feat: add master password

package.json

@@ -27,6 +27,7 @@
     "build": "NODE_ENV=production yarn apply-version && polkadot-dev-build-ts && yarn build:zip && yarn build:rollup",
     "build:before": "yarn build:i18n",
     "build:clean": "yarn build && find packages/extension/build -name '*.map' -type f -delete",
+    "build:dev": "NODE_ENV=development polkadot-dev-build-ts",
     "build:i18n": "i18next-scanner --config i18next-scanner.config.cjs",
     "build:release": "polkadot-ci-ghact-build",
     "build:rollup": "polkadot-exec-rollup --config",
@@ -53,22 +54,23 @@
     "@dnd-kit/utilities": "^3.2.2",
     "@emotion/react": "^11.9.0",
     "@emotion/styled": "^11.8.1",
+    "@lottiefiles/dotlottie-react": "^0.17.5",
     "@mui/icons-material": "^5.15.18",
     "@mui/lab": "^5.0.0-alpha.85",
     "@mui/material": "^5.8.3",
     "@paraspell/sdk-pjs": "^11.8.6",
-    "@polkadot/api": "^16.4.6",
-    "@polkadot/api-augment": "^16.4.6",
-    "@polkadot/api-base": "^16.4.6",
-    "@polkadot/api-contract": "^16.4.6",
-    "@polkadot/api-derive": "^16.4.6",
-    "@polkadot/rpc-augment": "^16.4.6",
-    "@polkadot/rpc-core": "^16.4.6",
-    "@polkadot/rpc-provider": "^16.4.6",
-    "@polkadot/types": "^16.4.6",
-    "@polkadot/types-codec": "^16.4.6",
-    "@polkadot/types-known": "^16.4.6",
-    "@polkadot/types-support": "^16.4.6",
+    "@polkadot/api": "^16.4.8",
+    "@polkadot/api-augment": "^16.4.8",
+    "@polkadot/api-base": "^16.4.8",
+    "@polkadot/api-contract": "^16.4.8",
+    "@polkadot/api-derive": "^16.4.8",
+    "@polkadot/rpc-augment": "^16.4.8",
+    "@polkadot/rpc-core": "^16.4.8",
+    "@polkadot/rpc-provider": "^16.4.8",
+    "@polkadot/types": "^16.4.8",
+    "@polkadot/types-codec": "^16.4.8",
+    "@polkadot/types-known": "^16.4.8",
+    "@polkadot/types-support": "^16.4.8",
     "@polkadot/util": "^13.5.3",
     "@polkadot/util-crypto": "^13.5.3",
     "@polkagate/apps-config": "^1.1.1",
@@ -128,12 +130,12 @@
     "webpack-bundle-analyzer": "^4.9.0"
   },
   "resolutions": {
-    "@polkadot/api": "^16.4.6",
+    "@polkadot/api": "^16.4.8",
     "@polkadot/keyring": "^13.5.3",
     "@polkadot/networks": "^13.5.3",
     "@polkadot/react-identicon": "^3.15.2",
-    "@polkadot/types": "^16.4.6",
-    "@polkadot/types-augment": "^16.4.6",
+    "@polkadot/types": "^16.4.8",
+    "@polkadot/types-augment": "^16.4.8",
     "@polkadot/ui-keyring": "^3.15.2",
     "@polkadot/ui-settings": "^3.15.2",
     "@polkadot/util": "^13.5.3",

packages/extension-base/package.json

@@ -21,15 +21,15 @@
   "version": "0.47.5",
   "main": "index.js",
   "dependencies": {
-    "@polkadot/api": "^16.4.6",
+    "@polkadot/api": "^16.4.8",
     "@polkadot/extension-chains": "^0.47.5",
     "@polkadot/extension-dapp": "^0.47.5",
     "@polkadot/extension-inject": "^0.47.5",
     "@polkadot/keyring": "12.3.2",
     "@polkadot/networks": "^13.1.1",
     "@polkadot/phishing": "^0.22.8",
-    "@polkadot/rpc-provider": "^16.4.6",
-    "@polkadot/types": "^16.4.6",
+    "@polkadot/rpc-provider": "^16.4.8",
+    "@polkadot/types": "^16.4.8",
     "@polkadot/ui-keyring": "^3.6.6",
     "@polkadot/ui-settings": "^3.6.6",
     "@polkadot/util": "^13.1.1",

