mirror of
https://github.com/selfxyz/self.git
synced 2026-04-27 03:01:15 -04:00
add OneTimeSBT.sol and VerifiersManager.sol
This commit is contained in:
motemotech
393
contracts/contracts/OneTimeSBT.sol
Normal file
393
contracts/contracts/OneTimeSBT.sol
Normal file
@@ -0,0 +1,393 @@
|
||||
// SPDX-License-Identifier: MIT
|
||||
pragma solidity ^0.8.18;
|
||||
|
||||
import "@openzeppelin/contracts/token/ERC721/extensions/ERC721Enumerable.sol";
|
||||
import "@openzeppelin/contracts/access/Ownable.sol";
|
||||
import "@openzeppelin/contracts/utils/Strings.sol";
|
||||
|
||||
import {IVerifiersManager} from "./interfaces/IVerifiersManager.sol";
|
||||
import "./constants/constants.sol";
|
||||
|
||||
import {Base64} from "./libraries/Base64.sol";
|
||||
import {Formatter} from "./Formatter.sol";
|
||||
import {IRegister} from "./interfaces/IRegister.sol";
|
||||
import "hardhat/console.sol";
|
||||
|
||||
contract OneTimeSBT is ERC721Enumerable, Ownable {
|
||||
using Strings for uint256;
|
||||
using Base64 for *;
|
||||
|
||||
IVerifiersManager public verifiersManager;
|
||||
Formatter public formatter;
|
||||
|
||||
uint constant scope = 1;
|
||||
|
||||
mapping(uint256 => bool) public nullifiers;
|
||||
mapping(uint256 => uint256) public sbtExpiration;
|
||||
|
||||
struct AttributePosition {
|
||||
string name;
|
||||
uint256 start;
|
||||
uint256 end;
|
||||
uint256 index;
|
||||
}
|
||||
|
||||
struct Attributes {
|
||||
string[8] values;
|
||||
}
|
||||
|
||||
AttributePosition[] public attributePositions;
|
||||
|
||||
mapping(uint256 => Attributes) private tokenAttributes;
|
||||
|
||||
constructor(
|
||||
IVerifiersManager v,
|
||||
Formatter f
|
||||
) ERC721("OpenPassport", "OpenPassport") {
|
||||
verifiersManager = v;
|
||||
formatter = f;
|
||||
setupAttributes();
|
||||
transferOwnership(msg.sender);
|
||||
}
|
||||
|
||||
function setupAttributes() internal {
|
||||
attributePositions.push(AttributePosition("issuing_state", 2, 4, 0));
|
||||
attributePositions.push(AttributePosition("name", 5, 43, 1));
|
||||
attributePositions.push(
|
||||
AttributePosition("passport_number", 44, 52, 2)
|
||||
);
|
||||
attributePositions.push(AttributePosition("nationality", 54, 56, 3));
|
||||
attributePositions.push(AttributePosition("date_of_birth", 57, 62, 4));
|
||||
attributePositions.push(AttributePosition("gender", 64, 64, 5));
|
||||
attributePositions.push(AttributePosition("expiry_date", 65, 70, 6));
|
||||
attributePositions.push(AttributePosition("older_than", 88, 89, 7));
|
||||
}
|
||||
|
||||
function mint(
|
||||
uint256 prove_verifier_id,
|
||||
uint256 dsc_verifier_id,
|
||||
IVerifiersManager.RSAProveCircuitProof memory p_proof,
|
||||
IVerifiersManager.DscCircuitProof memory d_proof
|
||||
) public {
|
||||
// require that the current date is valid
|
||||
// Convert the last four parameters into a valid timestamp, adding 30 years to adjust for block.timestamp starting in 1970
|
||||
uint[6] memory dateNum;
|
||||
for (uint i = 0; i < 6; i++) {
|
||||
dateNum[i] = p_proof.pubSignals[PROVE_RSA_COMMITMENT_INDEX + i];
|
||||
}
|
||||
uint currentTimestamp = getCurrentTimestamp(dateNum);
|
||||
|
||||
// Check that the current date is within a +/- 1 day range
|
||||
require(
|
||||
currentTimestamp >= block.timestamp - 1 days &&
|
||||
currentTimestamp <= block.timestamp + 1 days,
|
||||
"Current date is not within the valid range"
|
||||
);
|
||||
|
||||
// check blinded dcs
|
||||
