feat(token-sale): locales and begining of unsubscribe

Author: satello

kms-secrets.us-east-2.yml

@@ -1,10 +1,13 @@
 secrets:
   STAGING_INFURA_URL: AQICAHhGgAvqeSMcTOp7YDYdu8nxhCZ9sP3Pe3A4o55JsQLjZQH9ef886xSGwCkOVOqZXEflAAAAizCBiAYJKoZIhvcNAQcGoHsweQIBADB0BgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDLmDi148/wofuMLZfgIBEIBH/avGPWRsCg8+SOHctvUs1oG/vDRbtqg0eXOO4JSfQpIL17MGm2TvA3A916WGI1jZLyumxLxAZSAqRpcm5MHYhZkYZbRH9HI=
   PRODUCTION_INFURA_URL: AQICAHhGgAvqeSMcTOp7YDYdu8nxhCZ9sP3Pe3A4o55JsQLjZQGtRxJO1I4ll5do7xSgQRlXAAAAjTCBigYJKoZIhvcNAQcGoH0wewIBADB2BgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDGEx9BRbqOVUdlAHJAIBEIBJXSXRCLwOTP86qdELUyZy2j+B8njcZV+IdBUjZxuduULh2dLzXSyL1fsQmtzxjpjRgwOZ28wI4Z0asmFLAttbBu5XRcJc4lDRGA==
+  ENTROPY: AQICAHhGgAvqeSMcTOp7YDYdu8nxhCZ9sP3Pe3A4o55JsQLjZQGQSkjVNLZC528fa4nZnED+AAAAdjB0BgkqhkiG9w0BBwagZzBlAgEAMGAGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQMJxF+4vAVYDOoNKc8AgEQgDPnGbrenflh1UUs/SwyQPD7Jxbf+MEQjEdppwY0nt8ROUazArparZ+p5Re9kgxrXZVNSOY=
   STAGING_ARBITRABLE_PERMISSION_LIST_ADDRESS: '0xbefd40cd43072694555b5ec77120ce4a3a65a5d6'
   PRODUCTION_ARBITRABLE_PERMISSION_LIST_ADDRESS: '0xb7faddf3ecd2402a7e48cea6d2637d90eeb5a7e6'
   STAGING_ARBITRABLE_PERMISSION_LIST_BLOCK_BLOCK_NUMBER: '8784036'
   PRODUCTION_ARBITRABLE_PERMISSION_LIST_BLOCK_BLOCK_NUMBER: '6361634'
   STAGING_KLEROS_LIQUID_ADDRESS: '0x60b2abfdfad9c0873242f59f2a8c32a3cc682f80'
   PRODUCTION_KLEROS_LIQUID_ADDRESS: '0x988b3a538b618c7a603e1c11ab82cd16dbe28069'
+  STAGING_TOKEN_SALE_CONTRACT_ADDRESS: '0xC74348B7c4D9f25C26591a40AA2b712bC38F4f14'
+  PRODUCTION_TOKEN_SALE_CONTRACT_ADDRESS: '0x5EdF42Ce9DA28d0B1790C6093103526e3bb88eF3'
 keyArn: 'arn:aws:kms:us-east-2:547511976516:key/bca002a4-c1d9-40e3-a251-6ccea1ce02f0'

package.json

@@ -13,7 +13,7 @@
     "commitmsg": "kleros-scripts commitmsg",
     "cz": "kleros-scripts cz",
     "invoke": "env-cmd ./.env serverless invoke -l -f",
-    "build": "docker run --rm -v $PWD:/data -w /data node:8 npm rebuild scrypt",
+    "build": "docker run --rm -v $PWD:/data -w /data node:10 npm rebuild scrypt",
     "deploy:function": "env-cmd ./.env serverless deploy function -f",
     "deploy:staging": "env-cmd ./.env serverless deploy",
     "deploy": "env-cmd ./.env serverless deploy -s production"
@@ -36,6 +36,6 @@
     "aws-sdk": "^2.266.1",
     "data-uri-to-buffer": "^2.0.0",
     "image-size": "^0.6.3",
-    "web3": "^1.0.0-beta.34"
+    "web3": "^1.2.4"
   }
 }

