mirror of
https://github.com/sonr-io/sonr.git
synced 2026-08-02 09:21:39 +00:00
* feat: Add Enclave Usage Examples * feat(es/ucan): Add comprehensive integration tests - Create integration.test.ts with full UCAN token lifecycle testing - Cover end-to-end token creation, parsing, and validation - Test capability attenuation and delegation chains - Validate multi-algorithm support and timestamp scenarios - Implement error recovery and performance test scenarios 🤖 Generated with Claude Code Co-Authored-By: Claude <noreply@anthropic.com> * No commit suggestions generated * No commit suggestions generated * chore: Remove migrated components and add migration documentation Removed all code and references for components that have been moved to separate repositories: **Moved to sonr-io/hway:** - bridge/ - HTTP service with OAuth2/OIDC/WebAuthn handlers - cmd/hway/ - Highway service binary - internal/migrations/ - PostgreSQL schema migrations **Moved to sonr-io/motr:** - cmd/motr/ - Motor worker service (WASM vault operations) - cmd/vault/ - Vault CLI tool - crypto/ - Comprehensive cryptographic library - packages/ - TypeScript SDK packages (es, sdk, ui, com, pkl) - web/auth/ - Authentication web application - web/dash/ - Dashboard web application **Updated Configuration:** - Makefile: Removed build/test/release targets for moved components - CLAUDE.md: Simplified to focus on core blockchain components - devbox.json: Removed scripts for moved services - docker-compose.yml: Removed hway, postgres, redis, auth, dash services - .github/scopes.yml: Removed CI scopes for migrated components - .goreleaser.yml: Updated release configuration **Added Migration Documentation:** - MIGRATE_HWAY.md: Comprehensive Highway service architecture and migration guide - MIGRATE_MOTR.md: Comprehensive Motor/Worker/Vault architecture and migration guide These migration documents provide complete context for setting up the new repositories including architecture diagrams, component breakdowns, API documentation, and migration checklists. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com> * No commit suggestions generated * chore: Remove contracts references and documentation Removed all references to the contracts directory that was migrated to a separate repository. **Changes:** - .gitignore: Removed contract-specific ignore patterns for DAO and wSNR contracts - .gitignore: Removed hway and motr binary references (already migrated) - .rgignore: Removed contracts, chains, and crypto directory references - docs/reference/contracts/: Removed DAO.mdx and wSNR.mdx documentation files This completes the cleanup of migrated components from the repository. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com> * docs: add crypto library migration documentation Added comprehensive migration documentation for the crypto library that was moved to sonr-io/crypto repository. This documentation provides complete context for understanding the cryptographic primitives and protocols used throughout the Sonr ecosystem. ## Key Documentation Added ### MIGRATE_CRYPTO.md Complete documentation of the crypto library covering: **Core Cryptographic Primitives** - Elliptic curve implementations (Ed25519, Secp256k1, P-256, BLS12-381, Pallas/Vesta) - Native curve arithmetic with optimized field operations - Pairing-friendly curves for BLS signatures **Multi-Party Computation (MPC)** - MPC enclave for vault key generation and management - Threshold cryptography (TECDSA, TED25519 with FROST