286 lines
8.4 KiB
Go
286 lines
8.4 KiB
Go
|
package eip712
|
||
|
|
||
|
import (
|
||
|
"encoding/json"
|
||
|
"errors"
|
||
|
"fmt"
|
||
|
|
||
|
"github.com/cosmos/cosmos-sdk/simapp/params"
|
||
|
"github.com/cosmos/cosmos-sdk/x/auth/migrations/legacytx"
|
||
|
|
||
|
sdk "github.com/cosmos/cosmos-sdk/types"
|
||
|
txTypes "github.com/cosmos/cosmos-sdk/types/tx"
|
||
|
|
||
|
apitypes "github.com/ethereum/go-ethereum/signer/core/apitypes"
|
||
|
ethermint "github.com/evmos/ethermint/types"
|
||
|
|
||
|
"github.com/cosmos/cosmos-sdk/codec"
|
||
|
)
|
||
|
|
||
|
type aminoMessage struct {
|
||
|
Type string `json:"type"`
|
||
|
Value interface{} `json:"value"`
|
||
|
}
|
||
|
|
||
|
var (
|
||
|
protoCodec codec.ProtoCodecMarshaler
|
||
|
aminoCodec *codec.LegacyAmino
|
||
|
)
|
||
|
|
||
|
// SetEncodingConfig set the encoding config to the singleton codecs (Amino and Protobuf).
|
||
|
// The process of unmarshaling SignDoc bytes into a SignDoc object requires having a codec
|
||
|
// populated with all relevant message types. As a result, we must call this method on app
|
||
|
// initialization with the app's encoding config.
|
||
|
func SetEncodingConfig(cfg params.EncodingConfig) {
|
||
|
aminoCodec = cfg.Amino
|
||
|
protoCodec = codec.NewProtoCodec(cfg.InterfaceRegistry)
|
||
|
}
|
||
|
|
||
|
// Get the EIP-712 object hash for the given SignDoc bytes by first decoding the bytes into
|
||
|
// an EIP-712 object, then hashing the EIP-712 object to create the bytes to be signed.
|
||
|
// See https://eips.ethereum.org/EIPS/eip-712 for more.
|
||
|
func GetEIP712HashForMsg(signDocBytes []byte) ([]byte, error) {
|
||
|
typedData, err := GetEIP712TypedDataForMsg(signDocBytes)
|
||
|
if err != nil {
|
||
|
return nil, err
|
||
|
}
|
||
|
|
||
|
domainSeparator, err := typedData.HashStruct("EIP712Domain", typedData.Domain.Map())
|
||
|
if err != nil {
|
||
|
return nil, fmt.Errorf("could not hash EIP-712 domain: %w", err)
|
||
|
}
|
||
|
|
||
|
typedDataHash, err := typedData.HashStruct(typedData.PrimaryType, typedData.Message)
|
||
|
if err != nil {
|
||
|
return nil, fmt.Errorf("could not hash EIP-712 primary type: %w", err)
|
||
|
}
|
||
|
rawData := []byte(fmt.Sprintf("\x19\x01%s%s", string(domainSeparator), string(typedDataHash)))
|
||
|
|
||
|
return rawData, nil
|
||
|
}
|
||
|
|
||
|
// GetEIP712TypedDataForMsg returns the EIP-712 TypedData representation for either
|
||
|
// Amino or Protobuf encoded signature doc bytes.
|
||
|
func GetEIP712TypedDataForMsg(signDocBytes []byte) (apitypes.TypedData, error) {
|
||
|
// Attempt to decode as both Amino and Protobuf since the message format is unknown.
|
||
|
// If either decode works, we can move forward with the corresponding typed data.
|
||
|
typedDataAmino, errAmino := decodeAminoSignDoc(signDocBytes)
|
||
|
if errAmino == nil && isValidEIP712Payload(typedDataAmino) {
|
||
|
return typedDataAmino, nil
|
||
|
}
|
||
|
typedDataProtobuf, errProtobuf := decodeProtobufSignDoc(signDocBytes)
|
||
|
if errProtobuf == nil && isValidEIP712Payload(typedDataProtobuf) {
|
||
|
return typedDataProtobuf, nil
|
||
|
}
|
||
|
|
||
|
return apitypes.TypedData{}, fmt.Errorf("could not decode sign doc as either Amino or Protobuf.\n amino: %v\n protobuf: %v", errAmino, errProtobuf)
|
||
|
}
|
||
|
|
||
|
// isValidEIP712Payload ensures that the given TypedData does not contain empty fields from
|
||
|
// an improper initialization.
