Direct invocation demo code #1676
Conversation
| const keyring = new Keyring({ type: 'sr25519' }); | ||
|
|
||
| const PARACHAIN_WS_ENDPINT = 'ws://localhost:9944'; | ||
| const WORKER_TRUSTED_WS_ENDPOINT = 'wss://localhost:2000'; |
There was a problem hiding this comment.
If I understood correctly from Nitesh some time ago, this endpoint is not publicly available for security reasons. Is it still the case?
There was a problem hiding this comment.
See #1010
We don't see security issues - only server load (similar to any other rpc service provider)
| ...call.toU8a(), | ||
| ...nonce.toU8a(), | ||
| ...hexToU8a(mrenclave), | ||
| ...hexToU8a(mrenclave), // should be shard, but it's the same as MRENCLAVE in our case |
There was a problem hiding this comment.
"in our case" here means our Parachain regardless of the network, right? How likely it is to change in the future?
There was a problem hiding this comment.
Yes it's network unrelated.
How likely it is to change in the future?
Highly improbable, even if it's going to change, that's not in near future
| top: Uint8Array | ||
| ) => { | ||
| let cyphertext = compactAddLength(bufferToU8a(encryptWithTeeShieldingKey(teeShieldingKey, top))); | ||
| return parachain_api.createType('Request', { shard: hexToU8a(mrenclave), cyphertext }).toU8a(); |
There was a problem hiding this comment.
@Kailai-Wang, cyphertext -> ciphertext – Is it a typo?
There was a problem hiding this comment.
No - In rust the struct field is cyphertext and it's from upstream - so we didn't change it.
And according to Bing, cipher and cypher should be alternative forms:
There was a problem hiding this comment.
IDHub uses ciphertext 😭😭😭
This PR has addressed most of #1658
It shows how to construct a direct trusted call and send it, currently supported trusted call:
set_user_shielding_key_directcreate_identity_directIt also demonstrates the public query to e.g. retrieve TEE's shielding key.
It includes a basic RPC response handling as well.
The subscription to parachain header and the subsequent handling are not written as we have the code already I believe.
Please bear with my crude ts code.
See
ts-tests/examples/direct-invocation/README.mdfor more information.cc @jonalvarezz