if (keccak256(abi.encodePacked(p_proof.pubSignals[PROVE_RSA_BLINDED_DSC_COMMITMENT_INDEX])) != keccak256(abi.encodePacked(d_proof.pubSignals[DSC_BLINDED_DSC_COMMITMENT_INDEX]))) {
|
||||
revert ("Blinded DSC commitments are not equal");
|
||||
}
|
||||
|
||||
if (!verifiersManager.verifyWithProveVerifier(
|
||||
prove_verifier_id,
|
||||
p_proof
|
||||
)) {
|
||||
revert ("Invalid Prove Proof");
|
||||
}
|
||||
|
||||
if (!verifiersManager.verifyWithDscVerifier(
|
||||
dsc_verifier_id,
|
||||
d_proof
|
||||
)) {
|
||||
revert ("Invalid DSC Proof");
|
||||
}
|
||||
|
||||
nullifiers[p_proof.pubSignals[PROVE_RSA_NULLIFIER_INDEX]] = true;
|
||||
|
||||
// Effects: Mint token
|
||||
address addr = address(uint160(p_proof.pubSignals[PROVE_RSA_USER_IDENTIFIER_INDEX]));
|
||||
uint256 newTokenId = totalSupply();
|
||||
_mint(addr, newTokenId);
|
||||
|
||||
// Set attributes
|
||||
uint[3] memory revealedData_packed;
|
||||
for (uint256 i = 0; i < 3; i++) {
|
||||
revealedData_packed[i] = p_proof.pubSignals[PROVE_RSA_REVEALED_DATA_PACKED_INDEX + i];
|
||||
}
|
||||
bytes memory charcodes = fieldElementsToBytes(
|
||||
revealedData_packed
|
||||
);
|
||||
|
||||
Attributes storage attributes = tokenAttributes[newTokenId];
|
||||
|
||||
for (uint i = 0; i < attributePositions.length; i++) {
|
||||
AttributePosition memory attribute = attributePositions[i];
|
||||
bytes memory attributeBytes = new bytes(
|
||||
attribute.end - attribute.start + 1
|
||||
);
|
||||
for (uint j = attribute.start; j <= attribute.end; j++) {
|
||||
attributeBytes[j - attribute.start] = charcodes[j];
|
||||
}
|
||||
string memory attributeValue = string(attributeBytes);
|
||||
attributes.values[i] = attributeValue;
|
||||
// console.log(attribute.name, attributes.values[i]);
|
||||
}
|
||||
|
||||
sbtExpiration[newTokenId] = block.timestamp + 90 days;
|
||||
}
|
||||
|
||||
function fieldElementsToBytes(
|
||||
uint256[3] memory publicSignals
|
||||
) public pure returns (bytes memory) {
|
||||
uint8[3] memory bytesCount = [31, 31, 28];
|
||||
bytes memory bytesArray = new bytes(90); // 31 + 31 + 28
|
||||
|
||||
uint256 index = 0;
|
||||
for (uint256 i = 0; i < 3; i++) {
|
||||
uint256 element = publicSignals[i];
|
||||
for (uint8 j = 0; j < bytesCount[i]; j++) {
|
||||
bytesArray[index++] = bytes1(uint8(element & 0xFF));
|
||||
element = element >> 8;
|
||||
}
|
||||
}
|
||||
|
||||
return bytesArray;
|
||||
}
|
||||
|
||||
function sliceFirstThree(
|
||||
uint256[12] memory input
|
||||
) public pure returns (uint256[3] memory) {
|
||||
uint256[3] memory sliced;
|
||||
|
||||
for (uint256 i = 0; i < 3; i++) {
|
||||
sliced[i] = input[i];
|
||||
}
|
||||
|
||||
return sliced;
|
||||
}
|
||||
|
||||
function _beforeTokenTransfer(
|
||||
address from,
|
||||
address to,
|
||||
uint256 tokenId,
|
||||
uint256 batchSize
|
||||
) internal virtual override {
|
||||
super._beforeTokenTransfer(from, to, tokenId, batchSize);
|
||||
require(
|
||||
from == address(0),
|
||||
"Cannot transfer - SBT is soulbound"
|
||||
);
|
||||
}
|
||||
|
||||
function isExpired(string memory date) public view returns (bool) {
|
||||
if (isAttributeEmpty(date)) {
|
||||
return false; // this is disregarded anyway in the next steps
|
||||
}
|
||||
uint256 expiryDate = formatter.dateToUnixTimestamp(date);
|
||||
|
||||
return block.timestamp > expiryDate;
|
||||
}
|
||||
|
||||
function getIssuingStateOf(
|
||||
uint256 _tokenId
|
||||
) public view returns (string memory) {
|
||||
return tokenAttributes[_tokenId].values[0];
