-draft for merge endpoint
This commit is contained in:
Christian Grothoff
parent
fe2a15c558
commit
f9971faa7a
@ -1 +1 @@
|
||||
Subproject commit b799c63db9beda99e9151e7611a1ac4e810786ab
|
||||
Subproject commit 313216ee11fe604d39ea5f1b71b1ad96a60391d9
|
||||
455
src/exchange/taler-exchange-httpd_purses_merge.c
Normal file
455
src/exchange/taler-exchange-httpd_purses_merge.c
Normal file
@ -0,0 +1,455 @@
|
||||
/*
|
||||
This file is part of TALER
|
||||
Copyright (C) 2022 Taler Systems SA
|
||||
|
||||
TALER is free software; you can redistribute it and/or modify it under the
|
||||
terms of the GNU Affero General Public License as published by the Free Software
|
||||
Foundation; either version 3, or (at your option) any later version.
|
||||
|
||||
TALER is distributed in the hope that it will be useful, but WITHOUT ANY
|
||||
WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
|
||||
A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU Affero General Public License along with
|
||||
TALER; see the file COPYING. If not, see <http://www.gnu.org/licenses/>
|
||||
*/
|
||||
/**
|
||||
* @file taler-exchange-httpd_purses_merge.c
|
||||
* @brief Handle /purses/$PID/merge requests; parses the POST and JSON and
|
||||
* verifies the reserve signature before handing things off
|
||||
* to the database.
|
||||
* @author Christian Grothoff
|
||||
*/
|
||||
#include "platform.h"
|
||||
#include <gnunet/gnunet_util_lib.h>
|
||||
#include <gnunet/gnunet_json_lib.h>
|
||||
#include <jansson.h>
|
||||
#include <microhttpd.h>
|
||||
#include <pthread.h>
|
||||
#include "taler_json_lib.h"
|
||||
#include "taler_mhd_lib.h"
|
||||
#include "taler-exchange-httpd_purses_merge.h"
|
||||
#include "taler-exchange-httpd_responses.h"
|
||||
#include "taler_exchangedb_lib.h"
|
||||
#include "taler-exchange-httpd_keys.h"
|
||||
|
||||
|
||||
/**
|
||||
* Closure for #merge_transaction.
|
||||
*/
|
||||
struct PurseMergeContext
|
||||
{
|
||||
/**
|
||||
* Public key of the purse we are creating.
|
||||
*/
|
||||
const struct TALER_PurseContractPublicKeyP *purse_pub;
|
||||
|
||||
/**
|
||||
* Total amount to be put into the purse.
|
||||
*/
|
||||
struct TALER_Amount target_amount;
|
||||
|
||||
/**
|
||||
* Current amount in the purse.
|
||||
*/
|
||||
struct TALER_Amount balance;
|
||||
|
||||
/**
|
||||
* When should the purse expire.
|
||||
*/
|
||||
struct GNUNET_TIME_Timestamp purse_expiration;
|
||||
|
||||
/**
|
||||
* Our current time.
|
||||
*/
|
||||
struct GNUNET_TIME_Timestamp exchange_timestamp;
|
||||
|
||||
/**
|
||||
* Merge key for the purse.
|
||||
*/
|
||||
struct TALER_PurseMergePublicKeyP merge_pub;
|
||||
|
||||
/**
|
||||
* Signature of the reservce affiming this request.
|
||||
*/
|
||||
struct TALER_ReserveSignatureP reserve_sig;
|
||||
|
||||
/**
|
||||
* Signature of the client affiming the merge.
|
||||
*/
|
||||
struct TALER_PurseMergeSignatureP merge_sig;
|
||||
|
||||
/**
|
||||
* Public key of the reserve, as extracted from @e payto_uri.
|
||||
*/
|
||||
struct TALER_ReservePublicKeyP reserve_pub;
|
||||
|
||||
/**
|
||||
* Hash of the contract terms of the purse.
