10 "github.com/kr/secureheader"
11 log "github.com/sirupsen/logrus"
12 cmn "github.com/tendermint/tmlibs/common"
14 "github.com/vapor/accesstoken"
15 "github.com/vapor/blockchain/txfeed"
16 cfg "github.com/vapor/config"
17 "github.com/vapor/dashboard/dashboard"
18 "github.com/vapor/dashboard/equity"
19 "github.com/vapor/errors"
20 "github.com/vapor/event"
21 "github.com/vapor/mining/cpuminer"
22 "github.com/vapor/net/http/authn"
23 "github.com/vapor/net/http/gzip"
24 "github.com/vapor/net/http/httpjson"
25 "github.com/vapor/net/http/static"
26 "github.com/vapor/net/websocket"
27 "github.com/vapor/netsync"
28 "github.com/vapor/p2p"
29 "github.com/vapor/protocol"
30 "github.com/vapor/wallet"
34 errNotAuthenticated = errors.New("not authenticated")
35 httpReadTimeout = 2 * time.Minute
36 httpWriteTimeout = time.Hour
40 // SUCCESS indicates the rpc calling is successful.
42 // FAIL indicated the rpc calling is failed.
47 // Response describes the response standard.
48 type Response struct {
49 Status string `json:"status,omitempty"`
50 Code string `json:"code,omitempty"`
51 Msg string `json:"msg,omitempty"`
52 ErrorDetail string `json:"error_detail,omitempty"`
53 Data interface{} `json:"data,omitempty"`
56 //NewSuccessResponse success response
57 func NewSuccessResponse(data interface{}) Response {
58 return Response{Status: SUCCESS, Data: data}
61 //FormatErrResp format error response
62 func FormatErrResp(err error) (response Response) {
63 response = Response{Status: FAIL}
64 root := errors.Root(err)
65 // Some types cannot be used as map keys, for example slices.
66 // If an error's underlying type is one of these, don't panic.
67 // Just treat it like any other missing entry.
69 if err := recover(); err != nil {
70 response.ErrorDetail = ""
74 if info, ok := respErrFormatter[root]; ok {
75 response.Code = info.ChainCode
76 response.Msg = info.Message
77 response.ErrorDetail = err.Error()
79 response.Code = respErrFormatter[ErrDefault].ChainCode
80 response.Msg = respErrFormatter[ErrDefault].Message
81 response.ErrorDetail = err.Error()
86 //NewErrorResponse error response
87 func NewErrorResponse(err error) Response {
88 response := FormatErrResp(err)
92 type waitHandler struct {
97 func (wh *waitHandler) Set(h http.Handler) {
102 func (wh *waitHandler) ServeHTTP(w http.ResponseWriter, req *http.Request) {
104 wh.h.ServeHTTP(w, req)
107 // API is the scheduling center for server
110 wallet *wallet.Wallet
111 accessTokens *accesstoken.CredentialStore
112 chain *protocol.Chain
115 txFeedTracker *txfeed.Tracker
116 cpuMiner *cpuminer.CPUMiner
117 notificationMgr *websocket.WSNotificationManager
118 eventDispatcher *event.Dispatcher
121 func (a *API) initServer(config *cfg.Config) {
122 // The waitHandler accepts incoming requests, but blocks until its underlying
123 // handler is set, when the second phase is complete.
124 var coreHandler waitHandler
125 var handler http.Handler
127 coreHandler.wg.Add(1)
128 mux := http.NewServeMux()
129 mux.Handle("/", &coreHandler)
131 handler = AuthHandler(mux, a.accessTokens, config.Auth.Disable)
132 handler = RedirectHandler(handler)
134 secureheader.DefaultConfig.PermitClearLoopback = true
135 secureheader.DefaultConfig.HTTPSRedirect = false
136 secureheader.DefaultConfig.Next = handler
138 a.server = &http.Server{
139 // Note: we should not set TLSConfig here;
140 // we took care of TLS with the listener in maybeUseTLS.
141 Handler: secureheader.DefaultConfig,
142 ReadTimeout: httpReadTimeout,
143 WriteTimeout: httpWriteTimeout,
144 // Disable HTTP/2 for now until the Go implementation is more stable.
