feat: ✨ bake macaroons

pages/tools.tsx

@@ -1,6 +1,7 @@
 import React from 'react';
 import { GridWrapper } from 'src/components/gridWrapper/GridWrapper';
 import { withApollo } from 'config/client';
+import { Bakery } from 'src/views/tools/bakery/Bakery';
 import { BackupsView } from '../src/views/tools/backups/Backups';
 import { MessagesView } from '../src/views/tools/messages/Messages';
 import { WalletVersion } from '../src/views/tools/WalletVersion';
@@ -9,6 +10,7 @@ const ToolsView = () => (
   <>
     <BackupsView />
     <MessagesView />
+    <Bakery />
     <WalletVersion />
   </>
 );

server/schema/index.ts

@@ -36,6 +36,7 @@ import { healthTypes } from './health/types';
 import { githubResolvers } from './github/resolvers';
 import { routeTypes } from './route/types';
 import { generalResolvers } from './resolvers';
+import { macaroonResolvers } from './macaroon/resolvers';
 
 const typeDefs = [
   generalTypes,
@@ -78,7 +79,8 @@ const resolvers = merge(
   walletResolvers,
   transactionResolvers,
   healthResolvers,
-  githubResolvers
+  githubResolvers,
+  macaroonResolvers
 );
 
 export default makeExecutableSchema({ typeDefs, resolvers });

server/schema/macaroon/resolvers.ts

@@ -0,0 +1,59 @@
+import { ContextType } from 'server/types/apiTypes';
+import { requestLimiter } from 'server/helpers/rateLimiter';
+import { getLnd } from 'server/helpers/helpers';
+import { to } from 'server/helpers/async';
+import { grantAccess } from 'ln-service';
+import { AuthType } from 'src/context/AccountContext';
+import { logger } from 'server/helpers/logger';
+
+export type PermissionsType = {
+  is_ok_to_adjust_peers: boolean;
+  is_ok_to_create_chain_addresses: boolean;
+  is_ok_to_create_invoices: boolean;
+  is_ok_to_create_macaroons: boolean;
+  is_ok_to_derive_keys: boolean;
+  is_ok_to_get_chain_transactions: boolean;
+  is_ok_to_get_invoices: boolean;
+  is_ok_to_get_wallet_info: boolean;
+  is_ok_to_get_payments: boolean;
+  is_ok_to_get_peers: boolean;
+  is_ok_to_pay: boolean;
+  is_ok_to_send_to_chain_addresses: boolean;
+  is_ok_to_sign_bytes: boolean;
+  is_ok_to_sign_messages: boolean;
+  is_ok_to_stop_daemon: boolean;
+  is_ok_to_verify_bytes_signatures: boolean;
+  is_ok_to_verify_messages: boolean;
+};
+
+type ParamsType = {
+  auth: AuthType;
+  permissions: PermissionsType;
+};
+
+export const macaroonResolvers = {
+  Mutation: {
+    createMacaroon: async (
+      _: undefined,
+      params: ParamsType,
+      context: ContextType
+    ) => {
+      await requestLimiter(context.ip, 'createMacaroon');
+
+      const { auth, permissions } = params;
+
+      const lnd = getLnd(auth, context);
+
+      const { macaroon, permissions: permissionList } = await to(
+        grantAccess({ lnd, ...permissions })
+      );
+
+      logger.debug(
+        'Macaroon created with the following permissions: %o',
+        permissionList.join(', ')
+      );
+
+      return macaroon;
+    },
+  },
+};

