feat: sdk

packages/access-api/package.json

@@ -4,18 +4,7 @@
   "description": "Auth API",
   "type": "module",
   "main": "dist/worker.js",
-  "types": "dist/src/index.d.ts",
-  "files": [
-    "dist/src/*.d.ts",
-    "dist/src/*.d.ts.map"
-  ],
-  "typesVersions": {
-    "*": {
-      "*": [
-        "dist/src/*"
-      ]
-    }
-  },
+  "private": "true",
   "scripts": {
     "lint": "tsc && eslint '**/*.{js,ts}' && prettier --check '**/*.{js,ts,md,yml,json}' --ignore-path ../../.gitignore",
     "deploy": "wrangler publish",
@@ -37,6 +26,7 @@
     "@web3-storage/w3access": "workspace:^",
     "@web3-storage/worker-utils": "0.2.0-dev",
     "multiformats": "^9.6.5",
+    "nanoid": "^4.0.0",
     "toucan-js": "^2.6.0"
   },
   "devDependencies": {
@@ -74,7 +64,8 @@
       "COMMITHASH": "readonly",
       "BRANCH": "readonly",
       "DEBUG": "readonly",
-      "ACCOUNTS": "writable"
+      "ACCOUNTS": "writable",
+      "VALIDATIONS": "writable"
     }
   },
   "eslintIgnore": [
@@ -84,6 +75,9 @@
     "docs"
   ],
   "ava": {
+    "files": [
+      "test/**/*.test.js"
+    ],
     "ignoredByWatcher": [
       "./dist/*"
     ]

packages/access-api/src/bindings.d.ts

@@ -6,13 +6,15 @@ export {}
 
 declare global {
   const ACCOUNTS: KVNamespace
+  const VALIDATIONS: KVNamespace
 }
 
 export interface RouteContext {
   params: Record<string, string>
   log: Logging
   keypair: SigningAuthority
   config: typeof config
+  url: URL
 }
 
 export type Handler = (

packages/access-api/src/index.js

@@ -10,11 +10,14 @@ import { corsHeaders, preflight } from '@web3-storage/worker-utils/cors'
 import { errorHandler } from '@web3-storage/worker-utils/error'
 import { notFound } from '@web3-storage/worker-utils/response'
 import { Router } from '@web3-storage/worker-utils/router'
+import { validate } from './routes/validate.js'
 
 /** @type Router<import('./bindings.js').RouteContext> */
 const r = new Router({ onNotFound: notFound })
 r.add('options', '*', preflight)
 r.add('get', '/version', version)
+
+r.add('get', '/validate', validate)
 r.add('post', '/', async (request, env) => {
   const server = Server.create({
     id: env.keypair,

packages/access-api/src/kvs/accounts.js

@@ -21,6 +21,10 @@ export class Accounts {
    * @param {import('@ucanto/interface').LinkedProof} proof
    */
   async register(issuerDID, resourceDID, proof) {
+    const did = await this.get(issuerDID)
+    if (did) {
+      throw new Error(`did: ${issuerDID} already registered.`)
+    }
     const account = `did:ipld:${proof}`
     await this.kv.put(
       issuerDID,

packages/access-api/src/kvs/validations.js

@@ -0,0 +1,47 @@
+import * as UCAN from '@ipld/dag-ucan'
+
+/**
+ * Validations
+ */
+export class Validations {
+  /**
+   *
+   * @param {KVNamespace} kv
+   */
+  constructor(kv = VALIDATIONS) {
+    this.kv = kv
+  }
+
+  /**
+   *
+   * @param {string} delegation
+   */
+  async create(delegation) {
+    // @ts-ignore
+    const ucan = UCAN.parse(delegation)
+    await this.kv.put(ucan.audience.did(), delegation, {
+      expirationTtl: 2 * 60,
+    })
+
+    return ucan
+  }
+
+  /**
+   * @param {string} did
+   */
+  async get(did) {
+    const val = await this.kv.get(did)
+    if (!val) {
+      throw new Error('Validation not found')
+    }
+
+    return val
+  }
+
+  /**
+   * @param {string} did
+   */
+  async delete(did) {
+    await this.kv.delete(did)
+  }
+}

