Ceremony UI

.circleci/config.yml

@@ -39,7 +39,7 @@ jobs:
           name: Download Circuits
           command: |
             cd packages/backend
-            wget https://pub-4c6a367a0d1b43b39b344703b032a675.r2.dev/circuits.tar.gz
+            wget https://pub-6c705682d0d84704aeda74c87d3880ec.r2.dev/circuits.tar.gz
             tar -xzf circuits.tar.gz
             rm circuits.tar.gz
       - run:

.gitignore

@@ -10,3 +10,5 @@ packages/contracts/contracts/verifiers/
 db/
 circuits/
 dist/
+
+.env

Dockerfile

@@ -1,12 +1,12 @@
-FROM node:16-buster
+FROM node:18-buster
 
 COPY . /src
 
 WORKDIR /src
 
 RUN yarn && rm -rf packages/frontend
 
-FROM node:16-buster
+FROM node:18-buster
 
 COPY --from=0 /src /src
 WORKDIR /src/packages/backend

packages/backend/.env.example

@@ -0,0 +1,12 @@
+R2_ACCOUNT_ID=
+R2_ACCESS_KEY_ID=
+R2_SECRET_ACCESS_KEY=
+GITHUB_CLIENT_ID=
+GITHUB_CLIENT_SECRET=
+GITHUB_REDIRECT_URI=
+DISCORD_CLIENT_ID=
+DISCORD_CLIENT_SECRET=
+DISCORD_REDIRECT_URI=
+TWITTER_CLIENT_ID=
+TWITTER_CLIENT_SECRET=
+TWITTER_REDIRECT_URI=

packages/backend/package.json

@@ -11,12 +11,14 @@
   "dependencies": {
     "@aws-sdk/client-s3": "^3.345.0",
     "anondb": "^0.0.21",
+    "crypto": "^1.0.1",
     "dotenv": "^16.0.3",
     "especial": "^0.1.0-beta-3",
     "ethers": "^5.7.2",
     "express": "^4.18.2",
     "multer": "^1.4.5-lts.1",
     "node-fetch": "^3.3.1",
+    "octokit": "^3.1.1",
     "snarkjs": "git+https://github.com/vimwitch/snarkjs.git"
   },
   "main": "index.js",

packages/backend/src/config.mjs

@@ -45,6 +45,12 @@ export const DISCORD_REDIRECT_URI =
   process.env.DISCORD_REDIRECT_URI ??
   'http://localhost:8000/oauth/discord/callback'
 
+export const TWITTER_CLIENT_ID = process.env.TWITTER_CLIENT_ID
+export const TWITTER_CLIENT_SECRET = process.env.TWITTER_CLIENT_SECRET
+export const TWITTER_REDIRECT_URI =
+  process.env.TWITTER_REDIRECT_URI ??
+  'http://localhost:8000/oauth/twitter/callback'
+
 export const WS_SERVER = process.env.WS_SERVER ?? `ws://127.0.0.1:8001`
 
 export const WELCOME_MESSAGE =
@@ -62,7 +68,7 @@ export const ATTESTATION_URL =
 
 const ptauPath = path.join(
   __dirname,
-  '../circuits/powersOfTau28_hez_final_17.ptau'
+  '../circuits/powersOfTau28_hez_final_18.ptau'
 )
 
 export const authOptions = [
@@ -147,13 +153,13 @@ export const circuits = [
     ptauPath,
   },
   {
-    name: 'Prove Reputation',
-    zkeyPath: path.join(__dirname, '../circuits/proveReputation.zkey'),
+    name: 'Reputation',
+    zkeyPath: path.join(__dirname, '../circuits/reputation.zkey'),
     ptauPath,
   },
   {
-    name: 'Double Action',
-    zkeyPath: path.join(__dirname, '../circuits/preventDoubleAction.zkey'),
+    name: 'Scope Nullifier',
+    zkeyPath: path.join(__dirname, '../circuits/scopeNullifier.zkey'),
     ptauPath,
   },
 ]

packages/backend/src/http/discord.mjs

@@ -136,6 +136,7 @@ export default ({ app, db, ceremony }) => {
         res.status(204).end()
       } else {
         const url = new URL(_state.redirectDestination)
+        url.searchParams.set('name', `Discord#${user.username}`)
         res.redirect(url.toString())
       }
     })

packages/backend/src/http/github.mjs

@@ -5,6 +5,7 @@ import {
 } from '../config.mjs'
 import fetch from 'node-fetch'
 import { catchError } from '../catchError.mjs'
+import { Octokit } from 'octokit'
 
