forked from mosip/digital-credential-plugins
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[INJIMOB-1588] add mso_mdoc vc format support for mock plugin (mosip#60)
* [INJIMOB-1588] add mock mdoc Signed-off-by: KiruthikaJeyashankar <[email protected]> * [INJIMOB-1588] Get issuer certificate + keypair from local p12 file Signed-off-by: KiruthikaJeyashankar <[email protected]> * [INJIMOB-1588] Populate mock mDoc from DB Build mdoc from mock DB using the cached transaction and in case of any issue give hardcoded set of data Signed-off-by: KiruthikaJeyashankar <[email protected]> * [INJIMOB-1788] generate mdoc Library used - open-wallet-foundation-labs/identity-credetial Signed-off-by: KiruthikaJeyashankar <[email protected]> * [INJIMOB-1588] produce mso_mdoc VC from individualId provided Signed-off-by: KiruthikaJeyashankar <[email protected]> * [INJIMOB-1588] read crypto details for signing mso_mdoc vc Other changes: removing unused classes/ debug logs Signed-off-by: KiruthikaJeyashankar <[email protected]> * [INJIMOB-1588] remove debug logs , optimize imports Signed-off-by: KiruthikaJeyashankar <[email protected]> * [INJIMOB-1588] remove unused declared dependencies Signed-off-by: KiruthikaJeyashankar <[email protected]> * [INJIMOB-1588] add respository for identity-credential dependency Signed-off-by: KiruthikaJeyashankar <[email protected]> * [INJIMOB-1588] remove debug logs Signed-off-by: KiruthikaJeyashankar <[email protected]> * [INJIMOB-1588] refactor unused fields, renaming Signed-off-by: KiruthikaJeyashankar <[email protected]> * [INJIMOB-1588] git ignore .DS_Store Signed-off-by: KiruthikaJeyashankar <[email protected]> * [INJIMOB-1588] perform base64 url safe encoding Signed-off-by: KiruthikaJeyashankar <[email protected]> * [INJIMOB-1588] refactor variable name Signed-off-by: KiruthikaJeyashankar <[email protected]> * [INJIMOB-1588] Get issuer and ca cryto details from config property Signed-off-by: KiruthikaJeyashankar <[email protected]> * [INJIMOB-1588] revert IDE format changes Signed-off-by: KiruthikaJeyashankar <[email protected]> * [INJIMOB-1588] fix merge conflict issue Signed-off-by: KiruthikaJeyashankar <[email protected]> * [INJIMOB-1588] remove unused repo declaration Signed-off-by: KiruthikaJeyashankar <[email protected]> * [INJIMOB-1588] revert remove unused plugin Signed-off-by: KiruthikaJeyashankar <[email protected]> * [INJIMOB-1588] extract data generation for mdoc to a separate function Signed-off-by: KiruthikaJeyashankar <[email protected]> --------- Signed-off-by: KiruthikaJeyashankar <[email protected]> Signed-off-by: KiruthikaJeyashankar <[email protected]>
- Loading branch information
1 parent
563a383
commit 2680e45
Showing
10 changed files
with
425 additions
and
8 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -32,3 +32,4 @@ target/ | |
| .setting/ | ||
| .mvn/ | ||
| .project/ | ||
| *.DS_Store | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
119 changes: 119 additions & 0 deletions
119
mock-certify-plugin/src/main/java/io/mosip/certify/mock/integration/mocks/MdocGenerator.kt
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,119 @@ | ||
| package io.mosip.certify.mock.integration.mocks | ||
|
|
||
| import co.nstant.`in`.cbor.CborBuilder | ||
| import co.nstant.`in`.cbor.CborEncoder | ||
| import co.nstant.`in`.cbor.model.DataItem | ||
| import com.android.identity.credential.NameSpacedData | ||
| import com.android.identity.internal.Util | ||
| import com.android.identity.mdoc.mso.MobileSecurityObjectGenerator | ||
| import com.android.identity.mdoc.util.MdocUtil | ||
| import com.android.identity.util.Timestamp | ||
| import io.mosip.certify.util.* | ||
| import java.io.ByteArrayOutputStream | ||
| import io.mosip.certify.util.IssuerKeyPairAndCertificate | ||
| import java.util.* | ||
|
|
||
|
|
||
| class MdocGenerator { | ||
| companion object { | ||
| const val NAMESPACE: String = "org.iso.18013.5.1" | ||
| const val DOCTYPE: String = "$NAMESPACE.mDL" | ||
| const val DIGEST_ALGORITHM = "SHA-256" | ||