|
||
|
func isValidEIP712Payload(typedData apitypes.TypedData) bool {
|
||
|
return len(typedData.Message) != 0 && len(typedData.Types) != 0 && typedData.PrimaryType != "" && typedData.Domain != apitypes.TypedDataDomain{}
|
||
|
}
|
||
|
|
||
|
// decodeAminoSignDoc attempts to decode the provided sign doc (bytes) as an Amino payload
|
||
|
// and returns a signable EIP-712 TypedData object.
|
||
|
func decodeAminoSignDoc(signDocBytes []byte) (apitypes.TypedData, error) {
|
||
|
var aminoDoc legacytx.StdSignDoc
|
||
|
if err := aminoCodec.UnmarshalJSON(signDocBytes, &aminoDoc); err != nil {
|
||
|
return apitypes.TypedData{}, err
|
||
|
}
|
||
|
|
||
|
var fees legacytx.StdFee
|
||
|
if err := aminoCodec.UnmarshalJSON(aminoDoc.Fee, &fees); err != nil {
|
||
|
return apitypes.TypedData{}, err
|
||
|
}
|
||
|
|
||
|
// Validate payload messages
|
||
|
msgs := make([]sdk.Msg, len(aminoDoc.Msgs))
|
||
|
for i, jsonMsg := range aminoDoc.Msgs {
|
||
|
var m sdk.Msg
|
||
|
if err := aminoCodec.UnmarshalJSON(jsonMsg, &m); err != nil {
|
||
|
return apitypes.TypedData{}, fmt.Errorf("failed to unmarshal sign doc message: %w", err)
|
||
|
}
|
||
|
msgs[i] = m
|
||
|
}
|
||
|
|
||
|
if err := validatePayloadMessages(msgs); err != nil {
|
||
|
return apitypes.TypedData{}, err
|
||
|
}
|
||
|
|
||
|
// Use first message for fee payer and type inference
|
||
|
msg := msgs[0]
|
||
|
|
||
|
// By convention, the fee payer is the first address in the list of signers.
|
||
|
feePayer := msg.GetSigners()[0]
|
||
|
feeDelegation := &FeeDelegationOptions{
|
||
|
FeePayer: feePayer,
|
||
|
}
|
||
|
|
||
|
chainID, err := ethermint.ParseChainID(aminoDoc.ChainID)
|
||
|
if err != nil {
|
||
|
return apitypes.TypedData{}, errors.New("invalid chain ID passed as argument")
|
||
|
}
|
||
|
|
||
|
typedData, err := WrapTxToTypedData(
|
||
|
protoCodec,
|
||
|
chainID.Uint64(),
|
||
|
msg,
|
||
|
signDocBytes,
|
||
|
feeDelegation,
|
||
|
)
|
||
|
if err != nil {
|
||
|
return apitypes.TypedData{}, fmt.Errorf("could not convert to EIP712 representation: %w", err)
|
||
|
}
|
||
|
|
||
|
return typedData, nil
|
||
|
}
|
||
|
|
||
|
// decodeProtobufSignDoc attempts to decode the provided sign doc (bytes) as a Protobuf payload
|
||
|
// and returns a signable EIP-712 TypedData object.
|
||
|
func decodeProtobufSignDoc(signDocBytes []byte) (apitypes.TypedData, error) {
|
||
|
signDoc := &txTypes.SignDoc{}
|
||
|
if err := signDoc.Unmarshal(signDocBytes); err != nil {
|
||
|
return apitypes.TypedData{}, err
|
||
|
}
|
||
|
|
||
|
authInfo := &txTypes.AuthInfo{}
|
||
|
if err := authInfo.Unmarshal(signDoc.AuthInfoBytes); err != nil {
|
||
|
return apitypes.TypedData{}, err
|
||
|
}
|
||
|
|
||
|
body := &txTypes.TxBody{}
|
||
|
if err := body.Unmarshal(signDoc.BodyBytes); err != nil {
|
||
|
return apitypes.TypedData{}, err
|
||
|
}
|
||
|
|
||
|
// Until support for these fields is added, throw an error at their presence
|
||
|
if body.TimeoutHeight != 0 || len(body.ExtensionOptions) != 0 || len(body.NonCriticalExtensionOptions) != 0 {
|
||
|
return apitypes.TypedData{}, errors.New("body contains unsupported fields: TimeoutHeight, ExtensionOptions, or NonCriticalExtensionOptions")
|
||
|
}
|
||
|
|
||
|
if len(authInfo.SignerInfos) != 1 {
|
||
|
return apitypes.TypedData{}, fmt.Errorf("invalid number of signer infos provided, expected 1 got %v", len(authInfo.SignerInfos))
|
||
|
}
|
||
|
|
||
|
