1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54

use std::sync::Arc;

use gl_client::bitcoin::{
    hashes::{sha256, Hash, HashEngine, Hmac, HmacEngine},
    secp256k1::{Message, Secp256k1},
    util::bip32::{ChildNumber, ExtendedPubKey},
};
use sdk_common::prelude::{LnUrlError, LnUrlResult, LnurlAuthSigner};

use crate::node_api::NodeAPI;

pub(crate) struct SdkLnurlAuthSigner {
    node_api: Arc<dyn NodeAPI>,
}

impl SdkLnurlAuthSigner {
    pub fn new(node_api: Arc<dyn NodeAPI>) -> Self {
        Self { node_api }
    }
}

#[tonic::async_trait]
impl LnurlAuthSigner for SdkLnurlAuthSigner {
    async fn derive_bip32_pub_key(&self, derivation_path: &[ChildNumber]) -> LnUrlResult<Vec<u8>> {
        let xpriv = self.node_api.derive_bip32_key(derivation_path.to_vec()).await?;
        Ok(ExtendedPubKey::from_priv(&Secp256k1::new(), &xpriv)
            .encode()
            .to_vec())
    }

    async fn sign_ecdsa(&self, msg: &[u8], derivation_path: &[ChildNumber]) -> LnUrlResult<Vec<u8>> {
        let xpriv = self.node_api.derive_bip32_key(derivation_path.to_vec()).await?;
        let sig = Secp256k1::new().sign_ecdsa(
            &Message::from_slice(msg).map_err(|_| LnUrlError::generic("Failed to sign"))?,
            &xpriv.private_key,
        );
        Ok(sig.serialize_der().to_vec())
    }

    async fn hmac_sha256(
        &self,
        key_derivation_path: &[ChildNumber],
        input: &[u8],
    ) -> LnUrlResult<Vec<u8>> {
        let priv_key = self
            .node_api
            .derive_bip32_key(key_derivation_path.to_vec()).await?;
        let mut engine = HmacEngine::<sha256::Hash>::new(priv_key.encode().as_slice());
        engine.input(input);
        Ok(Hmac::<sha256::Hash>::from_engine(engine)
            .as_inner()
            .to_vec())
    }
}