Add SHA256withRSA-PSS pair. Add SHA384withECDSA pair. Overhaul hashin…

.github/workflows/deploy-gh-pages.yaml

@@ -11,6 +11,7 @@ on:
     #  - v*
     branches:
       - main
+      - feature/*
 
 jobs:
   deploy_pages:

Dockerfile

@@ -3,15 +3,15 @@ FROM golang:1.21.6-alpine as buildbase
 RUN apk add git build-base
 
 WORKDIR /go/src/github.com/rarimo/passport-identity-provider
-COPY vendor .
 COPY . .
+RUN go mod tidy
 
-RUN GOOS=linux go build  -o /usr/local/bin/identity-provider-service /go/src/github.com/rarimo/passport-identity-provider
+RUN GOOS=linux go build  -o /usr/local/bin/incognito-light-registrator /go/src/github.com/rarimo/passport-identity-provider
 
 
 FROM alpine:3.9
 
-COPY --from=buildbase /usr/local/bin/identity-provider-service /usr/local/bin/identity-provider-service
+COPY --from=buildbase /usr/local/bin/incognito-light-registrator /usr/local/bin/incognito-light-registrator
 RUN apk add --no-cache ca-certificates
 
-ENTRYPOINT ["identity-provider-service"]
+ENTRYPOINT ["incognito-light-registrator"]

config.yaml

@@ -1,33 +1,20 @@
-vault:
-  address: "http://127.0.0.1:8200"
-  mount_path: "secret_data"
-
-network:
-  eth_rpc:
-  state_contract:
-
 verifier:
   verification_keys_paths:
-    sha1: "./sha1_verification_key.json"
-    sha256: "./sha256_verification_key.json"
+    sha1: "./verification_keys/registerIdentityLight160.json"
+    sha224: "./verification_keys/registerIdentityLight224.json"
+    sha256: "./verification_keys/registerIdentityLight256.json"
+    sha384: "./verification_keys/registerIdentityLight384.json"
+    sha512: "./verification_keys/registerIdentityLight512.json"
   master_certs_path: "./masterList.dev.pem"
-  allowed_age: 18
-  multi_acc_min_limit: 10
-  multi_acc_max_limit: 30
-  registration_timeout: 1h
-
-issuer:
-  base_url: "http://localhost:3002/v1"
-  did: ""
-  claim_type: "VotingCredential"
-  credential_schema: "https://bafybeibbniic63etdbcn5rs5ir5bhelym6ogv46afj35keatzhn2eqnioi.ipfs.w3s.link/VotingCredential.json"
+  disableTimeChecks: false
+  disableNameChecks: false
 
 log:
   level: debug
   disable_sentry: true
 
 db:
-  url: postgres://voting:voting@localhost:35432/voting?sslmode=disable
+  url: postgres://ilr:ilr@localhost:5432/ilr?sslmode=disable
 
 listener:
   addr: :8000

docs/spec/components/schemas/DocumentSod.yaml

@@ -0,0 +1,37 @@
+type: object
+required:
+  - hash_algorithm
+  - signature_algorithm
+  - signed_attributes
+  - signature
+  - encapsulated_content
+  - pem_file
+  - dg15
+properties:
+  hash_algorithm:
+    type: string
+    description: The hash algorithm used to hash the content
+  signature_algorithm:
+    type: string
+    description: The signature algorithm used to sign the content
+  signed_attributes:
+    type: string
+    description: The signed attributes, for e.g. 104 bytes-long hex string
+  signature:
+    type: string
+    description: Signature corresponding to the algorithm
+  aa_signature:
+    type: string
+    description: The active authentication signature
+  encapsulated_content:
+    type: string
+    description: The encapsulated content, for e.g. 186 bytes-long hex string
+  pem_file:
+    type: string
+    description: The PEM file containing the public key
+  dg15:
+    type: string
+    description: The Data Group 15, hex string
+
+
+

docs/spec/components/schemas/DocumentSodKey.yaml

@@ -0,0 +1,11 @@
+type: object
+required:
+  - id
+  - type
+properties:
+  id:
+    type: string
+  type:
+    type: string
+    enum:
+      - document-sod

docs/spec/components/schemas/Register.yaml

@@ -0,0 +1,18 @@
+allOf:
+  - $ref: '#/components/schemas/RegisterKey'
+  - type: object
+    required:
+      - attributes
+    properties:
+      attributes:
+        type: object
+        required:
+          - zk_proof
+          - document_sod
+        properties:
+          zk_proof:
+            type: object
+            format: types.ZKProof
+            description: Zero-knowledge proof with dg1 public input
+          document_sod:
+            $ref: '#/components/schemas/DocumentSod'

docs/spec/components/schemas/ClaimKey.yaml → docs/spec/components/schemas/RegisterKey.yaml

@@ -8,4 +8,4 @@ properties:
   type:
     type: string
     enum:
-      - claims
+      - register

docs/spec/components/schemas/Signature.yaml

@@ -0,0 +1,20 @@
+allOf:
+  - $ref: '#/components/schemas/SignatureKey'
+  - type: object
+    required:
+      - attributes
+    properties:
+      attributes:
+        type: object
+        required:
+          - signature
+          - document_hash
+        properties:
+          signature:
+            type: string
+            example: 7768792064696420796F75206576656E206465636F6465642069743F
+            description: ECDSA signature of the document hash
+          document_hash:
+            type: string
+            example: 7768792064696420796F75206576656E206465636F6465642069743F
+            description: Poseidon hash of the document

docs/spec/components/schemas/GistDataKey.yaml → docs/spec/components/schemas/SignatureKey.yaml

@@ -8,4 +8,4 @@ properties:
   type:
     type: string
     enum:
-      - gist_datas
+      - signature

docs/spec/paths/intergrations@identity-provider-service@v1@gist-data.yaml → docs/spec/paths/intergrations@incognito-light-registrator@v1@register.yaml

@@ -1,14 +1,19 @@
-get:
+post:
   tags:
-    - GIST
-  summary: The GIST data retrieving
-  operationId: gist-data
-  parameters:
-    - in: query
-      name: user_did
-      required: true
-      schema:
-        type: string
+    - Register
+  summary: Register
+  operationId: register
+  requestBody:
+    content:
+      application/json:
+        schema:
+          type: object
+          required:
+            - data
+          properties:
+            data:
+              type: object
+              $ref: '#/components/schemas/Register'
   responses:
     '200':
       description: Success
@@ -19,7 +24,7 @@ get:
             properties:
               data:
                 type: object
-                $ref: '#/components/schemas/GistData'
+                $ref: '#/components/schemas/Signature'
     '500':
       description: Internal Error
       content: