ENT-14284 - Confidential Identities

Author: mkitR3

Tokens/stockpaydividend/bridging-flows/src/main/kotlin/com/r3/corda/lib/tokens/bridging/flows/BridgeFungibleTokenFlow.kt

@@ -32,7 +32,7 @@ import net.corda.solana.sdk.instruction.Pubkey
 class BridgeFungibleTokenFlow(
     val holder: AbstractParty,
     val observers: List<Party> = emptyList(),
-    val token: StateAndRef<FungibleToken>, //TODO should be FungibleToken, TODO change to any TokenType would need amendments to UUID retrieval below
+    val token: StateAndRef<FungibleToken>,
     val bridgeAuthority: Party
 ) : FlowLogic<SignedTransaction>() {
 
@@ -70,7 +70,8 @@ class BridgeFungibleTokenFlow(
                 additionalCommand = additionalCommand,
                 destination = destination,
                 mint = mint,
-                mintAuthority = mintAuthority
+                mintAuthority = mintAuthority,
+                holder
             )
         )
     }
@@ -106,14 +107,14 @@ constructor(
     val additionalCommand: BridgingContract.BridgingCommand,
     val destination: Pubkey,
     val mint: Pubkey,
-    val mintAuthority: Pubkey
+    val mintAuthority: Pubkey,
+    val holder: AbstractParty
 ) : AbstractMoveTokensFlow() { //TODO move away from this abstract class, it's progress tracker mention only token move
 
     @Suspendable
     override fun addMove(transactionBuilder: TransactionBuilder) {
 
         val amount = token.state.data.amount
-        val holder = ourIdentity //TODO confidential identity
         val output = FungibleToken(amount, holder)
         addMoveTokens(transactionBuilder = transactionBuilder, inputs = listOf(token), outputs = listOf(output))
 

Tokens/stockpaydividend/bridging-flows/src/main/kotlin/com/r3/corda/lib/tokens/bridging/flows/BridgingAuthorityBootstrapService.kt

@@ -0,0 +1,71 @@
+package com.r3.corda.lib.tokens.bridging.flows
+
+import com.r3.corda.lib.tokens.contracts.states.FungibleToken
+import net.corda.core.contracts.StateAndRef
+import net.corda.core.identity.PartyAndCertificate
+import net.corda.core.node.AppServiceHub
+import net.corda.core.node.services.CordaService
+import net.corda.core.serialization.SingletonSerializeAsToken
+import java.util.*
+
+@CordaService
+class BridgingAuthorityBootstrapService(appServiceHub: AppServiceHub) : SingletonSerializeAsToken() {
+    val holdingIdentityPartyAndCertificate: PartyAndCertificate
+    val bridgeAuthorityParty = appServiceHub.ourIdentity()
+
+    init {
+        val cfg = appServiceHub.getAppContext().config
+        val holdingIdentityLabel = UUID.fromString(cfg.getString("holdingIdentityLabel"))
+        val holdingIdentityPublicKey = appServiceHub
+            .identityService
+            .publicKeysForExternalId(holdingIdentityLabel)
+            .singleOrNull()
+        holdingIdentityPartyAndCertificate = if (holdingIdentityPublicKey == null) {
+            // Generate a new key pair and self-signed certificate for the holding identity
+            appServiceHub.keyManagementService.freshKeyAndCert(
+                identity = requireNotNull(appServiceHub.identityService.certificateFromKey(bridgeAuthorityParty.owningKey)) {
+                    "Could not find certificate for key ${bridgeAuthorityParty.owningKey}"
+                },
+                revocationEnabled = false,
+                externalId = holdingIdentityLabel
+            )
+        } else {
+            // Reuse the existing key pair and certificate for the holding identity
+            checkNotNull(appServiceHub.identityService.certificateFromKey(holdingIdentityPublicKey)) {
+                "Could not find certificate for key $holdingIdentityPublicKey"
+            }
+        }
+
+        onStartup(appServiceHub)
+    }
+
+    private fun onStartup(appServiceHub: AppServiceHub) {
+        //Retrieve states from receiver
+        val receivedStates = appServiceHub.vaultService.queryBy(FungibleToken::class.java).states
+
+        callFlow(receivedStates, appServiceHub)
+        addVaultListener(appServiceHub)
+    }
+
+    private fun addVaultListener(appServiceHub: AppServiceHub) {
+        appServiceHub.vaultService.trackBy(FungibleToken::class.java).updates.subscribe {
+            val producedStockStates = it.produced
+            callFlow(producedStockStates, appServiceHub)
+        }
+    }
+
+    private fun callFlow(fungibleTokens: Collection<StateAndRef<FungibleToken>>, appServiceHub: AppServiceHub) {
+        fungibleTokens.forEach { token ->
+                appServiceHub.startFlow(
+                    BridgeFungibleTokenFlow(
+                        holdingIdentityPartyAndCertificate.party,
+                        emptyList(),
+                        token,
+                        bridgeAuthorityParty
+                    )
+                )
+            }
+    }
+
+    private fun AppServiceHub.ourIdentity() = myInfo.legalIdentities.first()
+}

Tokens/stockpaydividend/bridging-flows/src/main/kotlin/com/r3/corda/lib/tokens/bridging/flows/rpc/BridgeTokens.kt

@@ -10,10 +10,11 @@ import com.r3.corda.lib.tokens.contracts.states.FungibleToken
 import net.corda.core.contracts.StateAndRef
 import net.corda.core.utilities.ProgressTracker
 
+// This flow is only for tests. In real life the @BridgingAuthorityBootstrapService.kt would run the BridgeFungibleTokenFlow directly.
 @InitiatingFlow
 @StartableByRPC
 class BridgeToken(
-    val token: StateAndRef<FungibleToken>, //TODO change to a list?
+    val token: StateAndRef<FungibleToken>,
     val bridgeAuthority: Party
 ) : FlowLogic<String>() {
 
@@ -25,7 +26,7 @@ class BridgeToken(
         //Use built-in flow for move tokens to the recipient
         val stx = subFlow(
             BridgeFungibleTokenFlow(
-                ourIdentity, //TODO confidentialIdentity
+                ourIdentity,
                 emptyList(),
                 token,
                 bridgeAuthority

Tokens/stockpaydividend/workflows/src/test/kotlin/net/corda/samples/stockpaydividend/FlowTests.kt

@@ -126,7 +126,8 @@ class FlowTests {
         val baConfig = mapOf(
             "participants" to mapOf(COMPANY.name.toString() to tokenAccount.base58()),
             "mints" to mapOf(LINEAR_ID.toString() to tokenMint.base58()),
-            "mintAuthorities" to mapOf(LINEAR_ID.toString() to mintAuthority.account.base58())
+            "mintAuthorities" to mapOf(LINEAR_ID.toString() to mintAuthority.account.base58()),
+            "holdingIdentityLabel" to UUID.randomUUID().toString()
         )
         network = MockNetwork(
             MockNetworkParameters(