Wallet-session pairing и browser plugin wallet, оплаты пока не работают

2026-06-16 16:23:08 +04:00
parent 5c155ef503
commit 3efa8bb7ee
41 changed files with 3260 additions and 37 deletions
@@ -54,6 +54,7 @@ const CHANNEL_TYPE_PERSONAL = 100;
 const CHANNEL_TYPE_GROUP = 200;
 const CHANNEL_TYPE_VERSION_DEFAULT = 1;
 const SESSION_TYPE_CLIENT = 1;
+const SESSION_TYPE_WALLET = 50;

 const CONNECTION_SUBTYPES = Object.freeze({
  // Legacy alias: friend == close_friend. Оба ключа ведут на один и тот же код 10/11.
@@ -887,6 +888,67 @@ export class AuthService {
    return session;
  }

+  async createDelegatedSessionWithDeviceKey({
+    login,
+    devicePrivPkcs8,
+    sessionKey,
+    sessionType = SESSION_TYPE_WALLET,
+    clientPlatform = 'Delegated session',
+    clientInfo = 'Delegated session via pairing',
+  }) {
+    const cleanLogin = String(login || '').trim();
+    const cleanSessionKey = String(sessionKey || '').trim();
+    const cleanDevicePriv = String(devicePrivPkcs8 || '').trim();
+    if (!cleanLogin) throw new Error('createDelegatedSessionWithDeviceKey: пустой login');
+    if (!cleanSessionKey) throw new Error('createDelegatedSessionWithDeviceKey: пустой sessionKey');
+    if (!cleanDevicePriv) throw new Error('createDelegatedSessionWithDeviceKey: пустой device private key');
+
+    const devicePrivateKey = await importPkcs8Ed25519(cleanDevicePriv);
+    const devicePublicKeyB64 = await publicKeyB64FromPkcs8Ed25519(cleanDevicePriv);
+    const storagePwd = randomBase64(32);
+    const tempAuth = new AuthService(this.serverUrl);
+
+    try {
+      const challengeResp = await tempAuth.ws.request('AuthChallenge', { login: cleanLogin });
+      if (challengeResp.status !== 200) throw opError('AuthChallenge', challengeResp);
+
+      const authNonce = challengeResp?.payload?.authNonce;
+      if (!authNonce) throw new Error('AuthChallenge: сервер не вернул authNonce');
+
+      const timeMs = Date.now();
+      const preimage = `AUTH_CREATE_SESSION:${cleanLogin}:${cleanSessionKey}:${storagePwd}:${timeMs}:${authNonce}`;
+      const signatureB64 = await signBase64(devicePrivateKey, preimage);
+
+      const createResp = await tempAuth.ws.request('CreateAuthSession', {
+        login: cleanLogin,
+        storagePwd,
+        sessionKey: cleanSessionKey,
+        timeMs,
+        authNonce,
+        deviceKey: devicePublicKeyB64,
+        signatureB64,
+        sessionType: Number(sessionType) || SESSION_TYPE_WALLET,
+        clientPlatform: String(clientPlatform || '').trim() || 'Delegated session',
+        clientInfo: String(clientInfo || '').trim() || 'Delegated session via pairing',
+      });
+      if (createResp.status !== 200) throw opError('CreateAuthSession', createResp);
+
+      const sessionId = createResp?.payload?.sessionId;
+      if (!sessionId) throw new Error('CreateAuthSession: не вернулся sessionId');
+
+      return {
+        login: cleanLogin,
+        sessionId,
+        storagePwd,
+        sessionKey: cleanSessionKey,
+        sessionType: Number(sessionType) || SESSION_TYPE_WALLET,
+        clientPlatform: String(clientPlatform || '').trim() || 'Delegated session',
+      };
+    } finally {
+      tempAuth.ws.close();
+    }
+  }
+
  async persistSelectedKeys(login, storagePwd, keyBundle, saveOptions = { saveRoot: true, saveBlockchain: true }) {
    let currentSecrets = {};
    try {