName);
+        String message = CacaoKt.toCAIP222Message(payload, chainName);
         SignatureTest signature = CacaoSignerUtil.signHex(SignatureTest.class, Numeric.toHexString(message.getBytes(StandardCharsets.UTF_8)), privateKey, SignatureType.EIP191);
         Cacao.Signature cacaoSig = new Cacao.Signature(signature.getT(), signature.getS(), signature.getM());
         Cacao cacao = new Cacao(CacaoType.EIP4361.toHeader(), payload, cacaoSig);
@@ -72,7 +72,7 @@
         );
 
         String chainName = "Ethereum";
-        String message = CacaoKt.toCAIP122Message(payload, chainName);
+        String message = CacaoKt.toCAIP222Message(payload, chainName);
         SignatureTest signature = CacaoSignerUtil.sign(SignatureTest.class, message, privateKey, SignatureType.EIP191);
         Cacao.Signature cacaoSig = new Cacao.Signature(signature.getT(), signature.getS(), signature.getM());
         Cacao cacao = new Cacao(CacaoType.EIP4361.toHeader(), payload, cacaoSig);

core/android/src/test/kotlin/com/walletconnect/android/internal/common/cacao/CacaoTest.kt

@@ -6,7 +6,7 @@ import com.walletconnect.android.internal.common.model.ProjectId
 import com.walletconnect.android.internal.common.signing.cacao.Cacao
 import com.walletconnect.android.internal.common.signing.cacao.CacaoType
 import com.walletconnect.android.internal.common.signing.cacao.CacaoVerifier
-import com.walletconnect.android.internal.common.signing.cacao.toCAIP122Message
+import com.walletconnect.android.internal.common.signing.cacao.toCAIP222Message
 import com.walletconnect.android.utils.cacao.CacaoSignerInterface
 import com.walletconnect.android.utils.cacao.sign
 import com.walletconnect.android.utils.cacao.signHex
@@ -31,27 +31,31 @@ internal class CacaoTest {
         exp = null,
         statement = "I accept the ServiceOrg Terms of Service: https://service.invalid/tos",
         requestId = null,
-        resources = listOf("ipfs://bafybeiemxf5abjwjbikoz4mc3a3dla6ual3jsgpdr4cjr3oz3evfyavhwq/", "https://example.com/my-web2-claim.json")
+        resources = listOf(
+            "ipfs://bafybeiemxf5abjwjbikoz4mc3a3dla6ual3jsgpdr4cjr3oz3evfyavhwq/",
+            "https://example.com/my-web2-claim.json",
+            "urn:recap:eyJhdHQiOnsiZWlwMTU1IjpbeyJyZXF1ZXN0L2V0aF9zaWduVHlwZWREYXRhX3Y0IjpbXX0seyJyZXF1ZXN0L3BlcnNvbmFsX3NpZ24iOltdfV19fQ=="
+        )
     )
 
     private val privateKey = "305c6cde3846927892cd32762f6120539f3ec74c9e3a16b9b798b1e85351ae2a".hexToBytes()
 
     @Test
     fun signAndVerifyWithEIP191Test() {
-        print(payload.toCAIP122Message(chainName))
-        val message = payload.toCAIP122Message(chainName)
+        print(payload.toCAIP222Message(chainName))
+        val message = payload.toCAIP222Message(chainName)
         val signature: Cacao.Signature = cacaoSigner.sign(message, privateKey, SignatureType.EIP191)
-        val cacao = Cacao(CacaoType.EIP4361.toHeader(), payload, signature)
+        val cacao = Cacao(CacaoType.CAIP222.toHeader(), payload, signature)
         val result: Boolean = cacaoVerifier.verify(cacao)
         Assert.assertTrue(result)
     }
 
     @Test
     fun signHexAndVerifyWithEIP191Test() {
-        print(payload.toCAIP122Message(chainName))
-        val message = payload.toCAIP122Message(chainName)
+        println(payload.toCAIP222Message(chainName))
+        val message = payload.toCAIP222Message(chainName)
         val signature: Cacao.Signature = cacaoSigner.signHex(Numeric.toHexString(message.toByteArray()), privateKey, SignatureType.EIP191)
-        val cacao = Cacao(CacaoType.EIP4361.toHeader(), payload, signature)
+        val cacao = Cacao(CacaoType.CAIP222.toHeader(), payload, signature)
         val result: Boolean = cacaoVerifier.verify(cacao)
         assert(result)
     }
@@ -100,7 +104,7 @@ internal class CacaoTest {
         )
 
         val signatureString = "0xdeaddeaddead4095116db01baaf276361efd3a73c28cf8cc28dabefa945b8d536011289ac0a3b048600c1e692ff173ca944246cf7ceb319ac2262d27b395c82b1c"
-        val signature: Cacao.Signature = Cacao.Signature(SignatureType.EIP1271.header, signatureString, payload.toCAIP122Message())
+        val signature: Cacao.Signature = Cacao.Signature(SignatureType.EIP1271.header, signatureString, payload.toCAIP222Message())
         val cacao = Cacao(CacaoType.EIP4361.toHeader(), payload, signature)
         val result: Boolean = cacaoVerifier.verify(cacao)
         Assert.assertFalse(result)

core/android/src/test/kotlin/com/walletconnect/android/internal/common/cacao/MapperTest.kt

