jlerxky / cloud_kms

kms

编译docker镜像

docker build -t citacloudcache/kms .

使用方法

$ kms -h
kms 0.1.0
Rivtower Technologies <[email protected]>

Usage: kms <COMMAND>

Commands:
  run   run this service
  help  Print this message or the help of the given subcommand(s)

Options:
  -h, --help     Print help
  -V, --version  Print version

crypto-run

运行crypto服务。

$ crypto run -h
run this service

Usage: kms run [OPTIONS]

Options:
  -c, --config <CONFIG_PATH>  Chain config path [default: config.toml]
  -h, --help                  Print help

参数：

1. 微服务配置文件。

   参见示例config/config.toml。

   其中[kms]段为微服务的配置：

   • port http port
   • master_key master key

   其中[kms.log_config]段为微服务日志的配置：

   • max_level 日志等级
   • filter 日志过滤配置
   • service_name 服务名称，用作日志文件名与日志采集的服务名称
   • rolling_file_path 日志文件路径
   • agent_endpoint jaeger 采集端地址

$ crypto run -c config/config.toml
2023-09-01T16:45:46.499179+08:00  INFO kms: kms listening on 127.0.0.1:3000

服务接口

/api/v1/keys

$ curl --request POST \
  --url http://127.0.0.1:3000/api/v1/keys \
  --header 'Content-Type: application/json' \
  --data '{
    "user_code": "$user_code",
    "crypto_type": "Secp256k1"
}'

返回：

{
    "code": 200,
    "data": {
        "address": "0x3ae29bc9d878bbc0d83b831a59b330f0154a596c",
        "crypto_type": "Secp256k1",
        "public_key": "028DC3BB1749AC3E1B51B9398E85FF7A9F77DD89A63A692ED4B053644D4F8AB5BC",
        "user_code": "$user_code"
    },
    "message": "OK"
}

/api/v1/keys/addr

$ curl --request POST \
  --url http://127.0.0.1:3000/api/v1/keys/addr \
  --header 'Content-Type: application/json' \
  --data '{
    "address": "6F142508B4EEA641E33CB2A0161221105086A84584C74245CA463A49EFFEA30B",
    "crypto_type": "Secp256k1"
}'

返回：

{
    "code": 200,
    "data": {
        "address": "0xad52a9f149b1b87eb5ca4268842d463696a7f459",
        "crypto_type": "Secp256k1",
        "public_key": "02C164157C14E4B2BD63A34A0B9C83300D8E1B9A11E6D2E32C4CEC2FFE5DFEEAD2",
        "user_code": ""
    },
    "message": "OK"
}

/api/v1/keys/sign

$ curl --request POST \
  --url http://127.0.0.1:3000/api/v1/keys/sign \
  --header 'Content-Type: application/json' \
  --data '{
    "user_code": "$user_code",
    "crypto_type": "Secp256k1",
    "message": "$message"
}'

返回：

{
    "code": 200,
    "data": {
        "signature": "2da072c3b8f26c5dcf32a352cf538cb15b4926472b93e5fd42a90640b63cca60aa95d48d35876aa49386fff6ef181dcc0d42c713e1de56eb5ffef5d06d6c216bca2ff3086c5f7a2c80f56fa58f6248c3e17dc8c2b34f1b411e06125649a458ecc5d864c724681fa1758dbb131f67966dd3bd4d399a02ad0844130f15839e0a77"
    },
    "message": "OK"
}

/api/v1/keys/verify

$ curl --request POST \
  --url http://127.0.0.1:3000/api/v1/keys/verify \
  --header 'Content-Type: application/json' \
  --data '{
    "user_code": "$user_code",
    "crypto_type": "Secp256k1",
    "message": "$message",
    "signature": "2da072c3b8f26c5dcf32a352cf538cb15b4926472b93e5fd42a90640b63cca60aa95d48d35876aa49386fff6ef181dcc0d42c713e1de56eb5ffef5d06d6c216bca2ff3086c5f7a2c80f56fa58f6248c3e17dc8c2b34f1b411e06125649a458ecc5d864c724681fa1758dbb131f67966dd3bd4d399a02ad0844130f15839e0a77"
}'

返回：

{
    "code": 200,
    "data": true,
    "message": "OK"
}