|
||||
*/
|
||||
struct TALER_PrivateContractHashP h_contract_terms;
|
||||
|
||||
/**
|
||||
* Fees that apply to this operation.
|
||||
*/
|
||||
const struct TEH_GlobalFee *gf;
|
||||
|
||||
/**
|
||||
* URI of the account the purse is to be merged into.
|
||||
* Must be of the form 'payto://taler/$EXCHANGE_URL/RESERVE_PUB'.
|
||||
*/
|
||||
const char *payto_uri;
|
||||
|
||||
/**
|
||||
* Base URL of the exchange provider.
|
||||
*/
|
||||
char *provider_url;
|
||||
|
||||
/**
|
||||
* Minimum age for deposits into this purse.
|
||||
*/
|
||||
uint32_t min_age;
|
||||
};
|
||||
|
||||
|
||||
/**
|
||||
* Send confirmation of purse creation success to client.
|
||||
*
|
||||
* @param connection connection to the client
|
||||
* @param pcc details about the request that succeeded
|
||||
* @return MHD result code
|
||||
*/
|
||||
static MHD_RESULT
|
||||
reply_merge_success (struct MHD_Connection *connection,
|
||||
const struct PurseMergeContext *pcc)
|
||||
{
|
||||
struct TALER_ExchangePublicKeyP pub;
|
||||
struct TALER_ExchangeSignatureP sig;
|
||||
enum TALER_ErrorCode ec;
|
||||
struct TALER_Amount merge_amount;
|
||||
|
||||
if (0 <=
|
||||
TALER_amount_cmp (&pcc->balance,
|
||||
&pcc->target_amount))
|
||||
{
|
||||
return TALER_MHD_REPLY_JSON_PACK (
|
||||
connection,
|
||||
MHD_HTTP_ACCEPTED,
|
||||
TALER_JSON_pack_amount ("balance",
|
||||
&pcc->balance));
|
||||
}
|
||||
// FIXME: check return value...
|
||||
TALER_amount_subtract (&merge_amount,
|
||||
&pcc->target_amount,
|
||||
&gf->fees.merge);
|
||||
if (TALER_EC_NONE !=
|
||||
(ec = TALER_exchange_online_purse_merged_sign (
|
||||
&TEH_keys_exchange_sign_,
|
||||
pcc->exchange_timestamp,
|
||||
pcc->purse_expiration,
|
||||
&merge_amount,
|
||||
pcc->purse_pub,
|
||||
&pcc->merge_pub,
|
||||
&pcc->h_contract_terms,
|
||||
&pub,
|
||||
&sig)))
|
||||
{
|
||||
GNUNET_break (0);
|
||||
return TALER_MHD_reply_with_ec (connection,
|
||||
ec,
|
||||
NULL);
|
||||
}
|
||||
return TALER_MHD_REPLY_JSON_PACK (
|
||||
connection,
|
||||
MHD_HTTP_OK,
|
||||
TALER_JSON_pack_amount ("merge_amount",
|
||||
&merge_amount),
|
||||
GNUNET_JSON_pack_timestamp ("exchange_timestamp",
|
||||
pcc->exchange_timestamp),
|
||||
GNUNET_JSON_pack_data_auto ("exchange_sig",
|
||||
&sig),
|
||||
GNUNET_JSON_pack_data_auto ("exchange_pub",
|
||||
&pub));
|
||||
}
|
||||
|
||||
|
||||
/**
|
||||
* Execute database transaction for /purses/$PID/merge. Runs the transaction
|
||||
* logic; IF it returns a non-error code, the transaction logic MUST NOT queue
|
||||
* a MHD response. IF it returns an hard error, the transaction logic MUST
|
||||
* queue a MHD response and set @a mhd_ret. IF it returns the soft error
|
||||
* code, the function MAY be called again to retry and MUST not queue a MHD
|
||||
* response.
