[dids] implement method that generates the necessary key pairs used f…

…or authz, attestation, and encryption when interfacing with DWNs
decentralized-identity · May 19, 2023 · ea33290 · ea33290
1 parent c0f5aab
commit ea33290
Show file tree

Hide file tree

Showing 3 changed files with 58 additions and 7 deletions.
diff --git a/packages/dids/src/did-ion.ts b/packages/dids/src/did-ion.ts
@@ -144,4 +144,50 @@ export class DidIonApi implements DidMethodResolver, DidMethodCreator {
     const didResolutionResult = await response.json();
     return didResolutionResult;
   }
+
+  /**
+   * generates three key pairs used for attestation, authorization and encryption purposes
+   * when interfacing with DWNs. the ids of these keys are referenced in the service object
+   *  that includes the dwnUrls provided.
+   */
+  async generateDwnConfiguration(dwnUrls: string[]): Promise<DidIonCreateOptions> {
+    return DidIonApi.generateDwnConfiguration(dwnUrls);
+  }
+
+  /**
+   * generates three key pairs used for attestation, authorization and encryption purposes
+   * when interfacing with DWNs. the ids of these keys are referenced in the service object
+   *  that includes the dwnUrls provided.
+   */
+  static async generateDwnConfiguration(dwnUrls: string[]): Promise<DidIonCreateOptions> {
+    const keys = [{
+      id       : 'attest',
+      type     : 'JsonWebKey2020',
+      keyPair  : await generateKeyPair('secp256k1'),
+      purposes : ['authentication'],
+    }, {
+      id       : 'authz',
+      type     : 'JsonWebKey2020',
+      keyPair  : await generateKeyPair('secp256k1'),
+      purposes : ['authentication'],
+    }, {
+      id       : 'encr',
+      type     : 'JsonWebKey2020',
+      keyPair  : await generateKeyPair('secp256k1'),
+      purposes : ['keyAgreement'],
+    }];
+
+    const services = [{
+      'id'              : 'dwn',
+      'type'            : 'DecentralizedWebNode',
+      'serviceEndpoint' : {
+        'nodes'                    : dwnUrls,
+        'messageAttestationKeys'   : ['#attest'],
+        'messageAuthorizationKeys' : ['#authz'],
+        'recordEncryptionKeys'     : ['#encr']
+      }
+    }];
+
+    return { keys, services };
+  }
 }
diff --git a/packages/dids/tests/did-ion.spec.ts b/packages/dids/tests/did-ion.spec.ts
@@ -20,4 +20,15 @@ describe('DidIonApi', () => {
       expect(key.type).to.exist;
     }
   });
+
+  it('works when using dwn configuration', async () => {
+    const ionCreateOptions = await DidIonApi.generateDwnConfiguration(['https://dwn.tbddev.org/dwn0']);
+
+    try {
+      // TODO: write specific assertions
+      const _didState = await DidIon.create(ionCreateOptions);
+    } catch(e) {
+      expect.fail(e.message);
+    }
+  });
 });
diff --git a/packages/web5/src/web5.ts b/packages/web5/src/web5.ts
@@ -72,13 +72,7 @@ export class Web5 {
       let ionCreateOptions;
 
       if (dwnUrls.length > 0) {
-        ionCreateOptions = {
-          services: [{
-            id              : 'dwn',
-            type            : 'DecentralizedWebNode',
-            serviceEndpoint : { nodes: dwnUrls }
-          }]
-        };
+        ionCreateOptions = await DidIonApi.generateDwnConfiguration(dwnUrls);
       }
 
       const defaultProfileDid = await this.did.create('ion', ionCreateOptions);