145 // https://github.com/golang/go/issues/16450
146 // https://github.com/golang/go/issues/17071
147 TLSNextProto: map[string]func(*http.Server, *tls.Conn, http.Handler){},
153 // StartServer start the server
154 func (a *API) StartServer(address string) {
155 log.WithFields(log.Fields{"module": logModule, "api address:": address}).Info("Rpc listen")
156 listener, err := net.Listen("tcp", address)
158 cmn.Exit(cmn.Fmt("Failed to register tcp port: %v", err))
161 // The `Serve` call has to happen in its own goroutine because
162 // it's blocking and we need to proceed to the rest of the core setup after
165 if err := a.server.Serve(listener); err != nil {
166 log.WithFields(log.Fields{"module": logModule, "error": errors.Wrap(err, "Serve")}).Error("Rpc server")
171 type NetSync interface {
176 BestPeer() *netsync.PeerInfo
177 DialPeerWithAddress(addr *p2p.NetAddress) error
178 GetPeerInfos() []*netsync.PeerInfo
179 StopPeer(peerID string) error
182 // NewAPI create and initialize the API
183 func NewAPI(sync NetSync, wallet *wallet.Wallet, txfeeds *txfeed.Tracker, cpuMiner *cpuminer.CPUMiner, chain *protocol.Chain, config *cfg.Config, token *accesstoken.CredentialStore, dispatcher *event.Dispatcher, notificationMgr *websocket.WSNotificationManager) *API {
189 txFeedTracker: txfeeds,
191 eventDispatcher: dispatcher,
192 notificationMgr: notificationMgr,
195 api.initServer(config)
200 func (a *API) ServeHTTP(rw http.ResponseWriter, req *http.Request) {
201 a.handler.ServeHTTP(rw, req)
204 // buildHandler is in charge of all the rpc handling.
205 func (a *API) buildHandler() {
206 walletEnable := false
207 m := http.NewServeMux()
210 m.Handle("/create-account", jsonHandler(a.createAccount))
211 m.Handle("/update-account-alias", jsonHandler(a.updateAccountAlias))
212 m.Handle("/list-accounts", jsonHandler(a.listAccounts))
213 m.Handle("/delete-account", jsonHandler(a.deleteAccount))
215 m.Handle("/create-account-receiver", jsonHandler(a.createAccountReceiver))
216 m.Handle("/list-addresses", jsonHandler(a.listAddresses))
217 m.Handle("/validate-address", jsonHandler(a.validateAddress))
218 m.Handle("/list-pubkeys", jsonHandler(a.listPubKeys))
220 m.Handle("/get-mining-address", jsonHandler(a.getMiningAddress))
221 m.Handle("/set-mining-address", jsonHandler(a.setMiningAddress))
223 m.Handle("/get-coinbase-arbitrary", jsonHandler(a.getCoinbaseArbitrary))
224 m.Handle("/set-coinbase-arbitrary", jsonHandler(a.setCoinbaseArbitrary))
226 m.Handle("/update-asset-alias", jsonHandler(a.updateAssetAlias))
227 m.Handle("/get-asset", jsonHandler(a.getAsset))
228 m.Handle("/list-assets", jsonHandler(a.listAssets))
230 m.Handle("/create-key", jsonHandler(a.pseudohsmCreateKey))
231 m.Handle("/update-key-alias", jsonHandler(a.pseudohsmUpdateKeyAlias))
232 m.Handle("/list-keys", jsonHandler(a.pseudohsmListKeys))
233 m.Handle("/delete-key", jsonHandler(a.pseudohsmDeleteKey))
234 m.Handle("/reset-key-password", jsonHandler(a.pseudohsmResetPassword))
235 m.Handle("/check-key-password", jsonHandler(a.pseudohsmCheckPassword))
236 m.Handle("/sign-message", jsonHandler(a.signMessage))
238 m.Handle("/build-transaction", jsonHandler(a.build))
239 m.Handle("/build-chain-transactions", jsonHandler(a.buildChainTxs))
240 m.Handle("/sign-transaction", jsonHandler(a.signTemplate))
241 m.Handle("/sign-transactions", jsonHandler(a.signTemplates))
243 m.Handle("/get-transaction", jsonHandler(a.getTransaction))
244 m.Handle("/list-transactions", jsonHandler(a.listTransactions))
246 m.Handle("/list-balances", jsonHandler(a.listBalances))
247 m.Handle("/list-unspent-outputs", jsonHandler(a.listUnspentOutputs))
249 m.Handle("/decode-program", jsonHandler(a.decodeProgram))
251 m.Handle("/backup-wallet", jsonHandler(a.backupWalletImage))
252 m.Handle("/restore-wallet", jsonHandler(a.restoreWalletImage))
253 m.Handle("/rescan-wallet", jsonHandler(a.rescanWallet))
254 m.Handle("/wallet-info", jsonHandler(a.getWalletInfo))
255 m.Handle("/recovery-wallet", jsonHandler(a.recoveryFromRootXPubs))
257 log.Warn("Please enable wallet")
260 m.Handle("/", alwaysError(errors.New("not Found")))
261 m.Handle("/error", jsonHandler(a.walletError))
263 m.Handle("/create-access-token", jsonHandler(a.createAccessToken))