protocol) - Distributed Key Generation (DKG) via Gennaro and FROST protocols - Secret sharing schemes (Shamir, Feldman VSS, Pedersen VSS) **Digital Signature Schemes** - BLS signatures with aggregation support - BBS+ signatures for selective disclosure - Schnorr signatures (standard and Mina/NEM variants) - ECDSA with deterministic nonce generation **Zero-Knowledge Proofs** - Bulletproofs for range proofs - Inner Product Arguments (IPA) - Batch verification support **Advanced Cryptographic Protocols** - Cryptographic accumulators for set membership proofs - Paillier homomorphic encryption - Oblivious Transfer (OT) protocols - Verifiable Random Functions (VRF) **Key Management & Identity** - DID key management with multi-chain support - Multi-algorithm public key handling - Wallet address derivation (Bitcoin, Ethereum, Cosmos, Solana, etc.) **UCAN Integration** - User-Controlled Authorization Networks - Capability delegation and attenuation - JWT-based capability tokens - MPC-enabled UCAN signing **Security Utilities** - AEAD encryption (AES-GCM, AES-SIV) - Argon2 key derivation - ECIES encryption - Secure memory handling ### MIGRATE_MOTR.md Updates Updated Motor migration documentation to clarify that the crypto library is now a separate external dependency at github.com/sonr-io/crypto v1.0.1 ## Repository Context The crypto library has been successfully migrated to its own repository and is published as a Go module. It serves as the foundational cryptographic layer for: - Sonr blockchain (snrd) - DID signatures, vault operations - Highway service (hway) - UCAN token signing, WebAuthn - Motor/Worker (motr) - MPC vault operations, threshold signatures ## Integration Impact All Sonr ecosystem components now depend on the external crypto library: ```go require github.com/sonr-io/crypto v1.0.1 ``` The migration enables independent versioning and maintenance of cryptographic primitives while maintaining security and compatibility across the ecosystem. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com> * No commit suggestions generated * No commit suggestions generated * No commit suggestions generated --------- Co-authored-by: Claude <noreply@anthropic.com>
161 lines
4.2 KiB
Go
161 lines
4.2 KiB
Go
package context
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
|
|
"cosmossdk.io/log"
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/sonr-io/crypto/vrf"
|
|
)
|
|
|
|
// TestSonrContextInitialization tests SonrContext initialization with VRF keys
|
|
func TestSonrContextInitialization(t *testing.T) {
|
|
require := require.New(t)
|
|
|
|
// Create temporary directory for test
|
|
tmpDir := t.TempDir()
|
|
|
|
// Test initialization without VRF keys
|
|
t.Setenv("HOME", tmpDir)
|
|
logger := log.NewNopLogger()
|
|
ctx := NewSonrContext(logger)
|
|
|
|
err := ctx.Initialize()
|
|
require.Error(err, "Should fail to initialize without VRF keys")
|
|
require.False(ctx.IsInitialized(), "Context should not be initialized without VRF keys")
|
|
}
|
|
|
|
// TestSonrContextWithValidKeys tests SonrContext with valid VRF keys
|
|
func TestSonrContextWithValidKeys(t *testing.T) {
|
|
require := require.New(t)
|
|
|
|
// Create temporary directory for test
|
|
tmpDir := t.TempDir()
|
|
t.Setenv("HOME", tmpDir)
|
|
|
|
// Create .sonr directory
|
|
sonrDir := filepath.Join(tmpDir, ".sonr")
|
|
err := os.MkdirAll(sonrDir, 0o750)
|
|
require.NoError(err)
|
|
|
|
// Generate VRF keys
|
|
privateKey, err := vrf.GenerateKey(nil)
|
|
require.NoError(err)
|