// Validate payload messages
|
||
|
msgs := make([]sdk.Msg, len(body.Messages))
|
||
|
for i, protoMsg := range body.Messages {
|
||
|
var m sdk.Msg
|
||
|
if err := protoCodec.UnpackAny(protoMsg, &m); err != nil {
|
||
|
return apitypes.TypedData{}, fmt.Errorf("could not unpack message object with error %w", err)
|
||
|
}
|
||
|
msgs[i] = m
|
||
|
}
|
||
|
|
||
|
if err := validatePayloadMessages(msgs); err != nil {
|
||
|
return apitypes.TypedData{}, err
|
||
|
}
|
||
|
|
||
|
// Use first message for fee payer and type inference
|
||
|
msg := msgs[0]
|
||
|
|
||
|
signerInfo := authInfo.SignerInfos[0]
|
||
|
|
||
|
chainID, err := ethermint.ParseChainID(signDoc.ChainId)
|
||
|
if err != nil {
|
||
|
return apitypes.TypedData{}, fmt.Errorf("invalid chain ID passed as argument: %w", err)
|
||
|
}
|
||
|
|
||
|
stdFee := &legacytx.StdFee{
|
||
|
Amount: authInfo.Fee.Amount,
|
||
|
Gas: authInfo.Fee.GasLimit,
|
||
|
}
|
||
|
|
||
|
feePayer := msg.GetSigners()[0]
|
||
|
feeDelegation := &FeeDelegationOptions{
|
||
|
FeePayer: feePayer,
|
||
|
}
|
||
|
|
||
|
tip := authInfo.Tip
|
||
|
|
||
|
// WrapTxToTypedData expects the payload as an Amino Sign Doc
|
||
|
signBytes := legacytx.StdSignBytes(
|
||
|
signDoc.ChainId,
|
||
|
signDoc.AccountNumber,
|
||
|
signerInfo.Sequence,
|
||
|
body.TimeoutHeight,
|
||
|
*stdFee,
|
||
|
msgs,
|
||
|
body.Memo,
|
||
|
tip,
|
||
|
)
|
||
|
|
||
|
typedData, err := WrapTxToTypedData(
|
||
|
protoCodec,
|
||
|
chainID.Uint64(),
|
||
|
msg,
|
||
|
signBytes,
|
||
|
feeDelegation,
|
||
|
)
|
||
|
if err != nil {
|
||
|
return apitypes.TypedData{}, err
|
||
|
}
|
||
|
|
||
|
return typedData, nil
|
||
|
}
|
||
|
|
||
|
// validatePayloadMessages ensures that the transaction messages can be represented in an EIP-712
|
||
|
// encoding by checking that messages exist, are of the same type, and share a single signer.
|
||
|
func validatePayloadMessages(msgs []sdk.Msg) error {
|
||
|
if len(msgs) == 0 {
|
||
|
return errors.New("unable to build EIP-712 payload: transaction does contain any messages")
|
||
|
}
|
||
|
|
||
|
var msgType string
|
||
|
var msgSigner sdk.AccAddress
|
||
|
|
||
|
for i, m := range msgs {
|
||
|
t, err := getMsgType(m)
|
||
|
if err != nil {
|
||
|
return err
|
||
|
}
|
||
|
|
||
|
if len(m.GetSigners()) != 1 {
|
||
|
return errors.New("unable to build EIP-712 payload: expect exactly 1 signer")
|
||
|
}
|
||
|
|
||
|
if i == 0 {
|
||
|
msgType = t
|
||
|
msgSigner = m.GetSigners()[0]
|
||
|
continue
|
||
|
}
|
||
|
|
||
|
if t != msgType {
|
||
|
return errors.New("unable to build EIP-712 payload: different types of messages detected")
|
||
|
}
|
||
|
|
||
|
if !msgSigner.Equals(m.GetSigners()[0]) {
|
||
|
return errors.New("unable to build EIP-712 payload: multiple signers detected")
|
||
|
}
|
||
|
}
|
||
|
|
||
|
return nil
|
||
|
}
|
||
|
|
||
|
// getMsgType returns the message type prefix for the given Cosmos SDK Msg
|
||
|
func getMsgType(msg sdk.Msg) (string, error) {
|
||
|
jsonBytes, err := aminoCodec.MarshalJSON(msg)
|
||
|
if err != nil {
|
||
|
return "", err
|
||
|
}
|
||
|
|
||
|
var jsonMsg aminoMessage
|
||
|
if err := json.Unmarshal(jsonBytes, &jsonMsg); err != nil {
|
||
|
return "", err
|
||
|
}
|
||
|
|
||
|
// Verify Type was successfully filled in
|
||
|
if jsonMsg.Type == "" {
|
||
|
return "", errors.New("could not decode message: type is missing")
|
||
|
}
|
||
|
|
||
|
return jsonMsg.Type, nil
|
||
|
}
|