-
Notifications
You must be signed in to change notification settings - Fork 135
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat: custom ante handler to verify message creator
- Loading branch information
1 parent
bed75e4
commit 126af48
Showing
7 changed files
with
432 additions
and
15 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,142 @@ | ||
| package paloma | ||
|
|
||
| import ( | ||
| "fmt" | ||
|
|
||
| "github.com/cometbft/cometbft/libs/log" | ||
| "github.com/cosmos/cosmos-sdk/codec" | ||
| sdk "github.com/cosmos/cosmos-sdk/types" | ||
| "github.com/cosmos/cosmos-sdk/x/feegrant" | ||
| "github.com/gogo/protobuf/proto" | ||
| "github.com/palomachain/paloma/util/libmeta" | ||
| "github.com/palomachain/paloma/x/paloma/types" | ||
| vtypes "github.com/palomachain/paloma/x/valset/types" | ||
| ) | ||
|
|
||
| func logger(ctx sdk.Context) log.Logger { | ||
| return ctx.Logger().With("module", fmt.Sprintf("x/%s", types.ModuleName)) | ||
| } | ||
|
|
||
| // HandlerDecorator is an ante decorator wrapper for an ante handler | ||
| type HandlerDecorator struct { | ||
| handler sdk.AnteHandler | ||
| } | ||
|
|
||
| // NewAnteHandlerDecorator constructor for HandlerDecorator | ||
| func NewAnteHandlerDecorator(handler sdk.AnteHandler) HandlerDecorator { | ||
| return HandlerDecorator{handler} | ||
| } | ||
|
|
||
| // AnteHandle wraps the next AnteHandler to perform custom pre- and post-processing | ||
| func (decorator HandlerDecorator) AnteHandle(ctx sdk.Context, tx sdk.Tx, simulate bool, next sdk.AnteHandler) (newCtx sdk.Context, err error) { | ||
| if newCtx, err = decorator.handler(ctx, tx, simulate); err != nil { | ||
| return newCtx, err | ||
| } | ||
|
|
||
| return next(newCtx, tx, simulate) | ||
| } | ||
|
|
||
| // LogMsgDecorator logs all messages in blocks | ||
| type LogMsgDecorator struct { | ||
| cdc codec.Codec | ||
| } | ||
|
|
||
| // NewLogMsgDecorator is the constructor for LogMsgDecorator | ||
| func NewLogMsgDecorator(cdc codec.Codec) LogMsgDecorator { | ||
| return LogMsgDecorator{cdc: cdc} | ||
| } | ||
|
|
||
| // AnteHandle logs all messages in blocks | ||
| func (d LogMsgDecorator) AnteHandle(ctx sdk.Context, tx sdk.Tx, simulate bool, next sdk.AnteHandler) (sdk.Context, error) { | ||
| if simulate || ctx.IsCheckTx() { | ||
| return next(ctx, tx, simulate) | ||
| } | ||
|
|
||
| msgs := tx.GetMsgs() | ||
|
|
||
| for _, msg := range msgs { | ||
| logger(ctx).Debug(fmt.Sprintf("received message of type %s in block %d: %s", | ||
| proto.MessageName(msg), | ||
| ctx.BlockHeight(), | ||
| string(d.cdc.MustMarshalJSON(msg)), | ||
| )) | ||
| } | ||
|
|
||
| return next(ctx, tx, simulate) | ||
| } | ||
|
|
||
| // VerifyAuthorisedSignatureDecorator verifies that the message is signed by at least one signature that has | ||
| // active fee grant from the creator address, IF it contains metadata. | ||
| type VerifyAuthorisedSignatureDecorator struct { | ||
| fk types.FeegrantKeeper | ||
| } | ||
|
|
||
| func NewVerifyAuthorisedSignatureDecorator(fk types.FeegrantKeeper) VerifyAuthorisedSignatureDecorator { | ||
| return VerifyAuthorisedSignatureDecorator{fk: fk} | ||
| } | ||
|
|
||
| // AnteHandle verifies that the message is signed by at least one signature that has | ||
| // active fee grant from the creator address, IF the message contains metadata. | ||
| func (d VerifyAuthorisedSignatureDecorator) AnteHandle(ctx sdk.Context, tx sdk.Tx, simulate bool, next sdk.AnteHandler) (sdk.Context, error) { | ||
| if simulate || ctx.IsCheckTx() { | ||
| return next(ctx, tx, simulate) | ||
| } | ||
|
|
||
| for _, msg := range tx.GetMsgs() { | ||
| m, ok := msg.(libmeta.MsgWithMetadata[vtypes.MsgMetadata]) | ||
| if !ok { | ||
| logger(ctx).Debug(fmt.Sprintf("msg %s does not contain metadata. skipping ownership verification...", proto.MessageName(msg))) | ||
| continue | ||
| } | ||
|
|
||
| creator := m.GetMetadata().GetCreator() | ||
| signers := msg.GetSigners() | ||
|
|
||
| signedByCreator := func() bool { | ||
| for _, v := range signers { | ||
| if v.String() == creator { | ||
| return true | ||
| } | ||
| } | ||
| return false | ||
| }() | ||
| if signedByCreator { | ||
| logger(ctx).Debug(fmt.Sprintf("msg %s was signed by creator.", proto.MessageName(msg))) | ||
| continue | ||
| } | ||
|
|
||
| grants, err := d.fk.AllowancesByGranter(ctx, &feegrant.QueryAllowancesByGranterRequest{ | ||
| Granter: creator, | ||
| }) | ||
| if err != nil { | ||
| return ctx, fmt.Errorf("failed to verify message signature authorisation: %w", err) | ||
| } | ||
|
|
||
| logger(ctx).Debug(fmt.Sprintf("got %d allowances from granter %s", len(grants.GetAllowances()), creator)) | ||
| grantsLkUp := map[string]feegrant.Grant{} | ||
| for _, v := range grants.GetAllowances() { | ||
| if v == nil { | ||
| continue | ||
| } | ||
|
|
||
| grantsLkUp[v.GetGrantee()] = *v | ||
| } | ||
|
|
||
| logger(ctx).Debug("grant lookup built", "map", grantsLkUp) | ||
| grantees := make([]string, 0, len(signers)) | ||
| for _, signer := range signers { | ||
| if v, found := grantsLkUp[signer.String()]; found { | ||
| logger(ctx).Debug("found granted signature", "signature", v.Grantee) | ||
| grantees = append(grantees, v.Grantee) | ||
| } | ||
| } | ||
|
|
||
| if len(grantees) < 1 { | ||
| return ctx, fmt.Errorf("no signature from granted address found for message %s", proto.MessageName(msg)) | ||
| } | ||
|
|
||
| logger(ctx).Debug(fmt.Sprintf("found total of %d signatures from granted addresses for message %s", len(grantees), proto.MessageName(msg))) | ||
| } | ||
|
|
||
| return next(ctx, tx, simulate) | ||
| } |
Oops, something went wrong.