packages/extension-base/src/background/handlers/Extension.ts

@@ -5,9 +5,11 @@ import type { MetadataDef } from '@polkadot/extension-inject/types';
 import type { KeyringPair, KeyringPair$Json, KeyringPair$Meta } from '@polkadot/keyring/types';
 import type { SignerPayloadJSON, SignerPayloadRaw } from '@polkadot/types/types';
 import type { SubjectInfo } from '@polkadot/ui-keyring/observable/types';
+import type { KeyringAddress } from '@polkadot/ui-keyring/types';
+import type { HexString } from '@polkadot/util/types';
 import type { KeypairType } from '@polkadot/util-crypto/types';
 // added for plus to import RequestUpdateMeta
-import type { AccountJson, AllowedPath, ApplyAddedTime, AuthorizeRequest, AuthUrls, MessageTypes, MetadataRequest, RequestAccountBatchExport, RequestAccountChangePassword, RequestAccountCreateExternal, RequestAccountCreateHardware, RequestAccountCreateSuri, RequestAccountEdit, RequestAccountExport, RequestAccountForget, RequestAccountShow, RequestAccountTie, RequestAccountValidate, RequestAuthorizeApprove, RequestBatchRestore, RequestDeriveCreate, RequestDeriveValidate, RequestJsonRestore, RequestMetadataApprove, RequestMetadataReject, RequestSeedCreate, RequestSeedValidate, RequestSigningApprovePassword, RequestSigningApproveSignature, RequestSigningCancel, RequestSigningIsLocked, RequestTypes, RequestUpdateAuthorizedAccounts, RequestUpdateMeta, ResponseAccountExport, ResponseAccountsExport, ResponseAuthorizeList, ResponseDeriveValidate, ResponseJsonGetAccountInfo, ResponseSeedCreate, ResponseSeedValidate, ResponseSigningIsLocked, ResponseType, SigningRequest } from '../types';
+import type { AccountJson, AllowedPath, ApplyAddedTime, AuthorizeRequest, AuthUrls, MessageTypes, MetadataRequest, RequestAccountBatchExport, RequestAccountChangePassword, RequestAccountChangePasswordAll, RequestAccountCreateExternal, RequestAccountCreateHardware, RequestAccountCreateSuri, RequestAccountEdit, RequestAccountExport, RequestAccountForget, RequestAccountShow, RequestAccountTie, RequestAccountValidate, RequestAuthorizeApprove, RequestBatchRestore, RequestDeriveCreate, RequestDeriveValidate, RequestJsonRestore, RequestMetadataApprove, RequestMetadataReject, RequestSeedCreate, RequestSeedValidate, RequestSigningApprovePassword, RequestSigningApproveSignature, RequestSigningCancel, RequestSigningIsLocked, RequestSigningSignature, RequestTypes, RequestUnlockAllAccounts, RequestUpdateAuthorizedAccounts, RequestUpdateMeta, ResponseAccountExport, ResponseAccountsExport, ResponseAuthorizeList, ResponseDeriveValidate, ResponseJsonGetAccountInfo, ResponseSeedCreate, ResponseSeedValidate, ResponseSigningIsLocked, ResponseType, SigningRequest } from '../types';
 import type State from './State';
 
 import { ALLOWED_PATH, PASSWORD_EXPIRY_MS, START_WITH_PATH } from '@polkadot/extension-base/defaults';
@@ -87,6 +89,16 @@ export default class Extension {
     return true;
   }
 
+  private accountsChangePasswordAll ({ newPass, oldPass }: RequestAccountChangePasswordAll): boolean {
+    const accountsLocal = this.localAccounts();
+
+    const res = accountsLocal.map(({ address }) => {
+      return this.accountsChangePassword({ address, newPass, oldPass });
+    });
+
+    return res.every(Boolean);
+  }
+
   private accountsChangePassword ({ address, newPass, oldPass }: RequestAccountChangePassword): boolean {
     const pair = keyring.getPair(address);
 
@@ -131,16 +143,35 @@ export default class Extension {
   }
 
   private lockExtension (): boolean {
+    // clear cache and lock all accounts
+    Object.entries(this.#cachedUnlocks).forEach(([address]) => {
+      const pair = keyring.getPair(address);
+
+      if (pair && !pair.isLocked) {
+        pair.lock();
+      }
+
+      this.#cachedUnlocks[address] = 0;
+    });
+
+    // apply to all open tabs
     const currentDomain = chrome.runtime.getURL('/');
 
     chrome.tabs.query({}, function (tabs) {
+      // eslint-disable-next-line @typescript-eslint/prefer-for-of
       for (let i = 0; i < tabs.length; i++) {
-        const tabParsedUrl = new URL(tabs[i].url!);
+        const { id, url } = tabs[i];
+
+        if (!url || id === undefined) {
+          continue;
+        }
+
+        const tabParsedUrl = new URL(url);
 
         const tabDomain = `${tabParsedUrl?.protocol}//${tabParsedUrl?.hostname}/`;
 