 const GITHUB_URL = process.env.GITHUB_URL ?? 'https://github.com'
 const GITHUB_API_URL = process.env.GITHUB_URL ?? 'https://api.github.com'
@@ -24,10 +25,11 @@ export default ({ app, wsApp, db, ceremony }) => {
         userId: auth.userId,
       })
       const url = new URL('/login/oauth/authorize', GITHUB_URL)
-      url.searchParams.append('client_id', GITHUB_CLIENT_ID)
-      url.searchParams.append('redirect_uri', GITHUB_REDIRECT_URI)
-      url.searchParams.append('state', state._id)
-      url.searchParams.append('allow_signup', 'false')
+      url.searchParams.set('client_id', GITHUB_CLIENT_ID)
+      url.searchParams.set('redirect_uri', GITHUB_REDIRECT_URI)
+      url.searchParams.set('scope', 'gist')
+      url.searchParams.set('state', state._id)
+      url.searchParams.set('allow_signup', 'false')
       res.redirect(url.toString())
     })
   )
@@ -53,17 +55,14 @@ export default ({ app, wsApp, db, ceremony }) => {
       if (error) {
         // access was denied
         const url = new URL(_state.redirectDestination)
-        url.searchParams.append(
-          'error',
-          'There was a problem authenticating you'
-        )
+        url.searchParams.set('error', 'There was a problem authenticating you')
         res.redirect(url.toString())
         return
       }
       const url = new URL('/login/oauth/access_token', GITHUB_URL)
-      url.searchParams.append('client_id', GITHUB_CLIENT_ID)
-      url.searchParams.append('client_secret', GITHUB_CLIENT_SECRET)
-      url.searchParams.append('code', code)
+      url.searchParams.set('client_id', GITHUB_CLIENT_ID)
+      url.searchParams.set('client_secret', GITHUB_CLIENT_SECRET)
+      url.searchParams.set('code', code)
       const auth = await fetch(url.toString(), {
         method: 'POST',
         headers: {
@@ -118,8 +117,38 @@ export default ({ app, wsApp, db, ceremony }) => {
         res.status(204).end()
       } else {
         const _url = new URL(_state.redirectDestination)
+        _url.searchParams.set('github_access_token', access_token)
+        _url.searchParams.set('name', `Github#${user.login}`)
         res.redirect(_url.toString())
       }
     })
   )
+
+  app.get(
+    '/post/github',
+    catchError(async (req, res) => {
+      const { access_token, content } = req.query
+      const octokit = new Octokit({
+        request: {
+          fetch: fetch,
+        },
+        auth: access_token,
+      })
+
+      const filename = `unirep-trusted-setup-${+new Date()}.log.md`
+      const data = {
+        description: 'Post of Unirep trusted setup',
+        files: {},
+        headers: {
+          'x-github-api-version': '2022-11-28',
+        },
+      }
+      data.files[filename] = {
+        content,
+      }
+
+      const response = await octokit.request('POST /gists', data)
+      res.json(response)
+    })
+  )
 }

