trust-registry 0.28.0

Trust Registry
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

//! Phase 1 of `trust-registry setup`: mint and persist the ephemeral setup key.

use std::path::Path;

use vta_sdk::provision_client::driver::run_phase1_init;

use super::TrustRegistryMessages;

/// `trust-registry setup --setup-key-out <path> [--context <id>]`.
///
/// Writes the key (0600, the `EphemeralSetupKey::persist_to` format phase 2
/// loads as `setup_key_file`) and prints to stderr, through the driver every
/// VTI integration shares, a block an automated caller parses the DID from:
/// the line after `Setup DID (ephemeral):`. Makes no VTA call and writes no
/// configuration.
pub async fn run_setup_phase1(out_path: &Path, context_id: &str) -> Result<(), String> {
    let finalise = format!(
        "trust-registry setup --from <your-setup.toml>   (with setup_key_file = \"{}\")",
        out_path.display()
    );
    run_phase1_init(
        &mut std::io::stderr(),
        out_path,
        context_id,
        &TrustRegistryMessages,
        Some(&finalise),
    )
    .await
    .map_err(|e| format!("could not create the setup key: {e}"))
}

#[cfg(test)]
mod tests {
    use super::*;
    use vta_sdk::provision_client::EphemeralSetupKey;

    #[tokio::test]
    async fn writes_a_key_phase_two_can_load() {
        let dir = tempfile::tempdir().unwrap();
        let path = dir.path().join("setup-key.json");
        run_setup_phase1(&path, "trust-registry").await.unwrap();

        let key = EphemeralSetupKey::load_from(&path).unwrap();
        assert!(key.did.starts_with("did:key:"));

        #[cfg(unix)]
        {
            use std::os::unix::fs::PermissionsExt;
            let mode = std::fs::metadata(&path).unwrap().permissions().mode();
            assert_eq!(mode & 0o777, 0o600, "the setup key is a private key");
        }
    }
}