@@ -1,15 +1,13 @@
 package com.walletconnect.android.internal.common.cacao
 
-import com.walletconnect.android.Core
 import com.walletconnect.android.internal.common.signing.cacao.Cacao
-import com.walletconnect.android.internal.common.signing.cacao.toCAIP122Message
+import com.walletconnect.android.internal.common.signing.cacao.toCAIP222Message
 import junit.framework.TestCase.assertEquals
 import org.junit.Test
 
 internal class MapperTest {
     private val iss = "did:pkh:eip155:1:0x15bca56b6e2728aec2532df9d436bd1600e86688"
     private val chainName = "Ethereum"
-    private val dummyPairing = Core.Model.Pairing("", 0L, null, "", null, "", true, "")
 
     @Test
     fun `Payload required fields formatting`() {
@@ -37,7 +35,7 @@ internal class MapperTest {
                 "Nonce: 32891756\n" +
                 "Issued At: 2021-09-30T16:25:24Z"
 
-        assertEquals(message, payload.toCAIP122Message(chainName))
+        assertEquals(message, payload.toCAIP222Message(chainName))
     }
 
     @Test
@@ -51,14 +49,19 @@ internal class MapperTest {
             iat = "2021-09-30T16:25:24Z",
             nbf = null,
             exp = null,
-            statement = null,
+            statement = "Statement",
             requestId = null,
-            resources = listOf("ipfs://bafybeiemxf5abjwjbikoz4mc3a3dla6ual3jsgpdr4cjr3oz3evfyavhwq/", "https://example.com/my-web2-claim.json")
+            resources = listOf(
+                "ipfs://bafybeiemxf5abjwjbikoz4mc3a3dla6ual3jsgpdr4cjr3oz3evfyavhwq/",
+                "https://example.com/my-web2-claim.json",
+                "urn:recap:eyJhdHQiOnsiZWlwMTU1IjpbeyJyZXF1ZXN0L2V0aF9zaWduVHlwZWREYXRhX3Y0IjpbXX0seyJyZXF1ZXN0L3BlcnNvbmFsX3NpZ24iOltdfV19fQ=="
+            )
         )
 
         val message = "service.invalid wants you to sign in with your Ethereum account:\n" +
                 "0x15bca56b6e2728aec2532df9d436bd1600e86688\n" +
                 "\n" +
+                "Statement I further authorize the stated URI to perform the following actions on my behalf: (1) 'request': 'eth_signTypedData_v4', 'personal_sign' for 'eip155'\n" +
                 "\n" +
                 "URI: https://service.invalid/login\n" +
                 "Version: 1\n" +
@@ -67,9 +70,10 @@ internal class MapperTest {
                 "Issued At: 2021-09-30T16:25:24Z\n" +
                 "Resources:\n" +
                 "- ipfs://bafybeiemxf5abjwjbikoz4mc3a3dla6ual3jsgpdr4cjr3oz3evfyavhwq/\n" +
-                "- https://example.com/my-web2-claim.json"
+                "- https://example.com/my-web2-claim.json\n" +
+                "- urn:recap:eyJhdHQiOnsiZWlwMTU1IjpbeyJyZXF1ZXN0L2V0aF9zaWduVHlwZWREYXRhX3Y0IjpbXX0seyJyZXF1ZXN0L3BlcnNvbmFsX3NpZ24iOltdfV19fQ=="
 
-        assertEquals(message, payload.toCAIP122Message(chainName))
+        assertEquals(message, payload.toCAIP222Message(chainName))
     }
 
     @Test
@@ -99,7 +103,7 @@ internal class MapperTest {
                 "Issued At: 2021-09-30T16:25:24Z\n" +
                 "Request ID: someRequestId"
 
-        assertEquals(message, payload.toCAIP122Message(chainName))
+        assertEquals(message, payload.toCAIP222Message(chainName))
     }
 
     @Test
@@ -129,7 +133,7 @@ internal class MapperTest {
                 "Nonce: 32891756\n" +
                 "Issued At: 2021-09-30T16:25:24Z"
 
-        assertEquals(message, payload.toCAIP122Message(chainName))
+        assertEquals(message, payload.toCAIP222Message(chainName))
     }
 