264 m.Handle("/list-access-tokens", jsonHandler(a.listAccessTokens))
265 m.Handle("/delete-access-token", jsonHandler(a.deleteAccessToken))
266 m.Handle("/check-access-token", jsonHandler(a.checkAccessToken))
268 m.Handle("/create-transaction-feed", jsonHandler(a.createTxFeed))
269 m.Handle("/get-transaction-feed", jsonHandler(a.getTxFeed))
270 m.Handle("/update-transaction-feed", jsonHandler(a.updateTxFeed))
271 m.Handle("/delete-transaction-feed", jsonHandler(a.deleteTxFeed))
272 m.Handle("/list-transaction-feeds", jsonHandler(a.listTxFeeds))
274 m.Handle("/submit-transaction", jsonHandler(a.submit))
275 m.Handle("/submit-transactions", jsonHandler(a.submitTxs))
276 m.Handle("/estimate-transaction-gas", jsonHandler(a.estimateTxGas))
278 m.Handle("/get-unconfirmed-transaction", jsonHandler(a.getUnconfirmedTx))
279 m.Handle("/list-unconfirmed-transactions", jsonHandler(a.listUnconfirmedTxs))
280 m.Handle("/decode-raw-transaction", jsonHandler(a.decodeRawTransaction))
282 m.Handle("/get-block", jsonHandler(a.getBlock))
283 m.Handle("/get-raw-block", jsonHandler(a.getRawBlock))
284 m.Handle("/get-block-hash", jsonHandler(a.getBestBlockHash))
285 m.Handle("/get-block-header", jsonHandler(a.getBlockHeader))
286 m.Handle("/get-block-count", jsonHandler(a.getBlockCount))
288 m.Handle("/is-mining", jsonHandler(a.isMining))
289 m.Handle("/set-mining", jsonHandler(a.setMining))
291 m.Handle("/verify-message", jsonHandler(a.verifyMessage))
292 m.Handle("/compile", jsonHandler(a.compileEquity))
294 m.Handle("/gas-rate", jsonHandler(a.gasRate))
295 m.Handle("/net-info", jsonHandler(a.getNetInfo))
297 m.Handle("/list-peers", jsonHandler(a.listPeers))
298 m.Handle("/disconnect-peer", jsonHandler(a.disconnectPeer))
299 m.Handle("/connect-peer", jsonHandler(a.connectPeer))
301 m.Handle("/get-merkle-proof", jsonHandler(a.getMerkleProof))
303 m.HandleFunc("/websocket-subscribe", a.websocketHandler)
305 handler := walletHandler(m, walletEnable)
306 handler = webAssetsHandler(handler)
307 handler = gzip.Handler{Handler: handler}
312 func jsonHandler(f interface{}) http.Handler {
313 h, err := httpjson.Handler(f, errorFormatter.Write)
321 func alwaysError(err error) http.Handler {
322 return jsonHandler(func() error { return err })
325 func webAssetsHandler(next http.Handler) http.Handler {
326 mux := http.NewServeMux()
327 mux.Handle("/dashboard/", http.StripPrefix("/dashboard/", static.Handler{
328 Assets: dashboard.Files,
329 Default: "index.html",
331 mux.Handle("/equity/", http.StripPrefix("/equity/", static.Handler{
332 Assets: equity.Files,
333 Default: "index.html",
335 mux.Handle("/", next)
340 // AuthHandler access token auth Handler
341 func AuthHandler(handler http.Handler, accessTokens *accesstoken.CredentialStore, authDisable bool) http.Handler {
342 authenticator := authn.NewAPI(accessTokens, authDisable)
344 return http.HandlerFunc(func(rw http.ResponseWriter, req *http.Request) {
345 // TODO(tessr): check that this path exists; return early if this path isn't legit
346 req, err := authenticator.Authenticate(req)
348 log.WithFields(log.Fields{"module": logModule, "error": errors.Wrap(err, "Serve")}).Error("Authenticate fail")
349 err = errors.WithDetail(errNotAuthenticated, err.Error())
350 errorFormatter.Write(req.Context(), rw, err)
353 handler.ServeHTTP(rw, req)
357 // RedirectHandler redirect to dashboard handler
358 func RedirectHandler(next http.Handler) http.Handler {
359 return http.HandlerFunc(func(w http.ResponseWriter, req *http.Request) {
360 if req.URL.Path == "/" {
361 http.Redirect(w, req, "/dashboard/", http.StatusFound)
364 next.ServeHTTP(w, req)
368 func walletHandler(m *http.ServeMux, walletEnable bool) http.Handler {
369 return http.HandlerFunc(func(w http.ResponseWriter, req *http.Request) {
370 // when the wallet is not been opened and the url path is not been found, modify url path to error,
371 // and redirect handler to error
372 if _, pattern := m.Handler(req); pattern != req.URL.Path && !walletEnable {
373 req.URL.Path = "/error"
374 walletRedirectHandler(w, req)
382 // walletRedirectHandler redirect to error when the wallet is closed
383 func walletRedirectHandler(w http.ResponseWriter, req *http.Request) {
384 h := http.RedirectHandler(req.URL.String(), http.StatusMovedPermanently)