|
||||
}
|
||||
|
||||
function getNameOf(uint256 _tokenId) public view returns (string memory) {
|
||||
return tokenAttributes[_tokenId].values[1];
|
||||
}
|
||||
|
||||
function getPassportNumberOf(
|
||||
uint256 _tokenId
|
||||
) public view returns (string memory) {
|
||||
return tokenAttributes[_tokenId].values[2];
|
||||
}
|
||||
|
||||
function getNationalityOf(
|
||||
uint256 _tokenId
|
||||
) public view returns (string memory) {
|
||||
return tokenAttributes[_tokenId].values[3];
|
||||
}
|
||||
|
||||
function getDateOfBirthOf(
|
||||
uint256 _tokenId
|
||||
) public view returns (string memory) {
|
||||
return tokenAttributes[_tokenId].values[4];
|
||||
}
|
||||
|
||||
function getGenderOf(uint256 _tokenId) public view returns (string memory) {
|
||||
return tokenAttributes[_tokenId].values[5];
|
||||
}
|
||||
|
||||
function getExpiryDateOf(
|
||||
uint256 _tokenId
|
||||
) public view returns (string memory) {
|
||||
return tokenAttributes[_tokenId].values[6];
|
||||
}
|
||||
|
||||
function getOlderThanOf(
|
||||
uint256 _tokenId
|
||||
) public view returns (string memory) {
|
||||
return tokenAttributes[_tokenId].values[7];
|
||||
}
|
||||
|
||||
// This is the function to check if the sbt is not expired or not
|
||||
function isSbtValid(
|
||||
uint256 _tokenId
|
||||
) public view returns (bool) {
|
||||
uint256 expirationDate = sbtExpiration[_tokenId];
|
||||
if (expirationDate < block.timestamp) {
|
||||
return true;
|
||||
}
|
||||
return false;
|
||||
}
|
||||
|
||||
function getCurrentTimestamp(
|
||||
uint256[6] memory dateNum
|
||||
) public view returns (uint256) {
|
||||
string memory date = "";
|
||||
for (uint i = 0; i < 6; i++) {
|
||||
date = string(
|
||||
abi.encodePacked(date, bytes1(uint8(48 + (dateNum[i] % 10))))
|
||||
);
|
||||
}
|
||||
uint256 currentTimestamp = formatter.dateToUnixTimestamp(date);
|
||||
return currentTimestamp;
|
||||
}
|
||||
|
||||
function isAttributeEmpty(
|
||||
string memory attribute
|
||||
) private pure returns (bool) {
|
||||
for (uint i = 0; i < bytes(attribute).length; i++) {
|
||||
if (bytes(attribute)[i] != 0) {
|
||||
return false;
|
||||
}
|
||||
}
|
||||
return true;
|
||||
}
|
||||
|
||||
function appendAttribute(
|
||||
bytes memory baseURI,
|
||||
string memory traitType,
|
||||
string memory value
|
||||
) private view returns (bytes memory) {
|
||||
if (!isAttributeEmpty(value)) {
|
||||
baseURI = abi.encodePacked(
|
||||
baseURI,
|
||||
'{"trait_type": "',
|
||||
traitType,
|
||||
'", "value": "',
|
||||
formatAttribute(traitType, value),
|
||||
'"},'
|
||||
);
|
||||
}
|
||||
return baseURI;
|
||||
}
|
||||
|
||||
function formatAttribute(
|
||||
string memory traitType,
|
||||
string memory value
|
||||
) private view returns (string memory) {
|
||||
if (
|
||||
isStringEqual(traitType, "Issuing State") ||
|
||||
isStringEqual(traitType, "Nationality")
|
||||
) {
|
||||
return formatter.formatCountryName(value);
|
||||
} else if (isStringEqual(traitType, "First Name")) {
|
||||
return formatter.formatName(value)[0];
|
||||
} else if (isStringEqual(traitType, "Last Name")) {
|
||||
return formatter.formatName(value)[1];
|
||||
} else if (
|
||||
isStringEqual(traitType, "Date of birth") ||
|
||||
isStringEqual(traitType, "Expiry date")
|
||||
) {
|
||||
return formatter.formatDate(value);
|
||||
} else if (isStringEqual(traitType, "Older Than")) {
|
||||
return formatter.formatAge(value);
|
||||
} else if (isStringEqual(traitType, "Expired")) {
|