|
||||
*
|
||||
* @param cls a `struct PurseMergeContext`
|
||||
* @param connection MHD request context
|
||||
* @param[out] mhd_ret set to MHD status on error
|
||||
* @return transaction status
|
||||
*/
|
||||
static enum GNUNET_DB_QueryStatus
|
||||
merge_transaction (void *cls,
|
||||
struct MHD_Connection *connection,
|
||||
MHD_RESULT *mhd_ret)
|
||||
{
|
||||
struct PurseMergeContext *pcc = cls;
|
||||
enum GNUNET_DB_QueryStatus qs;
|
||||
bool in_conflict = true;
|
||||
|
||||
qs = TEH_plugin->do_purse_merge (TEH_plugin->cls,
|
||||
pcc->purse_pub,
|
||||
&pcc->merge_sig,
|
||||
pcc->merge_timestamp,
|
||||
pcc->provider_url,
|
||||
&pcc.reserve_pub);
|
||||
if (qs < 0)
|
||||
{
|
||||
if (GNUNET_DB_STATUS_SOFT_ERROR == qs)
|
||||
return qs;
|
||||
TALER_LOG_WARNING (
|
||||
"Failed to store merge purse information in database\n");
|
||||
*mhd_ret =
|
||||
TALER_MHD_reply_with_error (connection,
|
||||
MHD_HTTP_INTERNAL_SERVER_ERROR,
|
||||
TALER_EC_GENERIC_DB_STORE_FAILED,
|
||||
"purse merge");
|
||||
return qs;
|
||||
}
|
||||
|
||||
|
||||
qs = TEH_plugin->do_account_merge (TEH_plugin->cls,
|
||||
pcc->purse_pub,
|
||||
&pcc->reserve_pub,
|
||||
&pcc->reserve_sig);
|
||||
if (qs < 0)
|
||||
{
|
||||
if (GNUNET_DB_STATUS_SOFT_ERROR == qs)
|
||||
return qs;
|
||||
TALER_LOG_WARNING (
|
||||
"Failed to store account purse information in database\n");
|
||||
*mhd_ret =
|
||||
TALER_MHD_reply_with_error (connection,
|
||||
MHD_HTTP_INTERNAL_SERVER_ERROR,
|
||||
TALER_EC_GENERIC_DB_STORE_FAILED,
|
||||
"account merge");
|
||||
return qs;
|
||||
}
|
||||
|
||||
return qs;
|
||||
}
|
||||
|
||||
|
||||
MHD_RESULT
|
||||
TEH_handler_purses_merge (
|
||||
struct MHD_Connection *connection,
|
||||
const struct TALER_PurseContractPublicKeyP *purse_pub,
|
||||
const json_t *root)
|
||||
{
|
||||
struct PurseMergeContext pcc = {
|
||||
.purse_pub = purse_pub,
|
||||
.exchange_timestamp = GNUNET_TIME_timestamp_get ()
|
||||
};
|
||||
struct GNUNET_JSON_Specification spec[] = {
|
||||
GNUNET_JSON_spec_string ("payto_uri",
|
||||
&pcc.payt_uri),
|
||||
GNUNET_JSON_spec_fixed_auto ("reserve_sig",
|
||||
&pcc.reserve_sig),
|
||||
GNUNET_JSON_spec_fixed_auto ("merge_sig",
|
||||
&pcc.merge_sig),
|
||||
GNUNET_JSON_spec_timestamp ("merge_timestamp",
|
||||
&pcc.merge_timestamp),
|
||||
GNUNET_JSON_spec_end ()
|
||||
};
|
||||
struct TALER_PurseContractSignatureP purse_sig;
|
||||
enum GNUNET_DB_QueryStatus qs;
|
||||
bool http;
|
||||
|
||||
{
|
||||
enum GNUNET_GenericReturnValue res;
|
||||
|
||||
res = TALER_MHD_parse_json_data (connection,
|
||||