packages/backend/src/http/twitter.mjs

@@ -0,0 +1,134 @@
+import { TWITTER_CLIENT_ID, TWITTER_REDIRECT_URI } from '../config.mjs'
+import fetch from 'node-fetch'
+import crypto from 'crypto'
+import { catchError } from '../catchError.mjs'
+
+const TWITTER_URL = process.env.TWITTER_URL ?? 'https://twitter.com'
+const TWITTER_API_URL = process.env.TWITTER_URL ?? 'https://api.twitter.com'
+
+export default ({ app, wsApp, db, ceremony }) => {
+  app.get(
+    '/oauth/twitter',
+    catchError(async (req, res) => {
+      const { token, content } = req.query
+      const auth = await db.findOne('Auth', {
+        where: { token },
+      })
+      if (!auth) return res.status(401).json({ error: 'unauthorized' })
+
+      const challenge = crypto.randomBytes(32).toString('hex')
+      const state = await db.create('OAuthState', {
+        type: 'twitter',
+        data: `${challenge}&${content}`,
+        redirectDestination: req.query.redirectDestination,
+        userId: auth.userId,
+      })
+      const url = new URL('/i/oauth2/authorize', TWITTER_URL)
+      url.searchParams.set('response_type', 'code')
+      url.searchParams.set('client_id', TWITTER_CLIENT_ID)
+      url.searchParams.set('redirect_uri', TWITTER_REDIRECT_URI)
+      url.searchParams.set(
+        'scope',
+        'users.read tweet.read tweet.write offline.access'
+      )
+      url.searchParams.set('state', state._id)
+      // PKCE thing
+      url.searchParams.set('code_challenge', challenge)
+      url.searchParams.set('code_challenge_method', 'plain')
+      res.redirect(url.toString())
+    })
+  )
+
+  app.get(
+    '/oauth/twitter/callback',
+    catchError(async (req, res) => {
+      const { code, state, error } = req.query
+      const _state = await db.findOne('OAuthState', {
+        where: { _id: state },
+      })
+      if (!_state) {
+        res.status(401).json({
+          error: 'Invalid state',
+        })
+        return
+      }
+      await db.delete('OAuthState', {
+        where: {
+          _id: state,
+        },
+      })
+      if (error) {
+        // access was denied
+        const url = new URL(_state.redirectDestination)
+        url.searchParams.set('error', 'There was a problem authenticating you')
+        res.redirect(url.toString())
+        return
+      }
+      const challenge = _state.data.split('&')[0]
+      const args = {
+        code,
+        grant_type: 'authorization_code',
+        client_id: TWITTER_CLIENT_ID,
+        code_verifier: challenge,
+        redirect_uri: TWITTER_REDIRECT_URI,
+      }
+      const body = Object.entries(args)
+        .map(([key, val]) => `${key}=${encodeURIComponent(val)}`)
+        .join('&')
+
+      const url = new URL('/2/oauth2/token', TWITTER_API_URL)
+      const auth = await fetch(url.toString(), {
+        method: 'POST',
+        headers: {
+          'content-type': 'application/x-www-form-urlencoded',
+        },
+        body,
+      })
+
+      const authOutcome = await auth.json()
+
+      const userUrl = new URL('/2/users/me', TWITTER_API_URL)
+      const userRes = await fetch(userUrl.toString(), {
+        headers: {
+          authorization: `Bearer ${authOutcome.access_token}`,
+        },
+      }).then((r) => r.json())
+
+      const apiurl = new URL('/2/tweets', TWITTER_API_URL)
+      const text = _state.data.split('&')[1]
+      const data = {
+        text,
+      }
+
+      const response = await fetch(apiurl.toString(), {
+        method: 'POST',
+        headers: {
+          authorization: `Bearer ${authOutcome.access_token}`,
+          'user-agent': 'v2CreateTweetJS',
+          'content-type': 'application/json',
+          accept: 'application/json',
+        },
+        body: JSON.stringify(data),
+      }).then((r) => r.json())
+
+      if (!_state.redirectDestination) {
+        res.status(204).end()
+      } else {
+        const _url = new URL(_state.redirectDestination)
+        if (!response.data) {
+          _url.searchParams.set(
+            'error',
+            'You are not allowed to post duplicate content on twitter.'
+          )
+          res.redirect(_url.toString())
+          return
+        }
+        _url.searchParams.set(
+          'twitter_post_url',
+          `https://x.com/${userRes.data.username}/status/${response.data.id}`
+        )
+        res.redirect(_url.toString())
+      }
+    })
+  )
+}

packages/backend/src/index.mjs

@@ -44,7 +44,7 @@ try {
   const backup = new Backup(db)
   backup.start()
 } catch (err) {
-  console.log('Error starting backup system, aborting')
+  console.log('Error starting backup system, aborting:', err)
 }
 
 const deviceAuth = new DeviceAuth(db)

packages/frontend/.env.example

@@ -0,0 +1 @@
+HTTP_SERVER='https://dev2.http.ceremony.unirep.io'

packages/frontend/package.json

@@ -12,13 +12,17 @@
   },
   "dependencies": {
     "@cloudflare/kv-asset-handler": "^0.2.0",
+    "as-bind": "^0.8.2",
     "css-minimizer-webpack-plugin": "^5.0.0",
     "dayjs": "^1.11.8",
+    "dotenv-webpack": "^8.0.1",
     "especial": "^0.1.0-beta-3",
     "ethers": "^5.7.2",
     "file-loader": "^6.2.0",
     "mobx-react-lite": "^3.4.0",
-    "randomf": "^0.0.3"
+    "randomf": "^0.0.3",
+    "react-toastify": "^9.1.3",
+    "three": "^0.156.1"
   },
   "devDependencies": {
     "@babel/core": "^7.19.6",