serverless.yml

@@ -1,7 +1,7 @@
 service: kleros-microservices
 provider:
   name: aws
-  runtime: nodejs8.10
+  runtime: nodejs10.x
   stage: '${opt:stage, self:custom.defaultStage}'
   region: us-east-2
 package:
@@ -319,3 +319,63 @@ functions:
             responseModels: { application/json: ErrorResponse },
           },
         ]
+  putTokenSaleOrder:
+    handler: src/token-sale/locales.put
+    events:
+      - { http: { path: token-sale, method: put, cors: true } }
+    environment:
+      INFURA_URL: '${self:custom.kmsSecrets.secrets.${self:custom.environments.${self:provider.stage}}_INFURA_URL}'
+      INFURA_URL_KOVAN: '${self:custom.kmsSecrets.secrets.STAGING_INFURA_URL}'
+      INFURA_URL_MAINNET: '${self:custom.kmsSecrets.secrets.PRODUCTION_INFURA_URL}'
+      TOKEN_SALE_CONTRACT_ADDRESS_KOVAN: '${self:custom.kmsSecrets.secrets.STAGING_TOKEN_SALE_CONTRACT_ADDRESS}'
+      TOKEN_SALE_CONTRACT_ADDRESS: '${self:custom.kmsSecrets.secrets.PRODUCTION_TOKEN_SALE_CONTRACT_ADDRESS}'
+    iamRoleStatementsName: 'putTokenSaleOrder-${self:provider.stage}-lambda-role'
+    iamRoleStatements:
+      - {
+          Effect: Allow,
+          Action: ['KMS:Decrypt'],
+          Resource: '${self:custom.kmsSecrets.keyArn}',
+        }
+      - {
+          Effect: Allow,
+          Action: ['dynamodb:GetItem'],
+          Resource: 'arn:aws:dynamodb:us-east-2:547511976516:table/token-sale-locales-kovan',
+        }
+      - {
+          Effect: Allow,
+          Action: ['dynamodb:GetItem'],
+          Resource: 'arn:aws:dynamodb:us-east-2:547511976516:table/token-sale-locales',
+        }
+      - {
+          Effect: Allow,
+          Action: ['dynamodb:PutItem'],
+          Resource: 'arn:aws:dynamodb:us-east-2:547511976516:table/token-sale-locales-kovan',
+        }
+      - {
+          Effect: Allow,
+          Action: ['dynamodb:PutItem'],
+          Resource: 'arn:aws:dynamodb:us-east-2:547511976516:table/token-sale-locales',
+        }
+  postUnsubscribe:
+    handler: src/global/unsubscribe
+    events:
+      - { http: { path: unsubscribe, method: post, cors: true } }
+    environment:
+      ENTROPY: '${self:custom.kmsSecrets.secrets.ENTROPY}'
+    iamRoleStatementsName: 'postUnsubscribe-${self:provider.stage}-lambda-role'
+    iamRoleStatements:
+      - {
+          Effect: Allow,
+          Action: ['KMS:Decrypt'],
+          Resource: '${self:custom.kmsSecrets.keyArn}',
+        }
+      - {
+          Effect: Allow,
+          Action: ['dynamodb:GetItem'],
+          Resource: 'arn:aws:dynamodb:us-east-2:547511976516:table/user-settings',
+        }
+      - {
+          Effect: Allow,
+          Action: ['dynamodb:PutItem'],
+          Resource: 'arn:aws:dynamodb:us-east-2:547511976516:table/user-settings',
+        }

src/global/unsubscribe.js

@@ -0,0 +1,59 @@
+const _web3 = require('../utils/web3')
+const dynamoDB = require('../utils/dynamo-db')
+const getEnvVars = require('../get-env-vars')
+const whitelist = require('../utils/whitelist')
+
+module.exports.post = async (event, _context, callback) => {
+  // Initialize web3
+  const web3 = await _web3()
+
+  // Validate signature
+  const payload = JSON.parse(event.body).payload
+  try {
+    const account = await web3.eth.accounts.recover(
+      JSON.stringify(payload.email),
+      payload.signature
+    )
+    const { ENTROPY } = await getEnvVars(['ENTROPY'])
+    const lambdaAccount = web3.eth.accounts.create(ENTROPY)
+    if (
+      account !== lambdaAccount.address
+    )
+      throw new Error('Signature does not match for this email address. Email contact.kleros.io.')
+  } catch (err) {
+    console.error(err)
+    return callback(null, {
+      statusCode: 403,
+      headers: { 'Access-Control-Allow-Origin': '*' },
+      body: JSON.stringify({
+        error: 'Signature does not match for this email address. Email contact.kleros.io.'
+      })
+    })
+  }
+
+  // Update settings for DApp
+  const updateKeys = whitelist.filter(k => {
+    if (payload.dapp)
+      return k.includes(payload.dapp)
+    return false
+  })
+  await dynamoDB.updateItem({
+    Key: { address: { S: payload.address } },
+    TableName: 'user-settings',
+    UpdateExpression: `SET ${updateKeys
+      .map(k => `${k} = :_${k}`)
+      .join(', ')}`,
+    ExpressionAttributeValues: updateKeys.reduce((acc, k) => {
+      acc[`:_${k}`] = false
+      return acc
+    }, {})
+  })
+
+  callback(null, {
+    statusCode: 200,
+    headers: { 'Access-Control-Allow-Origin': '*' },
+    body: JSON.stringify({
+      payload: `Unsubscribed from Kleros ${payload.dapp} notifications.`
+    })
+  })
+}

