holochain / holochain/android-service-runtime

Generate zome call signing keys on client side, based on user-input password

Open
#86 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
4
Forks
2
Avg merge
1d 5h
Merged PRs (30d)
3

Description

AC:
- add function to holochain-runtime: authorize_signing_key(installed_app_id: String, public_key: Vec)
- calls grant_zome_call_capability for the specified public key and app id
- authorize_signing_key passed up through ffi crate and HolochainService bindings
- HolochainServiceClient function signZomeCall will:
- check if signing private key is stored to app storage
- if not
- generate one based on random password
- call authorize_signing_key
- sign the zome call with the private key
- return the signed zome call
- add another HolochainServiceClient function signZomeCallWithPassword:
- generate signing key based on password input
- sign the zome call with the private key
- return the signed zome call
- modify tauri-plugin-holochain-service-client:
- config specifies if zome calls are signed with auto-generated key or password

Also consider including a UI view that is displayed above the app to enter a password for calling signZomeCallWithPassword

See example implementation:
- https://github.com/ThetaSinner/ekto/blob/main/ekto-lib/src/index.ts#L87
- https://github.com/ThetaSinner/ekto/blob/main/src/approve_key.rs

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.