||||
return isExpired(value) ? "Yes" : "No";
|
||||
} else {
|
||||
return value;
|
||||
}
|
||||
}
|
||||
|
||||
function isStringEqual(
|
||||
string memory a,
|
||||
string memory b
|
||||
) public pure returns (bool) {
|
||||
return keccak256(abi.encodePacked(a)) == keccak256(abi.encodePacked(b));
|
||||
}
|
||||
|
||||
function substring(
|
||||
bytes memory str,
|
||||
uint startIndex,
|
||||
uint endIndex
|
||||
) public pure returns (bytes memory) {
|
||||
bytes memory strBytes = bytes(str);
|
||||
bytes memory result = new bytes(endIndex - startIndex);
|
||||
for (uint i = startIndex; i < endIndex; i++) {
|
||||
result[i - startIndex] = strBytes[i];
|
||||
}
|
||||
return result;
|
||||
}
|
||||
|
||||
function tokenURI(
|
||||
uint256 _tokenId
|
||||
) public view virtual override returns (string memory) {
|
||||
require(
|
||||
_exists(_tokenId),
|
||||
"ERC721Metadata: URI query for nonexistent token"
|
||||
);
|
||||
Attributes memory attributes = tokenAttributes[_tokenId];
|
||||
|
||||
bytes memory baseURI = abi.encodePacked('{ "attributes": [');
|
||||
|
||||
baseURI = appendAttribute(
|
||||
baseURI,
|
||||
"Issuing State",
|
||||
attributes.values[0]
|
||||
);
|
||||
baseURI = appendAttribute(baseURI, "First Name", attributes.values[1]);
|
||||
baseURI = appendAttribute(baseURI, "Last Name", attributes.values[1]);
|
||||
baseURI = appendAttribute(
|
||||
baseURI,
|
||||
"Passport Number",
|
||||
attributes.values[2]
|
||||
);
|
||||
baseURI = appendAttribute(baseURI, "Nationality", attributes.values[3]);
|
||||
baseURI = appendAttribute(
|
||||
baseURI,
|
||||
"Date of birth",
|
||||
attributes.values[4]
|
||||
);
|
||||
baseURI = appendAttribute(baseURI, "Gender", attributes.values[5]);
|
||||
baseURI = appendAttribute(baseURI, "Expiry date", attributes.values[6]);
|
||||
baseURI = appendAttribute(baseURI, "Expired", attributes.values[6]);
|
||||
baseURI = appendAttribute(baseURI, "Older Than", attributes.values[7]);
|
||||
|
||||
// Remove the trailing comma if baseURI has one
|
||||
if (
|
||||
keccak256(abi.encodePacked(baseURI[baseURI.length - 1])) ==
|
||||
keccak256(abi.encodePacked(","))
|
||||
) {
|
||||
baseURI = substring(baseURI, 0, bytes(baseURI).length - 1);
|
||||
}
|
||||
|
||||
baseURI = abi.encodePacked(
|
||||
baseURI,
|
||||
'],"description": "OpenPassport guarantees possession of a valid passport.","external_url": "https://openpassport.app","image": "https://i.imgur.com/9kvetij.png","name": "OpenPassport #',
|
||||
_tokenId.toString(),
|
||||
'"}'
|
||||
);
|
||||
|
||||
return
|
||||
string(
|
||||
abi.encodePacked(
|
||||
"data:application/json;base64,",
|
||||
baseURI.encode()
|
||||
)
|
||||
);
|
||||
}
|
||||
}
|
||||
13
contracts/contracts/constants/constants.sol
Normal file
13
contracts/contracts/constants/constants.sol
Normal file
@@ -0,0 +1,13 @@
|
||||
uint256 constant PROVE_RSA_NULLIFIER_INDEX = 0;
|
||||
uint256 constant PROVE_RSA_REVEALED_DATA_PACKED_INDEX = 1;
|
||||
uint256 constant PROVE_RSA_OLDER_THAN_INDEX = 4;
|
||||
uint256 constant PROVE_RSA_PUBKEY_DISCLOSED_INDEX = 6;
|
||||
uint256 constant PROVE_RSA_FORBIDDEN_COUNTRIES_LIST_PACKED_DISCLOSED_INDEX = 38;
|
||||
uint256 constant PROVE_RSA_OFAC_RESULT_INDEX = 40;
|
||||
uint256 constant PROVE_RSA_COMMITMENT_INDEX = 41;
|
||||
uint256 constant PROVE_RSA_BLINDED_DSC_COMMITMENT_INDEX = 42;
|
||||
uint256 constant PROVE_RSA_CURRENT_DATE_INDEX = 43;
|
||||
uint256 constant PROVE_RSA_USER_IDENTIFIER_INDEX = 49;
|
||||