src/token-sale/locales.js

@@ -0,0 +1,80 @@
+const { promisify } = require('util')
+
+const AWS = require('aws-sdk')
+
+const _web3 = require('../utils/web3')
+const dynamoDB = require('../utils/dynamo-db')
+const getEnvVars = require('../utils/get-env-vars')
+
+module.exports.put = async (event, _context, callback) => {
+  // Initialize web3 and contract
+
+  // Check that the image has been added to the contract
+  const body = JSON.parse(event.body)
+  const transactionHash = body.txHash
+  const country = body.country
+  const ip = body.ip
+
+  if (!transactionHash)
+    return callback(null, {
+      statusCode: 403,
+      headers: { 'Access-Control-Allow-Origin': '*' },
+      body: JSON.stringify({
+        error: 'Invalid transaction'
+      })
+    })
+
+  const web3 = await _web3()
+  let transaction = await web3.eth.getTransaction(transactionHash)
+  let verified = false
+  // If node hasn't gotten tx yet we cannot verify it. Add to db with unverified flag so we can do later dilligence on it if necessary
+  if (transaction) {
+    const contract_var = body.network ? `TOKEN_SALE_CONTRACT_ADDRESS_${body.network.toUpperCase()}` : `TOKEN_SALE_CONTRACT_ADDRESS`
+
+    if (transaction.to !== process.env[contract_var]) {
+      return callback(null, {
+        statusCode: 403,
+        headers: { 'Access-Control-Allow-Origin': '*' },
+        body: JSON.stringify({
+          error: 'Invalid transaction'
+        })
+      })
+    }
+
+    if (transaction.value === '0') {
+      return callback(null, {
+        statusCode: 403,
+        headers: { 'Access-Control-Allow-Origin': '*' },
+        body: JSON.stringify({
+          error: 'Invalid transaction'
+        })
+      })
+    }
+      verified = true
+  }
+
+  // Save tx and country
+  await dynamoDB.putItem({
+    Item: {
+      transactionHash: {
+        S: `${transactionHash}`
+      },
+      country: {
+        S: `${country}`
+      },
+      ip: {
+        S: `${ip}`
+      },
+      verified: {
+        BOOL: verified
+      }
+    },
+    TableName: `${body.network ? `token-sale-locales-${body.network}` : 'token-sale-locales'}`
+  })
+
+  // Return image URL
+  callback(null, {
+    statusCode: 200,
+    headers: { 'Access-Control-Allow-Origin': '*' }
+  })
+}

src/token-sale/models/doge-images.json

@@ -0,0 +1,32 @@
+{
+  "post": {
+    "request": {
+      "type": "object",
+      "properties": {
+        "payload": {
+          "type": "object",
+          "properties": {
+            "imageFileDataURL": {
+              "type": "string",
+              "description": "The base64 encoded image data URL."
+            }
+          }
+        }
+      }
+    },
+    "response": {
+      "type": "object",
+      "properties": {
+        "payload": {
+          "type": "object",
+          "properties": {
+            "imageURL": {
+              "type": "string",
+              "description": "The uploaded image's URL."
+            }
+          }
+        }
+      }
+    }
+  }
+}

src/utils/whitelist.js

@@ -0,0 +1,24 @@
+const whitelist = [
+  'email',
+  'dogecoinAddress',
+  'fullName',
+  'phone',
+  'derivedAccountAddress',
+  'courtNotificationSettingAppeal',
+  'courtNotificationSettingDraw',
+  'courtNotificationSettingLose',
+  'courtNotificationSettingWin',
+  'centralizedArbitratorDashboardNotificationSettingDisputes',
+  'centralizedArbitratorDashboardNotificationSettingEvidence',
+  't2crNotificationSettingDispute',
+  't2crNotificationSettingRulingGiven',
+  'escrowNotificationSettingDispute',
+  'escrowNotificationSettingAppeal',
+  'escrowNotificationSettingRulingGiven'
+]
+
+const emailWhitelist = [
+
+]
+
+export default whitelist