feature/1214 session fetch refactor (#1215)

* chore(docs): remove token economy guide

* refactor(context): update GatewayContext to use Querier interface

* chore(database): update schema path

* docs: Update READMEs for x/did, x/dwn, and x/svc with UCAN integration

* chore(pkg): update database scope name

* refactor(did): optimize GenesisState proto methods

* refactor(svc): update Service proto to use repeated fields

* refactor(api): rename MsgSpawn to MsgInitialize

x/did/README.md

@@ -1,6 +1,6 @@
 # `x/did`
 
-The Decentralized Identity module is responsible for managing native Sonr Accounts, their derived wallets, and associated user identification information.
+The Decentralized Identity module is responsible for managing native Sonr Accounts, their derived wallets, and associated user identification information. This module now incorporates UCAN (User Controlled Authorization Networks) for enhanced authorization and access control.
 
 ## State
 
@@ -75,13 +75,13 @@ The DID module defines the following messages:
 5. MsgUnlinkAuthentication
 6. MsgUpdateParams
 
-Each message triggers specific state machine behaviors related to managing DIDs, authentications, assertions, and module parameters.
+Each message triggers specific state machine behaviors related to managing DIDs, authentications, assertions, and module parameters. These messages now also involve UCAN authorization checks where applicable.
 
 ## Query
 
 The DID module provides the following query endpoints:
 
-1. Params: Query all parameters of the module
+1. Params: Query all parameters of the module, including UCAN-related parameters.
 2. Resolve: Query the DID document by its ID
 3. Sign: Sign a message with the DID document
 4. Verify: Verify a message with the DID document
@@ -92,18 +92,41 @@ The module parameters include:
 - Allowed public keys (map of KeyInfo)
 - Conveyance preference
 - Attestation formats
+- UCAN Authorization Parameters:
+  - `UcanPermissions`: Specifies the required UCAN permissions for various actions within the module.
 
 ## Client
 
 The module provides gRPC and REST endpoints for all defined messages and queries.
 
+## UCAN Authorization
+
+This module utilizes UCAN (User Controlled Authorization Networks) to provide a decentralized and user-centric authorization mechanism. UCANs are self-contained authorization tokens that allow users to delegate specific capabilities to other entities without relying on a central authority.
+
+### UCAN Integration
+
+- The module parameters include a `UcanPermissions` field that defines the default UCAN permissions required for actions within the module.
+- Message handlers in the `MsgServer` perform UCAN authorization checks by:
+  - Retrieving the UCAN permissions from the context (injected by a middleware).
+  - Retrieving the required UCAN permissions from the module parameters.
+  - Verifying that the provided UCAN permissions satisfy the required permissions.
+- A dedicated middleware is responsible for:
+  - Parsing incoming requests for UCAN tokens.
+  - Verifying UCAN token signatures and validity.
+  - Extracting UCAN permissions.
+  - Injecting UCAN permissions into the context.
+- UCAN verification logic involves:
+  - Checking UCAN token signatures against the issuer's public key (resolved via the `x/did` module).
+  - Validating token expiration and other constraints.
+  - Parsing token capabilities and extracting relevant permissions.
+
 ## Future Improvements
 
 Potential future improvements could include:
-1. Enhanced privacy features for DID operations
+1. Enhanced privacy features for DID operations, potentially leveraging UCAN capabilities for privacy-preserving authorization.
 2. Integration with more blockchain networks
 3. Support for additional key types and cryptographic algorithms
-4. Improved revocation mechanisms for credentials and assertions
+4. Improved revocation mechanisms for credentials, assertions, and UCAN tokens.
 
 ## Tests
 

x/did/types/genesis.go

@@ -43,3 +43,64 @@ func (gs GenesisState) Validate() error {
 
 	return gs.Params.Validate()
 }
+
+// Equal checks if two Attenuation are equal
+func (a *Attenuation) Equal(that *Attenuation) bool {
+	if that == nil {
+		return false
+	}
+	if a.Resource != nil {
+		if that.Resource == nil {
+			return false
+		}
+		if !a.Resource.Equal(that.Resource) {
+			return false
+		}
+	}
+	if len(a.Capabilities) != len(that.Capabilities) {
+		return false
+	}
+	for i := range a.Capabilities {
+		if !a.Capabilities[i].Equal(that.Capabilities[i]) {
+			return false
+		}
+	}
+	return true
+}
+
+// Equal checks if two Capability are equal
+func (c *Capability) Equal(that *Capability) bool {
+	if that == nil {
+		return false
+	}
+	if c.Name != that.Name {
+		return false
+	}
+	if c.Parent != that.Parent {
+		return false
+	}
+	// TODO: check description
+	if len(c.Resources) != len(that.Resources) {
+		return false
+	}
+	for i := range c.Resources {
+		if c.Resources[i] != that.Resources[i] {
+			return false
+		}
+	}
+	return true
+}
+
+// Equal checks if two Resource are equal
+func (r *Resource) Equal(that *Resource) bool {
+	if that == nil {
+		return false
+	}
+	if r.Kind != that.Kind {
+		return false
+	}
+	if r.Template != that.Template {
+		return false
+	}
+	return true
+}