root,
|
||||
spec);
|
||||
if (GNUNET_SYSERR == res)
|
||||
{
|
||||
GNUNET_break (0);
|
||||
return MHD_NO; /* hard failure */
|
||||
}
|
||||
if (GNUNET_NO == res)
|
||||
{
|
||||
GNUNET_break_op (0);
|
||||
return MHD_YES; /* failure */
|
||||
}
|
||||
}
|
||||
|
||||
pcc.gf = TEH_keys_global_fee_by_time (TEH_keys_get_state (),
|
||||
pcc.exchange_timestamp);
|
||||
if (NULL == pcc.gf)
|
||||
{
|
||||
GNUNET_log (GNUNET_ERROR_TYPE_WARNING,
|
||||
"Cannot create purse: global fees not configured!\n");
|
||||
return TALER_MHD_reply_with_error (connection,
|
||||
MHD_HTTP_INTERNAL_SERVER_ERROR,
|
||||
TALER_EC_EXCHANGE_GENERIC_GLOBAL_FEES_MISSING,
|
||||
NULL);
|
||||
}
|
||||
/* Fetch purse details */
|
||||
qs = TEH_plugin->select_purse_request (TEH_plugin->cls,
|
||||
pcc->purse_pub,
|
||||
&pcc->merge_pub,
|
||||
&pcc->purse_expiration,
|
||||
&pcc->h_contract_terms,
|
||||
&pcc->min_age,
|
||||
&pcc->target_amount,
|
||||
&pcc->balance,
|
||||
&purse_sig);
|
||||
switch (qs)
|
||||
{
|
||||
case GNUNET_DB_STATUS_HARD_ERROR:
|
||||
GNUNET_break (0);
|
||||
return TALER_MHD_reply_with_error (
|
||||
connection,
|
||||
MHD_HTTP_INTERNAL_SERVER_ERROR,
|
||||
TALER_EC_GENERIC_DB_FETCH_FAILED,
|
||||
"select purse request");
|
||||
case GNUNET_DB_STATUS_SOFT_ERROR:
|
||||
GNUNET_break (0);
|
||||
return TALER_MHD_reply_with_error (
|
||||
connection,
|
||||
MHD_HTTP_INTERNAL_SERVER_ERROR,
|
||||
TALER_EC_GENERIC_DB_FETCH_FAILED,
|
||||
"select purse request");
|
||||
case GNUNET_DB_STATUS_SUCCESS_NO_RESULTS:
|
||||
return TALER_MHD_reply_with_error (
|
||||
connection,
|
||||
MHD_HTTP_NOT_FOUND,
|
||||
TALER_EC_EXCHANGE_MERGE_PURSE_NOT_FOUND,
|
||||
NULL);
|
||||
case GNUNET_DB_STATUS_SUCCESS_ONE_RESULT:
|
||||
/* continued below */
|
||||
break;
|
||||
}
|
||||
/* parse 'payto_uri' into pcc.reserve_pub and provider_url */
|
||||
if ( (0 != strncmp (pcc.payto_uri,
|
||||
"payto://taler/",
|
||||
strlen ("payto://taler/"))) &&
|
||||
(0 != strncmp (pcc.payto_uri,
|
||||
"payto://taler+http/",
|
||||
strlen ("payto://taler+http/"))) )
|
||||
{
|
||||
GNUNET_break_op (0);
|
||||
return TALER_MHD_reply_with_error (
|
||||
connection,
|
||||
MHD_HTTP_BAD_REQUEST,
|
||||
TALER_EC_GENERIC_PARAMETER_MALFORMED,
|
||||
"payto_uri");
|
||||
}
|
||||
|
||||
http = (0 == strncmp (pcc.payto_uri,
|
||||
"payto://taler+http/",
|
||||
strlen ("payto://taler+http/")));
|
||||
|
||||
{
|
||||
const char *host = &pcc.payto_uri[http
|
||||
? strlen ("payto://taler+http/")
|
||||
: strlen ("payto://taler/")];
|
||||
const char *slash = strchr (host,
|
||||
'/');
|
||||
|