uint256 constant PROVE_RSA_SCOPE_INDEX = 50;
|
||||
|
||||
uint256 constant DSC_BLINDED_DSC_COMMITMENT_INDEX = 0;
|
||||
50
contracts/contracts/interfaces/IVerifiersManager.sol
Normal file
50
contracts/contracts/interfaces/IVerifiersManager.sol
Normal file
@@ -0,0 +1,50 @@
|
||||
//SPDX-License-Identifier: MIT
|
||||
pragma solidity ^0.8.18;
|
||||
|
||||
interface IVerifiersManager {
|
||||
|
||||
error ZERO_ADDRESS();
|
||||
|
||||
struct RSAProveCircuitProof {
|
||||
uint[2] a;
|
||||
uint[2][2] b;
|
||||
uint[2] c;
|
||||
uint[51] pubSignals;
|
||||
}
|
||||
|
||||
struct DscCircuitProof {
|
||||
uint[2] a;
|
||||
uint[2][2] b;
|
||||
uint[2] c;
|
||||
uint[1] pubSignals;
|
||||
}
|
||||
|
||||
function verifyWithProveVerifier(
|
||||
uint256 verifier_id,
|
||||
RSAProveCircuitProof memory proof
|
||||
) external view returns (bool);
|
||||
|
||||
function verifyWithDscVerifier(
|
||||
uint256 verifier_id,
|
||||
DscCircuitProof memory proof
|
||||
) external view returns (bool);
|
||||
|
||||
}
|
||||
|
||||
interface IProveVerifier {
|
||||
function verifyProof (
|
||||
uint[2] calldata _pA,
|
||||
uint[2][2] calldata _pB,
|
||||
uint[2] calldata _pC,
|
||||
uint[51] calldata _pubSignals
|
||||
) external view returns (bool);
|
||||
}
|
||||
|
||||
interface IDscVerifier {
|
||||
function verifyProof (
|
||||
uint[2] calldata _pA,
|
||||
uint[2][2] calldata _pB,
|
||||
uint[2] calldata _pC,
|
||||
uint[1] calldata _pubSignals
|
||||
) external view returns (bool);
|
||||
}
|
||||
65
contracts/contracts/verifiers/VerifiersManager.sol
Normal file
65
contracts/contracts/verifiers/VerifiersManager.sol
Normal file
@@ -0,0 +1,65 @@
|
||||
//SPDX-License-Identifier: MIT
|
||||
pragma solidity ^0.8.18;
|
||||
|
||||
import {IVerifiersManager, IProveVerifier, IDscVerifier} from "../interfaces/IVerifiersManager.sol";
|
||||
import {Ownable} from "@openzeppelin/contracts/access/Ownable.sol";
|
||||
|
||||
contract VerifiersManager is IVerifiersManager, Ownable {
|
||||
|
||||
enum VerificationType {
|
||||
Prove,
|
||||
Dsc
|
||||
}
|
||||
|
||||
mapping(uint256 => address) public prove_verifiers;
|
||||
mapping(uint256 => address) public dsc_verifiers;
|
||||
|
||||
constructor () {
|
||||
transferOwnership(msg.sender);
|
||||
}
|
||||
|
||||
function verifyWithProveVerifier(
|
||||
uint256 verifier_id,
|
||||
RSAProveCircuitProof memory proof
|
||||
) public view returns (bool) {
|
||||
bool result = IProveVerifier(prove_verifiers[verifier_id])
|
||||
.verifyProof(
|
||||
proof.a,
|
||||
proof.b,
|
||||
proof.c,
|
||||
proof.pubSignals
|
||||
);
|
||||
return result;
|
||||
}
|
||||
|
||||
function verifyWithDscVerifier(
|
||||
uint256 verifier_id,
|
||||
DscCircuitProof memory proof
|
||||
) public view returns (bool) {
|
||||
bool result = IDscVerifier(dsc_verifiers[verifier_id])
|
||||
.verifyProof(
|
||||
proof.a,
|
||||
proof.b,
|
||||
proof.c,
|
||||
proof.pubSignals
|
||||
);
|
||||
return result;
|
||||
}
|
||||
|
||||
function updateVerifier(
|
||||
VerificationType v_type,
|
||||
uint256 verifier_id,
|
||||
address verifier_address
|
||||
) external onlyOwner {
|
||||
if (verifier_address == address(0)) {
|
||||
revert ZERO_ADDRESS();
|
||||
}
|
||||
if (v_type == VerificationType.Prove) {
|
||||
prove_verifiers[verifier_id] = verifier_address;
|
||||
}
|
||||
if (v_type == VerificationType.Dsc) {
|
||||
dsc_verifiers[verifier_id] = verifier_address;
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
Reference in New Issue
Block a user