Mwa 2.0 spec

spec/_diagrams/1.0/authorize_and_sign.plantuml

@@ -0,0 +1,53 @@
+@startuml
+
+!theme cerulean
+skinparam backgroundColor #FFFFFF
+
+hide footbox
+
+participant Solana as "Solana\nnetwork"
+participant Dapp
+participant Wallet
+
+note across : Dapp has established a session with Wallet for the first time
+
+activate Dapp
+
+== Authorize for transaction signing ==
+
+Dapp -> Dapp : <i>i</i> = DappIdentity()
+Dapp -> Wallet ++-- : authorize {<i>i</i>, ["sign_transactions"]}
+Wallet -> Wallet : validate Dapp identity <i>i</i>
+Wallet -> Wallet : Generate new auth token\n<i>at</i> = GenerateAuthToken(<i>i</i>, ["sign_transactions"])
+Wallet -> Wallet : <i>pub</i> = base58encode(GetPublicKey())
+alt if wallet endpoint has an endpoint-specific URI
+    Wallet -> Wallet : <i>uri</i> = EndpointBaseURI() 
+end
+Wallet --> Dapp ++-- : response {<i>at</i>, <i>pub</i>, <i>uri</i>}
+Dapp -> Dapp : Store(<i>at</i>, <i>pub</i>, <i>uri</i>)
+
+== Submit transaction for signing ==
+
+Dapp -> Dapp : <i>t</i> = CreateTransaction(<i>pub</i>, ...)
+Dapp -> Wallet ++-- : sign_transactions {<i>at</i>, <i>t</i>}
+Wallet -> Wallet : validate auth token <i>at</i>
+Wallet -> Wallet : validate transaction <i>t</i>
+Wallet -> Wallet : sign transaction\n<i>st</i> = SignSolanaTransactions(<i>t</i>)
+Wallet --> Dapp ++-- : response {<i>st</i>}
+
+== Submit signed transaction to network ==
+
+create Solana
+Dapp --> Solana -- : {<i>st</i>}
+
+== Complete ==
+
+legend
+| <i>i</i>   | the dapp identity (name, icon, website URI)                                                           |
+| <i>at</i>  | a persistent authentication token issued by the wallet to this dapp                                   |
+| <i>pub</i> | the wallet account public key for which this dapp is authorized                                       |
+| <i>t</i>   | the transaction that the dapp wishes to have signed\nwith the private key corresponding to <i>pub</i> |
+| <i>st</i>  | <i>t</i>, signed with the private key corresponding to <i>pub</i>                                     |
+end legend
+
+@enduml

spec/_diagrams/1.0/reauthorize_and_sign.plantuml

@@ -0,0 +1,62 @@
+@startuml
+
+!theme cerulean
+skinparam backgroundColor #FFFFFF
+
+hide footbox
+
+participant Solana as "Solana\nnetwork"
+participant Dapp
+participant Wallet
+
+note across : Dapp has established a session with Wallet for transaction signing using a previously obtained auth token
+
+activate Dapp
+
+Dapp -> Dapp : <i>at</i>, <i>pub</i> = Load()
+Dapp -> Dapp : <i>t</i> = CreateTransaction(<i>pub</i>, ...)
+
+== Submit for signing with cached auth token ==
+
+Dapp -> Wallet ++-- : sign_transactions {<i>at</i>, <i>t</i>}
+Wallet -X Wallet : validate auth token <i>at</i>
+Wallet --> Dapp ++-- : error {ERROR_REAUTHORIZE}
+
+== Reauthorize ==
+
+Dapp -> Dapp : <i>i</i> = DappIdentity()
+Dapp -> Wallet ++-- : reauthorize {<i>i</i>, <i>at</i>}
+Wallet -> Wallet : validate Dapp identity <i>i</i> matches <i>at</i>
+Wallet -> Wallet : Generate new auth token\n<i>at2</i> = RegenerateAuthToken(<i>i</i>, <i>at</i>)
+Wallet -> Wallet : <i>pub</i> = base58encode(GetPublicKey())
+alt if wallet endpoint has an endpoint-specific URI
+    Wallet -> Wallet : <i>uri</i> = EndpointBaseURI() 
+end
+Wallet --> Dapp ++-- : response(<i>at2</i>, <i>pub</i>, <i>uri</i>)
+Dapp -> Dapp : Store(<i>at2</i>, <i>pub</i>, <i>uri</i>)
+
+== Resubmit for signing with new auth token ==
+
+Dapp -> Wallet ++-- : sign_transactions(<i>at2</i>, <i>t</i>)
+Wallet -> Wallet : validate auth token <i>at2</i>
+Wallet -> Wallet : validate transaction <i>t</i>
+Wallet -> Wallet : sign transaction\n<i>st</i> = SignSolanaTransactions(<i>t</i>)
+Wallet --> Dapp ++-- : response(<i>st</i>)
+
+== Submit signed transaction to network ==
+
+create Solana
+Dapp --> Solana -- : {<i>st</i>}
+
+== Complete ==
+
+legend
+| <i>i</i>   | the dapp identity (name, icon, website URI)                                                           |
+| <i>at</i>  | a persistent authentication token issued by the wallet to this dapp which is no longer valid          |
+| <i>at2</i> | a persistent authentication token with the same privileges as <i>at</i> which is valid                |
+| <i>pub</i> | the wallet account public key for which this dapp is authorized                                       |
+| <i>t</i>   | the transaction that the dapp wishes to have signed\nwith the private key corresponding to <i>pub</i> |
+| <i>st</i>  | <i>t</i>, signed with the private key corresponding to <i>pub</i>                                     |
+end legend
+
+@enduml

