mte/src/management.ml

open Api
open Devices

let mk_future_denom denom_key_signf
    ({
       pub;
       section_name;
       value;
       stamp_start;
       stamp_expire_withdraw;
       stamp_expire_deposit;
       stamp_expire_legal;
       fee_withdraw;
       fee_deposit;
       fee_refresh;
       fee_refund;
       age_mask;
       h_pub;
       sign= _;
       master_sig= _;
     } :
      Denomination.t) =
  let denom_pub =
    DenominationKey.Rsa RsaDenominationKey.{ age_mask; rsa_pub= pub }
  in
  let denom_secmod_sig =
    let open Bin_type in
    let open Bin_signature.DenominationKeyAnnouncementPS in
    let h_denom_pub = h_pub in
    let h_section_name = Hash_64_cstr.hash section_name in
    let anchor_time = TimeAbsoluteNBO.of_ptime stamp_start in
    let duration_withdraw =
      Ptime.diff stamp_start stamp_expire_withdraw
      |> Util.ptime_of_span_exn
      |> TimeRelativeNBO.of_ptime
    in
    let ps = { h_denom_pub; h_section_name; anchor_time; duration_withdraw } in
    ps |> Bin.to_string bin |> denom_key_signf
  in
  FutureDenom.
    {
      section_name;
      value;
      stamp_start= Timestamp.of_ptime stamp_start;
      stamp_expire_withdraw= Timestamp.of_ptime stamp_expire_withdraw;
      stamp_expire_deposit= Timestamp.of_ptime stamp_expire_deposit;
      stamp_expire_legal= Timestamp.of_ptime stamp_expire_legal;
      denom_pub;
      fee_withdraw;
      fee_deposit;
      fee_refresh;
      fee_refund;
      denom_secmod_sig;
    }

let mk_future_signkey signkey_signf
    ({ pub; stamp_start; stamp_expire; stamp_end; sign= _; master_sig= _ } :
      Signkey.t) =
  let signkey_secmod_sig =
    let open Bin_type in
    let open Bin_signature.SigningKeyAnnouncementPS in
    let exchange_pub = pub in
    let anchor_time = TimeAbsoluteNBO.of_ptime stamp_start in
    let duration =
      Ptime.diff stamp_start stamp_expire
      |> Util.ptime_of_span_exn
      |> TimeRelativeNBO.of_ptime
    in
    let ps = { exchange_pub; anchor_time; duration } in
    ps |> Bin.to_string bin |> signkey_signf
  in
  FutureSignKey.
    {
      key= pub;
      stamp_start= Timestamp.of_ptime stamp_start;
      stamp_expire= Timestamp.of_ptime stamp_expire;
      stamp_end= Timestamp.of_ptime stamp_end;
      signkey_secmod_sig;
    }

let mk_future_keys_response (secmod_signkey : Secmod_signkey.t)
    (secmod_denom : Secmod_denom.t) =
  let future_denoms =
    secmod_denom.keys
    |> List.filter (fun k -> Option.is_none k.Denomination.master_sig)
    |> List.map (mk_future_denom secmod_denom.sm_key.Signkey.sign)
  in
  let future_signkeys =
    secmod_signkey.keys
    |> List.filter (fun k -> Option.is_none k.Signkey.master_sig)
    |> List.map (mk_future_signkey secmod_signkey.sm_key.sign)
  in
  let master_pub = Config.Exchange.master_public_key in
  let denom_secmod_public_key = secmod_denom.sm_key.pub in
  let signkey_secmod_public_key = secmod_signkey.sm_key.pub in
  FutureKeysResponse.
    {
      future_denoms;
      future_signkeys;
      master_pub;
      denom_secmod_public_key;
      signkey_secmod_public_key;
    }

let keys req server _env =
  let open Vif.Response in
  let open Syntax in
  let secmod_signkey = Vif.Server.device Devices.secmod_signkey server in
  let secmod_denom = Vif.Server.device Devices.secmod_denom server in
  let v = mk_future_keys_response secmod_signkey secmod_denom in
  let s = Api.encode_exn Api.FutureKeysResponse.jsont v in
  let* () = with_string req s in
  let* () = add ~field:"content-type" "application/json" in
  respond `OK