||||
if (NULL == slash)
|
||||
{
|
||||
GNUNET_break_op (0);
|
||||
return TALER_MHD_reply_with_error (
|
||||
connection,
|
||||
MHD_HTTP_BAD_REQUEST,
|
||||
TALER_EC_GENERIC_PARAMETER_MALFORMED,
|
||||
"payto_uri");
|
||||
}
|
||||
GNUNET_asprintf (&pcc.provider_url,
|
||||
"%s://%.*s/",
|
||||
http ? "http" : "https",
|
||||
(int) (slash - host),
|
||||
host);
|
||||
slash++;
|
||||
if (GNUNET_OK !=
|
||||
GNUNET_STRINGS_string_to_data (slash,
|
||||
strlen (slash),
|
||||
&pcc.reserve_pub,
|
||||
sizeof (pcc.reserve_pub)))
|
||||
{
|
||||
GNUNET_break_op (0);
|
||||
GNUNET_free (pcc.provider_url);
|
||||
return TALER_MHD_reply_with_error (
|
||||
connection,
|
||||
MHD_HTTP_BAD_REQUEST,
|
||||
TALER_EC_GENERIC_PARAMETER_MALFORMED,
|
||||
"payto_uri");
|
||||
}
|
||||
slash++;
|
||||
}
|
||||
if (0 == strcmp (pcc.provider_url,
|
||||
TEH_base_url))
|
||||
{
|
||||
/* we use NULL to represent 'self' as the provider */
|
||||
GNUNET_free (pcc.provider_url);
|
||||
}
|
||||
/* check signatures */
|
||||
if (GNUNET_OK !=
|
||||
TALER_wallet_purse_merge_verify (
|
||||
pcc.payto_url,
|
||||
pcc.merge_timestamp,
|
||||
&pcc.merge_pub,
|
||||
&pcc.merge_sig))
|
||||
{
|
||||
GNUNET_break_op (0);
|
||||
GNUNET_free (pcc.provider_url);
|
||||
return TALER_MHD_reply_with_error (
|
||||
connection,
|
||||
MHD_HTTP_BAD_REQUEST,
|
||||
TALER_EC_EXCHANGE_PURSE_MERGE_INVALID_MERGE_SIGNATURE,
|
||||
NULL);
|
||||
}
|
||||
if (GNUNET_OK !=
|
||||
TALER_wallet_account_merge_verify (
|
||||
pcc.merge_timestamp,
|
||||
pcc.purse_pub,
|
||||
pcc.purse_expiration,
|
||||
&pcc.h_contract_terms,
|
||||
&pcc.target_amount,
|
||||
pcc.min_age,
|
||||
&pcc.reserve_pub,
|
||||
&pcc.reserve_sig))
|
||||
{
|
||||
GNUNET_break_op (0);
|
||||
GNUNET_free (pcc.provider_url);
|
||||
return TALER_MHD_reply_with_error (
|
||||
connection,
|
||||
MHD_HTTP_BAD_REQUEST,
|
||||
TALER_EC_EXCHANGE_PURSE_MERGE_INVALID_RESERVE_SIGNATURE,
|
||||
NULL);
|
||||
}
|
||||
|
||||
/* execute transaction */
|
||||
{
|
||||
MHD_RESULT mhd_ret;
|
||||
|
||||
if (GNUNET_OK !=
|
||||
TEH_DB_run_transaction (connection,
|
||||
"execute purse merge",
|
||||
TEH_MT_REQUEST_PURSE_MERGE,
|
||||
&mhd_ret,
|
||||
&merge_transaction,
|
||||
&pcc))
|
||||
{
|
||||
GNUNET_free (pcc.provider_url);
|
||||
return mhd_ret;
|
||||
}
|
||||
}
|
||||
|
||||
GNUNET_free (pcc.provider_url);
|
||||
/* generate regular response */
|
||||
return reply_merge_success (connection,
|
||||
&pcc);
|
||||
}
|
||||
|
||||
|
||||
/* end of taler-exchange-httpd_purses_merge.c */
|
||||
Loading…
Reference in New Issue
Block a user