spec/_diagrams/authorize_and_sign.plantuml

@@ -16,7 +16,8 @@ activate Dapp
 == Authorize for transaction signing ==
 
 Dapp -> Dapp : <i>i</i> = DappIdentity()
-Dapp -> Wallet ++-- : authorize {<i>i</i>, ["sign_transactions"]}
+Dapp -> Dapp : <i>c</i> = "{namespace}:{chain_reference}"
+Dapp -> Wallet ++-- : authorize {<i>i</i>, <i>c</i>}
 Wallet -> Wallet : validate Dapp identity <i>i</i>
 Wallet -> Wallet : Generate new auth token\n<i>at</i> = GenerateAuthToken(<i>i</i>, ["sign_transactions"])
 Wallet -> Wallet : <i>pub</i> = base58encode(GetPublicKey())
@@ -29,8 +30,8 @@ Dapp -> Dapp : Store(<i>at</i>, <i>pub</i>, <i>uri</i>)
 == Submit transaction for signing ==
 
 Dapp -> Dapp : <i>t</i> = CreateTransaction(<i>pub</i>, ...)
-Dapp -> Wallet ++-- : sign_transactions {<i>at</i>, <i>t</i>}
-Wallet -> Wallet : validate auth token <i>at</i>
+Dapp -> Wallet ++-- : sign_transactions {<i>t</i>}
+Wallet -> Wallet : verify session is in authorized state
 Wallet -> Wallet : validate transaction <i>t</i>
 Wallet -> Wallet : sign transaction\n<i>st</i> = SignSolanaTransactions(<i>t</i>)
 Wallet --> Dapp ++-- : response {<i>st</i>}

spec/_diagrams/reauthorize_and_sign.plantuml

@@ -18,14 +18,15 @@ Dapp -> Dapp : <i>t</i> = CreateTransaction(<i>pub</i>, ...)
 
 == Submit for signing with cached auth token ==
 
-Dapp -> Wallet ++-- : sign_transactions {<i>at</i>, <i>t</i>}
-Wallet -X Wallet : validate auth token <i>at</i>
-Wallet --> Dapp ++-- : error {ERROR_REAUTHORIZE}
+Dapp -> Wallet ++-- : sign_transactions {<i>t</i>}
+Wallet -X Wallet : verify session is in authorized state
+Wallet --> Dapp ++-- : error {ERROR_AUTHORIZATION_FAILED}
 
 == Reauthorize ==
 
 Dapp -> Dapp : <i>i</i> = DappIdentity()
-Dapp -> Wallet ++-- : reauthorize {<i>i</i>, <i>at</i>}
+Dapp -> Dapp : <i>c</i> = "{namespace}:{chain_reference}"
+Dapp -> Wallet ++-- : authorize {<i>i</i>, <i>c</i>, <i>at</i>}
 Wallet -> Wallet : validate Dapp identity <i>i</i> matches <i>at</i>
 Wallet -> Wallet : Generate new auth token\n<i>at2</i> = RegenerateAuthToken(<i>i</i>, <i>at</i>)
 Wallet -> Wallet : <i>pub</i> = base58encode(GetPublicKey())
@@ -37,8 +38,8 @@ Dapp -> Dapp : Store(<i>at2</i>, <i>pub</i>, <i>uri</i>)
 
 == Resubmit for signing with new auth token ==
 
-Dapp -> Wallet ++-- : sign_transactions(<i>at2</i>, <i>t</i>)
-Wallet -> Wallet : validate auth token <i>at2</i>
+Dapp -> Wallet ++-- : sign_transactions(<i>t</i>)
+Wallet -> Wallet : verify session is in authorized state
 Wallet -> Wallet : validate transaction <i>t</i>
 Wallet -> Wallet : sign transaction\n<i>st</i> = SignSolanaTransactions(<i>t</i>)
 Wallet --> Dapp ++-- : response(<i>st</i>)