packages/access-api/src/routes/validate.js

@@ -0,0 +1,22 @@
+import { Validations } from '../kvs/validations.js'
+
+/**
+ * @param {import('@web3-storage/worker-utils/router').ParsedRequest} req
+ * @param {import('../bindings.js').RouteContext} env
+ */
+export async function validate(req, env) {
+  const validations = new Validations()
+  if (req.query && req.query.ucan) {
+    await validations.create(req.query.ucan)
+
+    return new Response('Done')
+  }
+
+  if (req.query && req.query.did) {
+    const ucan = await validations.get(req.query.did)
+    await validations.delete(req.query.did)
+    return new Response(ucan)
+  }
+
+  throw new Error('needs ucan or did query')
+}

packages/access-api/src/ucanto/service.js

@@ -6,7 +6,7 @@ import {
   identityIdentify,
   identityRegister,
   identityValidate,
-} from './capabilities.js'
+} from '@web3-storage/w3access/capabilities'
 
 /**
  * @param {import('../bindings').RouteContext} ctx
@@ -29,21 +29,20 @@ export function service(ctx) {
             })
             .delegate()
 
-          // For testing
-          if (process.env.NODE_ENV === 'development') {
-            // console.log(
-            //   '🚀 ~ file: service.js ~ line 34 ~ Server.UCAN.format(delegation.data)',
-            //   Server.UCAN.format(delegation.data)
-            // )
+          const url = `${ctx.url.protocol}//${
+            ctx.url.host
+          }/validate?ucan=${UCAN.format(delegation.data)}`
 
+          // For testing
+          if (ctx.config.ENV === 'test') {
             return {
-              delegation: UCAN.format(delegation.data),
+              delegation: url,
             }
           }
 
           await sendEmail({
             to: capability.caveats.as.replace('mailto:', ''),
-            ucan: UCAN.format(delegation.data),
+            url,
             token: ctx.config.POSTMARK_TOKEN,
           })
         }
@@ -66,7 +65,7 @@ export function service(ctx) {
         return result?.account
       }),
     },
-    // @ts-expect-error just for tests
+    // @ts-ignore
     testing: {
       pass() {
         return 'test pass'

packages/access-api/src/utils/context.js

@@ -45,5 +45,6 @@ export function getContext(event, params) {
   )
 
   const keypair = SigningAuthority.parse(config.PRIVATE_KEY)
-  return { params, log, keypair, config }
+  const url = new URL(event.request.url)
+  return { params, log, keypair, config, url }
 }

packages/access-api/src/utils/email.js

@@ -1,5 +1,5 @@
 /**
- * @param {{ to: string; ucan: string; token: string }} opts
+ * @param {{ to: string; url: string; token: string }} opts
  */
 export async function sendEmail(opts) {
   const rsp = await fetch('https://api.postmarkapp.com/email', {
@@ -13,7 +13,7 @@ export async function sendEmail(opts) {
       From: 'noreply@dag.house',
       To: opts.to,
       Subject: 'Hello',
-      HtmlBody: `<strong>Hello</strong> <br/><hr/> <code> ${opts.ucan}</code><hr/>`,
+      HtmlBody: `<strong>Hello</strong><br/>Click <a href="${opts.url}"> here </a><hr/>`,
       MessageStream: 'outbound',
     }),
   })

packages/access-api/test/helpers/setup.js

@@ -47,9 +47,13 @@ export async function send(ucan) {
   })
 }
 
-export function connection() {
+/**
+ * @param {import("@ucanto/interface").SigningAuthority<237> } id
+ */
+export function connection(id) {
   return w3connection({
-    id: serviceAuthority,
+    id,
     url: new URL('http://localhost:8787'),
+    fetch: mf.dispatchFetch.bind(mf),
   })
 }