Simple VSS

Author: benthecarman

orange-sdk/Cargo.toml

@@ -23,7 +23,7 @@ _cashu-tests = ["_test-utils", "cdk-ldk-node", "cdk/mint", "cdk-sqlite", "cdk-ax
 [dependencies]
 graduated-rebalancer = { path = "../graduated-rebalancer", version = "0.1.0" }
 
-ldk-node = { git = "https://github.com/benthecarman/ldk-node.git", rev = "3ed1d13451239c54616e9f3fe75fa1f748807b15" }
+ldk-node = { git = "https://github.com/benthecarman/ldk-node.git", rev = "8dd1ba745a57994a9fc6ab6fa7a502f00bc92655" }
 lightning-macros = "0.2.0-beta1"
 bitcoin-payment-instructions = { workspace = true }
 chrono = { version = "0.4", default-features = false }

orange-sdk/src/ffi/orange/config.rs

@@ -57,15 +57,15 @@ impl TryInto<OrangeSeed> for Seed {
 #[derive(Debug, Clone, uniffi::Enum)]
 pub enum VssAuth {
 	/// Authentication using an LNURL-auth server.
-	LNURLAuthServer(String),
+	LNURLAuthServer(String, HashMap<String, String>),
 	/// Authentication using a fixed set of HTTP headers.
 	FixedHeaders(HashMap<String, String>),
 }
 
 impl From<VssAuth> for OrangeVssAuth {
 	fn from(auth: VssAuth) -> Self {
 		match auth {
-			VssAuth::LNURLAuthServer(url) => OrangeVssAuth::LNURLAuthServer(url),
+			VssAuth::LNURLAuthServer(url, headers) => OrangeVssAuth::LNURLAuthServer(url, headers),
 			VssAuth::FixedHeaders(headers) => OrangeVssAuth::FixedHeaders(headers),
 		}
 	}
@@ -74,7 +74,7 @@ impl From<VssAuth> for OrangeVssAuth {
 impl From<OrangeVssAuth> for VssAuth {
 	fn from(auth: OrangeVssAuth) -> Self {
 		match auth {
-			OrangeVssAuth::LNURLAuthServer(url) => VssAuth::LNURLAuthServer(url),
+			OrangeVssAuth::LNURLAuthServer(url, headers) => VssAuth::LNURLAuthServer(url, headers),
 			OrangeVssAuth::FixedHeaders(headers) => VssAuth::FixedHeaders(headers),
 		}
 	}

orange-sdk/src/lib.rs

@@ -18,15 +18,19 @@ use crate::trusted_wallet::spark::Spark;
 use crate::trusted_wallet::{DynTrustedWalletInterface, WalletTrusted};
 use graduated_rebalancer::GraduatedRebalancer;
 use ldk_node::bitcoin::Network;
+use ldk_node::bitcoin::bip32::{ChildNumber, Xpriv};
 use ldk_node::bitcoin::hashes::Hash;
 use ldk_node::bitcoin::io;
+use ldk_node::bitcoin::key::Secp256k1;
 use ldk_node::bitcoin::secp256k1::PublicKey;
 use ldk_node::io::sqlite_store::SqliteStore;
+use ldk_node::io::vss_store::VssStore;
 use ldk_node::lightning::ln::msgs::SocketAddress;
 use ldk_node::lightning::util::logger::Logger as _;
 use ldk_node::lightning::{log_debug, log_error, log_info, log_trace, log_warn};
 use ldk_node::lightning_invoice::Bolt11Invoice;
 use ldk_node::payment::{PaymentDirection, PaymentKind};
+use ldk_node::vss_client::headers::{FixedHeaders, LnurlAuthToJwtProvider, VssHeaderProvider};
 use ldk_node::{BuildError, ChannelDetails, DynStore, NodeError};
 
 use std::collections::HashMap;
@@ -155,7 +159,7 @@ pub enum Seed {
 #[derive(Debug, Clone)]
 pub enum VssAuth {
 	/// Authentication using an LNURL-auth server.
-	LNURLAuthServer(String),
+	LNURLAuthServer(String, HashMap<String, String>),
 	/// Authentication using a fixed set of HTTP headers.
 	FixedHeaders(HashMap<String, String>),
 }
@@ -177,7 +181,8 @@ pub struct VssConfig {
 pub enum StorageConfig {
 	/// Local SQLite database configuration.
 	LocalSQLite(String),
-	// todo VSS(VssConfig),
+	/// Versioned Storage Service (VSS) configuration.
+	VSS(VssConfig),
 }
 
 /// Configuration for the blockchain data source.
@@ -518,10 +523,59 @@ impl Wallet {
 			BuildError::RuntimeSetupFailed
 		})?);
 
-		let store: Arc<DynStore> = match &config.storage_config {
+		let store: Arc<DynStore> = match config.storage_config.clone() {
 			StorageConfig::LocalSQLite(path) => {
 				Arc::new(SqliteStore::new(path.into(), Some("orange.sqlite".to_owned()), None)?)
 			},
+			StorageConfig::VSS(vss_cfg) => {
+				let seed_bytes = match &config.seed {
+					Seed::Mnemonic { mnemonic, passphrase } => {
+						mnemonic.to_seed(passphrase.as_deref().unwrap_or(""))
+					},
+					Seed::Seed64(bytes) => *bytes,
+				};
+
+				let xprv = Xpriv::new_master(config.network, &seed_bytes).map_err(|e| {
+					log_error!(logger, "Failed to derive master secret: {}", e);
+					BuildError::InvalidSeedBytes
+				})?;
+
+				let secp = Secp256k1::new();
+
+				let vss_xprv = xprv
+					.derive_priv(&secp, &[ChildNumber::Hardened { index: 877 }]) // todo use const
+					.map_err(|e| {
+						log_error!(logger, "Failed to derive VSS secret: {}", e);
+						BuildError::InvalidSeedBytes
+					})?;
+
+				let vss_seed_bytes: [u8; 32] = vss_xprv.private_key.secret_bytes();
+
+				let headers: Arc<dyn VssHeaderProvider> = match vss_cfg.headers {
+					VssAuth::FixedHeaders(h) => Arc::new(FixedHeaders::new(h)),
+					VssAuth::LNURLAuthServer(url, headers) => {
+						let lnurl_auth_xprv = vss_xprv
+							.derive_priv(&secp, &[ChildNumber::Hardened { index: 138 }]) // todo use const
+							.map_err(|e| {
+								log_error!(logger, "Failed to derive VSS secret: {}", e);
+								BuildError::KVStoreSetupFailed
+							})?;
+
+						let lnurl_auth_jwt_provider = LnurlAuthToJwtProvider::new(
+							lnurl_auth_xprv,
+							url,
+							headers,
+						)
+						.map_err(|e| {
+							log_error!(logger, "Failed to create LnurlAuthToJwtProvider: {e}");
+							BuildError::KVStoreSetupFailed
+						})?;
+
+						Arc::new(lnurl_auth_jwt_provider)
+					},
+				};
+				Arc::new(VssStore::new(vss_cfg.vss_url, vss_cfg.store_id, vss_seed_bytes, headers)?)
+			},
 		};
 
 		let event_queue = Arc::new(EventQueue::new(Arc::clone(&store), Arc::clone(&logger)));