         if (tabDomain === currentDomain) {
-          chrome.tabs.reload(tabs[i].id!).catch(console.error);
+          withErrorLog(() => chrome.tabs.reload(id));
         }
       }
     });
@@ -159,6 +190,10 @@ export default class Extension {
   }
 
   private accountsForget ({ address }: RequestAccountForget): boolean {
+    if (this.#cachedUnlocks[address]) {
+      delete this.#cachedUnlocks[address];
+    }
+
     keyring.forgetAccount(address);
 
     return true;
@@ -197,7 +232,7 @@ export default class Extension {
 
     console.warn('NO TIE ANYMORE IN NEW DESIGN, genesisHash:', genesisHash);
 
-    keyring.saveAccountMeta(pair, { ...pair.meta, genesisHash: null }); //NO TIE ANYMORE IN NEW DESIGN
+    keyring.saveAccountMeta(pair, { ...pair.meta, genesisHash: null }); // NO TIE ANYMORE IN NEW DESIGN
 
     return true;
   }
@@ -384,6 +419,73 @@ export default class Extension {
     };
   }
 
+  private localAccounts (): KeyringAddress[] {
+    const accounts = keyring.getAccounts();
+
+    return accounts.filter(({ meta }) => !meta.isExternal);
+  }
+
+  private accountsUnlockAll ({ cacheTime, password }: RequestUnlockAllAccounts): boolean {
+    if (!password) {
+      throw new Error('Password needed to unlock the account');
+    }
+
+    try {
+      const accountsLocal = this.localAccounts();
+      const res = accountsLocal.map(({ address }) => {
+        const pair = keyring.getPair(address);
+
+        if (!pair) {
+          throw new Error('Unable to find pair');
+        }
+
+        if (!pair.isLocked) {
+          pair.lock();
+        }
+
+        if (pair.isLocked) {
+          pair.decodePkcs8(password);
+        }
+
+        this.#cachedUnlocks[address] = Date.now() + cacheTime;
+
+        return true;
+      });
+
+      return res.every((success) => success);
+    } catch (error) {
+      console.error('accountsUnlockAll failed:', error);
+
+      return false; // return false if any decode fails
+    }
+  }
+
+  private areLocksExpired (): boolean {
+    const accountsLocal = this.localAccounts();
+
+    if (accountsLocal.length === 0) {
+      return false; // if all accounts are external, then no lock expiration from me!
+    }
+
+    return Object.entries(this.#cachedUnlocks).every(([, time]) => time < Date.now());
+  }
+
+  private handleRegistry (payload: SignerPayloadJSON): void {
+    // Get the metadata for the genesisHash
+    const currentMetadata = this.metadataGet(payload.genesisHash);
+
+    // set the registry before calling the sign function
+    const signedExtensions = currentMetadata?.signedExtensions?.length
+      ? currentMetadata.signedExtensions
+      : registry.signedExtensions;
+
+    registry.setSignedExtensions(signedExtensions, currentMetadata?.userExtensions);
+
+    if (currentMetadata) {
+      registry.register(currentMetadata?.types);
+    }
+  }
+
   private signingApprovePassword ({ id, password, remainingTime, savePass }: RequestSigningApprovePassword): boolean {
     const queued = this.#state.getSignRequest(id);
 
@@ -417,16 +519,7 @@ export default class Extension {
     const { payload } = request;
 
     if (isJsonPayload(payload)) {
-      // Get the metadata for the genesisHash
-      const currentMetadata = this.#state.knownMetadata.find((meta: MetadataDef) =>
-        meta.genesisHash === payload.genesisHash);
-
-      // set the registry before calling the sign function
-      registry.setSignedExtensions(payload.signedExtensions, currentMetadata?.userExtensions);
-
-      if (currentMetadata) {
-        registry.register(currentMetadata?.types);
-      }
+      this.handleRegistry(payload);
     }
 
     const result = request.sign(registry, pair);
@@ -447,6 +540,27 @@ export default class Extension {
     return true;
   }
 
+  private getSignature ({ payload }: RequestSigningSignature): HexString | null {
+    if (!payload?.address || !payload.genesisHash) {
+      throw new Error('Invalid payload: missing required fields.');
+    }
+
+    const { address } = payload;
+
+    const pair = keyring.getPair(address);
+
+    this.refreshAccountPasswordCache(pair); // check if auto lock duration is expired
+
+    if (pair.isLocked) {
+      return null;
+    }
+
+    this.handleRegistry(payload);
+    const { signature } = registry.createType('ExtrinsicPayload', payload, { version: payload.version }).sign(pair);
+
+    return signature;
+  }
+
   private signingApproveSignature ({ id, signature, signedTransaction }: RequestSigningApproveSignature): boolean {
     const queued = this.#state.getSignRequest(id);
 