|
|
|
// Write VRF keys
|
|
vrfKeyPath := filepath.Join(sonrDir, "vrf_secret.key")
|
|
err = os.WriteFile(vrfKeyPath, privateKey, 0o600)
|
|
require.NoError(err)
|
|
|
|
// Test initialization with valid VRF keys
|
|
logger := log.NewNopLogger()
|
|
ctx := NewSonrContext(logger)
|
|
|
|
err = ctx.Initialize()
|
|
require.NoError(err, "Should initialize successfully with valid VRF keys")
|
|
require.True(ctx.IsInitialized(), "Context should be initialized")
|
|
|
|
// Test VRF key retrieval
|
|
privKey, err := ctx.GetVRFPrivateKey()
|
|
require.NoError(err)
|
|
require.Len(privKey, vrf.PrivateKeySize)
|
|
|
|
pubKey, err := ctx.GetVRFPublicKey()
|
|
require.NoError(err)
|
|
require.Len(pubKey, vrf.PublicKeySize)
|
|
}
|
|
|
|
// TestSonrContextInvalidKeySize tests handling of invalid key size
|
|
func TestSonrContextInvalidKeySize(t *testing.T) {
|
|
require := require.New(t)
|
|
|
|
// Create temporary directory for test
|
|
tmpDir := t.TempDir()
|
|
t.Setenv("HOME", tmpDir)
|
|
|
|
// Create .sonr directory
|
|
sonrDir := filepath.Join(tmpDir, ".sonr")
|
|
err := os.MkdirAll(sonrDir, 0o750)
|
|
require.NoError(err)
|
|
|
|
// Write invalid VRF key (wrong size)
|
|
vrfKeyPath := filepath.Join(sonrDir, "vrf_secret.key")
|
|
invalidKey := make([]byte, 32) // Should be 64 bytes
|
|
err = os.WriteFile(vrfKeyPath, invalidKey, 0o600)
|
|
require.NoError(err)
|
|
|
|
// Test initialization with invalid key size
|
|
logger := log.NewNopLogger()
|
|
ctx := NewSonrContext(logger)
|
|
|
|
err = ctx.Initialize()
|
|
require.Error(err, "Should fail to initialize with invalid key size")
|
|
require.Contains(err.Error(), "invalid VRF private key size")
|
|
require.False(ctx.IsInitialized(), "Context should not be initialized with invalid keys")
|
|
}
|
|
|
|
// TestSonrContextThreadSafety tests thread-safe access to VRF keys
|
|
func TestSonrContextThreadSafety(t *testing.T) {
|
|
require := require.New(t)
|
|
|
|
// Create temporary directory for test
|
|
tmpDir := t.TempDir()
|
|
t.Setenv("HOME", tmpDir)
|
|
|
|
// Create .sonr directory with valid keys
|
|
sonrDir := filepath.Join(tmpDir, ".sonr")
|
|
err := os.MkdirAll(sonrDir, 0o750)
|
|
require.NoError(err)
|
|
|
|
privateKey, err := vrf.GenerateKey(nil)
|
|
require.NoError(err)
|
|
|
|
vrfKeyPath := filepath.Join(sonrDir, "vrf_secret.key")
|
|
err = os.WriteFile(vrfKeyPath, privateKey, 0o600)
|
|
require.NoError(err)
|
|
|
|
// Initialize context
|
|
logger := log.NewNopLogger()
|
|
ctx := NewSonrContext(logger)
|
|
err = ctx.Initialize()
|
|
require.NoError(err)
|
|
|
|
// Test concurrent access (simple check - not exhaustive)
|
|
done := make(chan bool, 10)
|
|
for i := 0; i < 10; i++ {
|
|
go func() {
|
|
_, err := ctx.GetVRFPrivateKey()
|
|
require.NoError(err)
|
|
_, err = ctx.GetVRFPublicKey()
|
|
require.NoError(err)
|
|
done <- true
|
|
}()
|
|
}
|
|
|
|
// Wait for all goroutines
|
|
for i := 0; i < 10; i++ {
|
|
<-done
|
|
}
|
|
}
|
|
|
|
// TestSonrContextErrorMessages tests that error messages are helpful
|
|
func TestSonrContextErrorMessages(t *testing.T) {
|
|
require := require.New(t)
|
|
|
|
// Create temporary directory for test
|
|
tmpDir := t.TempDir()
|
|
t.Setenv("HOME", tmpDir)
|
|
|
|
logger := log.NewNopLogger()
|
|
ctx := NewSonrContext(logger)
|
|
|
|
err := ctx.Initialize()
|
|
require.Error(err)
|
|
require.Contains(err.Error(), "failed to read VRF secret key")
|
|
require.Contains(err.Error(), "VRF keys are required")
|
|
require.Contains(err.Error(), "snrd init")
|
|
}
|