server/schema/types.ts

@@ -9,6 +9,26 @@ export const generalTypes = gql`
     cert: String
   }
 
+  input permissionsType {
+    is_ok_to_adjust_peers: Boolean
+    is_ok_to_create_chain_addresses: Boolean
+    is_ok_to_create_invoices: Boolean
+    is_ok_to_create_macaroons: Boolean
+    is_ok_to_derive_keys: Boolean
+    is_ok_to_get_chain_transactions: Boolean
+    is_ok_to_get_invoices: Boolean
+    is_ok_to_get_wallet_info: Boolean
+    is_ok_to_get_payments: Boolean
+    is_ok_to_get_peers: Boolean
+    is_ok_to_pay: Boolean
+    is_ok_to_send_to_chain_addresses: Boolean
+    is_ok_to_sign_bytes: Boolean
+    is_ok_to_sign_messages: Boolean
+    is_ok_to_stop_daemon: Boolean
+    is_ok_to_verify_bytes_signatures: Boolean
+    is_ok_to_verify_messages: Boolean
+  }
+
   scalar Date
   scalar Time
   scalar DateTime
@@ -134,5 +154,6 @@ export const mutationTypes = gql`
       maxFee: Int
     ): Int
     logout(type: String!): Boolean
+    createMacaroon(auth: authType!, permissions: permissionsType!): String
   }
 `;

src/components/generic/helpers.tsx

@@ -17,7 +17,7 @@ import {
 } from './Styled';
 import { StatusDot, DetailLine } from './CardGeneric';
 
-const shorten = (text: string): string => {
+export const shorten = (text: string): string => {
   const amount = 6;
   const beginning = text.slice(0, amount);
   const end = text.slice(text.length - amount);

src/graphql/mutations/createMacaroon.ts

@@ -0,0 +1,7 @@
+import gql from 'graphql-tag';
+
+export const CREATE_MACAROON = gql`
+  mutation CreateMacaroon($auth: authType!, $permissions: permissionsType!) {
+    createMacaroon(auth: $auth, permissions: $permissions)
+  }
+`;

src/graphql/types.ts

@@ -22,6 +22,26 @@ export type AuthType = {
   cert?: Maybe<Scalars['String']>;
 };
 
+export type PermissionsType = {
+  is_ok_to_adjust_peers?: Maybe<Scalars['Boolean']>;
+  is_ok_to_create_chain_addresses?: Maybe<Scalars['Boolean']>;
+  is_ok_to_create_invoices?: Maybe<Scalars['Boolean']>;
+  is_ok_to_create_macaroons?: Maybe<Scalars['Boolean']>;
+  is_ok_to_derive_keys?: Maybe<Scalars['Boolean']>;
+  is_ok_to_get_chain_transactions?: Maybe<Scalars['Boolean']>;
+  is_ok_to_get_invoices?: Maybe<Scalars['Boolean']>;
+  is_ok_to_get_wallet_info?: Maybe<Scalars['Boolean']>;
+  is_ok_to_get_payments?: Maybe<Scalars['Boolean']>;
+  is_ok_to_get_peers?: Maybe<Scalars['Boolean']>;
+  is_ok_to_pay?: Maybe<Scalars['Boolean']>;
+  is_ok_to_send_to_chain_addresses?: Maybe<Scalars['Boolean']>;
+  is_ok_to_sign_bytes?: Maybe<Scalars['Boolean']>;
+  is_ok_to_sign_messages?: Maybe<Scalars['Boolean']>;
+  is_ok_to_stop_daemon?: Maybe<Scalars['Boolean']>;
+  is_ok_to_verify_bytes_signatures?: Maybe<Scalars['Boolean']>;
+  is_ok_to_verify_messages?: Maybe<Scalars['Boolean']>;
+};
+
 export type Query = {
   __typename?: 'Query';
   getVolumeHealth?: Maybe<ChannelsHealth>;
@@ -262,6 +282,7 @@ export type Mutation = {
   removePeer?: Maybe<Scalars['Boolean']>;
   sendMessage?: Maybe<Scalars['Int']>;
   logout?: Maybe<Scalars['Boolean']>;
+  createMacaroon?: Maybe<Scalars['String']>;
 };
 
 export type MutationCloseChannelArgs = {
@@ -349,6 +370,11 @@ export type MutationLogoutArgs = {
   type: Scalars['String'];
 };
 
+export type MutationCreateMacaroonArgs = {
+  auth: AuthType;
+  permissions: PermissionsType;
+};
+
 export type NodeType = {
   __typename?: 'nodeType';
   alias: Scalars['String'];