@@ -595,12 +709,26 @@ export default class Extension {
       case 'pri(accounts.create.suri)':
         return this.accountsCreateSuri(request as RequestAccountCreateSuri);
 
-      case 'pri(accounts.updateMeta)': // added for polkagate
+      // ----------------added for polkagate---------------------
+      case 'pri(accounts.updateMeta)':
         return this.accountsUpdateMeta(request as RequestUpdateMeta);
 
-      case 'pri(extension.lock)': // added for polkagate
+      case 'pri(extension.lock)':
         return this.lockExtension();
 
+      case 'pri(signing.getSignature)':
+        return this.getSignature(request as RequestSigningSignature);
+
+      case 'pri(accounts.unlockAll)':
+        return this.accountsUnlockAll(request as RequestUnlockAllAccounts);
+
+      case 'pri(accounts.locksExpired)':
+        return this.areLocksExpired();
+
+      case 'pri(accounts.changePasswordAll)':
+        return this.accountsChangePasswordAll(request as RequestAccountChangePasswordAll);
+      // -------------------------------------
+
       case 'pri(accounts.changePassword)':
         return this.accountsChangePassword(request as RequestAccountChangePassword);
 

packages/extension-base/src/background/types.ts

@@ -102,10 +102,13 @@ export interface RequestSignatures {
   'pri(accounts.create.suri)': [RequestAccountCreateSuri, boolean];
   'pri(accounts.edit)': [RequestAccountEdit, boolean];
 
-  'pri(accounts.updateMeta)': [RequestUpdateMeta, boolean]; // added for polkagate
-  'pri(extension.lock)': [null, boolean]; // added for polkagate
-  'pri(authorize.ignore)': [string, void]; // added for polkagate
-  'pri(metadata.update)': [MetadataDef, boolean]; // added for polkagate
+  // added for polkagate
+  'pri(accounts.updateMeta)': [RequestUpdateMeta, boolean];
+  'pri(extension.lock)': [null, boolean];
+  'pri(authorize.ignore)': [string, void];
+  'pri(metadata.update)': [MetadataDef, boolean];
+  'pri(accounts.unlockAll)': [RequestUnlockAllAccounts, boolean];
+  'pri(accounts.locksExpired)': [null, boolean];
 
   'pri(accounts.export)': [RequestAccountExport, ResponseAccountExport];
   'pri(accounts.batchExport)': [RequestAccountBatchExport, ResponseAccountsExport]
@@ -115,6 +118,8 @@ export interface RequestSignatures {
   'pri(accounts.subscribe)': [RequestAccountSubscribe, boolean, AccountJson[]];
   'pri(accounts.validate)': [RequestAccountValidate, boolean];
   'pri(accounts.changePassword)': [RequestAccountChangePassword, boolean];
+  'pri(accounts.changePasswordAll)': [RequestAccountChangePasswordAll, boolean];
+  'pri(signing.getSignature)': [RequestSigningSignature, HexString | null];
   'pri(authorize.approve)': [RequestAuthorizeApprove, boolean];
   'pri(authorize.update)': [RequestUpdateAuthorizedAccounts, void];
   'pri(authorize.list)': [null, ResponseAuthorizeList];
@@ -228,6 +233,11 @@ export interface RequestAccountChangePassword {
   newPass: string;
 }
 
+export interface RequestAccountChangePasswordAll {
+  oldPass: string;
+  newPass: string;
+}
+
 export interface RequestAccountEdit {
   address: string;
   genesisHash?: HexString | null;
@@ -306,6 +316,10 @@ export interface RequestSigningApprovePassword {
   remainingTime?: number;
 }
 
+export interface RequestSigningSignature {
+  payload: SignerPayloadJSON;
+}
+
 export interface RequestSigningApproveSignature {
   id: string;
   signature: HexString;
@@ -343,6 +357,12 @@ export interface RequestUpdateMeta {
   address: string;
   meta: string;
 }
+
+export interface RequestUnlockAllAccounts {
+  password: string;
+  cacheTime: number; // milliseconds
+}
+
 // Responses
 
 export type ResponseTypes = {

packages/extension-base/src/defaults.ts

@@ -8,9 +8,10 @@ const START_WITH_PATH = [
   '/accountfs/',
   '/derivefs/',
   '/fullscreen-stake/',
-  '/import/',
   '/governance/',
+  '/import/',
   '/manageIdentity/',
+  '/migratePasswords',
   '/nft/',
   '/proxyManagement/',
   '/send/',