| const val ECDSA_ALGORITHM = "SHA256withECDSA" | ||
| const val SEED = 42L | ||
| } | ||
|
|
||
| fun generate( | ||
| data: MutableMap<String, out Any>, | ||
| holderId: String, | ||
| caKeyAndCertificate: String, | ||
| issuerKeyAndCertificate: String | ||
| ): String? { | ||
| val issuerKeyPairAndCertificate: IssuerKeyPairAndCertificate? = readKeypairAndCertificates( | ||
| caKeyAndCertificate,issuerKeyAndCertificate | ||
| ) | ||
| if(issuerKeyPairAndCertificate == null) { | ||
| throw RuntimeException("Unable to load Crypto details") | ||
| } | ||
| val devicePublicKey = JwkToKeyConverter().convertToPublicKey(holderId.replace("did:jwk:", "")) | ||
| val issuerKeypair = issuerKeyPairAndCertificate.issuerKeypair() | ||
|
|
||
| val nameSpacedDataBuilder: NameSpacedData.Builder = NameSpacedData.Builder() | ||
| data.keys.forEach { key -> | ||
| nameSpacedDataBuilder.putEntryString(NAMESPACE, key, data[key].toString()) | ||
| } | ||
| val nameSpacedData: NameSpacedData = | ||
| nameSpacedDataBuilder | ||
| .build() | ||
| val generatedIssuerNameSpaces: MutableMap<String, MutableList<ByteArray>> = | ||
| MdocUtil.generateIssuerNameSpaces(nameSpacedData, Random(SEED), 16) | ||
| val calculateDigestsForNameSpace = | ||
| MdocUtil.calculateDigestsForNameSpace(NAMESPACE, generatedIssuerNameSpaces, DIGEST_ALGORITHM) | ||
|
|
||
| val mobileSecurityObjectGenerator = MobileSecurityObjectGenerator(DIGEST_ALGORITHM, NAMESPACE, devicePublicKey) | ||
| mobileSecurityObjectGenerator.addDigestIdsForNamespace(NAMESPACE, calculateDigestsForNameSpace) | ||
| val expirationTime: Long = kotlinx.datetime.Instant.Companion.DISTANT_FUTURE.toEpochMilliseconds() | ||
| mobileSecurityObjectGenerator.setValidityInfo( | ||
| Timestamp.now(), | ||
| Timestamp.now(), | ||
| Timestamp.ofEpochMilli(expirationTime), | ||
| null | ||
| ) | ||
| val mso: ByteArray = mobileSecurityObjectGenerator.generate() | ||
|
|
||
| val coseSign1Sign: DataItem = Util.coseSign1Sign( | ||
| issuerKeypair.private, | ||
| ECDSA_ALGORITHM, | ||
| mso.copyOf(), | ||
| null, | ||
| listOf(issuerKeyPairAndCertificate.caCertificate(), issuerKeyPairAndCertificate.issuerCertificate()) | ||
| ) | ||
|
|
||
| return construct(generatedIssuerNameSpaces, coseSign1Sign) | ||
| } | ||
|
|
||
| @Throws(Exception::class) | ||
| private fun readKeypairAndCertificates(caKeyAndCertificate: String,issuerKeyAndCertificate: String): IssuerKeyPairAndCertificate? { | ||
| val pkcS12Reader = PKCS12Reader() | ||
| val caDetails: KeyPairAndCertificate = pkcS12Reader.extract(caKeyAndCertificate) | ||
| val issuerDetails: KeyPairAndCertificate = pkcS12Reader.extract(issuerKeyAndCertificate) | ||
| if (issuerDetails != null && caDetails != null) { | ||
| return IssuerKeyPairAndCertificate( | ||
| issuerDetails.keyPair, | ||
| issuerDetails.certificate, | ||
| caDetails.certificate | ||
| ) | ||
| } | ||
| return null | ||
| } | ||
|
|
||
| private fun construct(nameSpaces: MutableMap<String, MutableList<ByteArray>>, issuerAuth: DataItem): String? { | ||
| val mDoc = MDoc(DOCTYPE, IssuerSigned(nameSpaces, issuerAuth)) | ||
| val cbor = mDoc.toCBOR() | ||
| return Base64.getUrlEncoder().encodeToString(cbor) | ||
| } | ||
| } | ||
|
|
||
| data class MDoc(val docType: String, val issuerSigned: IssuerSigned) { | ||
| fun toCBOR(): ByteArray { | ||
| val byteArrayOutputStream = ByteArrayOutputStream() | ||
| CborEncoder(byteArrayOutputStream).encode( | ||
| CborBuilder().addMap() | ||
| .put("docType", docType) | ||
| .put(CBORConverter.toDataItem("issuerSigned"), CBORConverter.toDataItem(issuerSigned.toMap())) | ||
| .end() | ||
| .build() | ||
| ) | ||
| return byteArrayOutputStream.toByteArray() | ||
|
|
||
| } | ||
| } | ||
|
|
||
| data class IssuerSigned(val nameSpaces: MutableMap<String, MutableList<ByteArray>>, val issuerAuth: DataItem) { | ||
| fun toMap(): Map<String, Any> { | ||
| return buildMap { | ||
| put("nameSpaces", CBORConverter.toDataItem(nameSpaces)) | ||
| put("issuerAuth", issuerAuth) | ||
| } | ||
| } | ||
| } |
Oops, something went wrong.