     @Test
@@ -159,7 +163,7 @@ internal class MapperTest {
                 "Issued At: 2021-09-30T16:25:24Z\n" +
                 "Expiration Time: 2021-09-31T16:25:24Z"
 
-        assertEquals(message, payload.toCAIP122Message(chainName))
+        assertEquals(message, payload.toCAIP222Message(chainName))
     }
 
     @Test
@@ -189,7 +193,7 @@ internal class MapperTest {
                 "Issued At: 2021-09-30T16:25:24Z\n" +
                 "Not Before: 2021-09-31T16:25:24Z"
 
-        assertEquals(message, payload.toCAIP122Message(chainName))
+        assertEquals(message, payload.toCAIP222Message(chainName))
     }
 
     @Test
@@ -225,6 +229,6 @@ internal class MapperTest {
                 "- ipfs://bafybeiemxf5abjwjbikoz4mc3a3dla6ual3jsgpdr4cjr3oz3evfyavhwq/\n" +
                 "- https://example.com/my-web2-claim.json"
 
-        assertEquals(message, payload.toCAIP122Message(chainName))
+        assertEquals(message, payload.toCAIP222Message(chainName))
     }
 }

core/android/src/test/kotlin/com/walletconnect/android/internal/common/cacao/eip191/EIP191SignerTest.kt

@@ -4,7 +4,7 @@ import com.squareup.moshi.JsonAdapter
 import com.squareup.moshi.Moshi
 import com.walletconnect.android.cacao.signature.SignatureType
 import com.walletconnect.android.internal.common.signing.cacao.Cacao
-import com.walletconnect.android.internal.common.signing.cacao.toCAIP122Message
+import com.walletconnect.android.internal.common.signing.cacao.toCAIP222Message
 import com.walletconnect.android.internal.common.signing.cacao.toSignature
 import com.walletconnect.android.internal.common.signing.eip191.EIP191Signer
 import com.walletconnect.android.internal.common.signing.eip191.EIP191Verifier
@@ -116,7 +116,7 @@ internal class EIP191SignerTest {
         val jsonAdapter: JsonAdapter<Cacao> = moshi.adapter(Cacao::class.java)
         val cacao = jsonAdapter.fromJson(cacaoAsJson)
         println(cacao)
-        val message = cacao!!.payload.toCAIP122Message()
+        val message = cacao!!.payload.toCAIP222Message()
         val signature = cacaoSigner.sign(message, privateKey, SignatureType.EIP191)
         println(signature)
         println("Message:")

product/walletconnectmodal/src/main/kotlin/com/walletconnect/wcmodal/client/ClientMapper.kt

@@ -39,7 +39,7 @@ internal fun Sign.Model.SessionAuthenticateResponse.toModal(): Modal.Model.Sessi
 
 @JvmSynthetic
 internal fun List<Sign.Model.Cacao>.toClient(): List<Modal.Model.Cacao> = this.map {
-    with(it){
+    with(it) {
         Modal.Model.Cacao(
             Modal.Model.Cacao.Header(header.t),
             Modal.Model.Cacao.Payload(
@@ -76,11 +76,36 @@ internal fun Sign.Model.Ping.Error.toModal() = Modal.Model.Ping.Error(error)
 internal fun Modal.Params.Connect.toSign() = Sign.Params.Connect(namespaces?.toSign(), optionalNamespaces?.toSign(), properties, pairing)
 
 internal fun Modal.Params.Authenticate.toSign(): Sign.Params.Authenticate = with(this) {
-    Sign.Params.Authenticate(pairingTopic, payloadParams.toSign())
+    Sign.Params.Authenticate(
+        pairingTopic,
+        chains = chains,
+        type = type ?: CacaoType.CAIP222.header,
+        domain = domain,
+        aud = aud,
+        nonce = nonce,
+        nbf = nbf,
+        exp = exp,
+        statement = statement,
+        requestId = requestId,
+        resources = resources,
+        methods = methods
+    )
 }
 
 internal fun Modal.Model.PayloadParams.toSign(): Sign.Model.PayloadParams = with(this) {
-    Sign.Model.PayloadParams(CacaoType.CAIP222.header, chains, domain, aud, version, nonce, iat, nbf, exp, statement, requestId, resources)
+    Sign.Model.PayloadParams(
+        chains = chains,
+        type = type ?: CacaoType.CAIP222.header,
+        domain = domain,
+        aud = aud,
+        nonce = nonce,
+        iat = iat,
+        nbf = nbf,
+        exp = exp,
+        statement = statement,
+        requestId = requestId,
+        resources = resources,
+    )
 }
 
 internal fun Map<String, Modal.Model.Namespace.Proposal>.toSign() = mapValues { (_, namespace) -> Sign.Model.Namespace.Proposal(namespace.chains, namespace.methods, namespace.events) }