feat: add master password

package.json

@@ -27,6 +27,7 @@
     "build": "NODE_ENV=production yarn apply-version && polkadot-dev-build-ts && yarn build:zip && yarn build:rollup",
     "build:before": "yarn build:i18n",
     "build:clean": "yarn build && find packages/extension/build -name '*.map' -type f -delete",
+    "build:dev": "NODE_ENV=development polkadot-dev-build-ts",
     "build:i18n": "i18next-scanner --config i18next-scanner.config.cjs",
     "build:release": "polkadot-ci-ghact-build",
     "build:rollup": "polkadot-exec-rollup --config",
@@ -57,18 +58,18 @@
     "@mui/lab": "^5.0.0-alpha.85",
     "@mui/material": "^5.8.3",
     "@paraspell/sdk-pjs": "^11.8.6",
-    "@polkadot/api": "^16.4.6",
-    "@polkadot/api-augment": "^16.4.6",
-    "@polkadot/api-base": "^16.4.6",
-    "@polkadot/api-contract": "^16.4.6",
-    "@polkadot/api-derive": "^16.4.6",
-    "@polkadot/rpc-augment": "^16.4.6",
-    "@polkadot/rpc-core": "^16.4.6",
-    "@polkadot/rpc-provider": "^16.4.6",
-    "@polkadot/types": "^16.4.6",
-    "@polkadot/types-codec": "^16.4.6",
-    "@polkadot/types-known": "^16.4.6",
-    "@polkadot/types-support": "^16.4.6",
+    "@polkadot/api": "^16.4.8",
+    "@polkadot/api-augment": "^16.4.8",
+    "@polkadot/api-base": "^16.4.8",
+    "@polkadot/api-contract": "^16.4.8",
+    "@polkadot/api-derive": "^16.4.8",
+    "@polkadot/rpc-augment": "^16.4.8",
+    "@polkadot/rpc-core": "^16.4.8",
+    "@polkadot/rpc-provider": "^16.4.8",
+    "@polkadot/types": "^16.4.8",
+    "@polkadot/types-codec": "^16.4.8",
+    "@polkadot/types-known": "^16.4.8",
+    "@polkadot/types-support": "^16.4.8",
     "@polkadot/util": "^13.5.3",
     "@polkadot/util-crypto": "^13.5.3",
     "@polkagate/apps-config": "^1.1.1",
@@ -128,12 +129,12 @@
     "webpack-bundle-analyzer": "^4.9.0"
   },
   "resolutions": {
-    "@polkadot/api": "^16.4.6",
+    "@polkadot/api": "^16.4.8",
     "@polkadot/keyring": "^13.5.3",
     "@polkadot/networks": "^13.5.3",
     "@polkadot/react-identicon": "^3.15.2",
-    "@polkadot/types": "^16.4.6",
-    "@polkadot/types-augment": "^16.4.6",
+    "@polkadot/types": "^16.4.8",
+    "@polkadot/types-augment": "^16.4.8",
     "@polkadot/ui-keyring": "^3.15.2",
     "@polkadot/ui-settings": "^3.15.2",
     "@polkadot/util": "^13.5.3",

packages/extension-base/package.json

@@ -21,15 +21,15 @@
   "version": "0.47.5",
   "main": "index.js",
   "dependencies": {
-    "@polkadot/api": "^16.4.6",
+    "@polkadot/api": "^16.4.8",
     "@polkadot/extension-chains": "^0.47.5",
     "@polkadot/extension-dapp": "^0.47.5",
     "@polkadot/extension-inject": "^0.47.5",
     "@polkadot/keyring": "12.3.2",
     "@polkadot/networks": "^13.1.1",
     "@polkadot/phishing": "^0.22.8",
-    "@polkadot/rpc-provider": "^16.4.6",
-    "@polkadot/types": "^16.4.6",
+    "@polkadot/rpc-provider": "^16.4.8",
+    "@polkadot/types": "^16.4.8",
     "@polkadot/ui-keyring": "^3.6.6",
     "@polkadot/ui-settings": "^3.6.6",
     "@polkadot/util": "^13.1.1",

packages/extension-base/src/background/handlers/Extension.ts

@@ -5,9 +5,10 @@ import type { MetadataDef } from '@polkadot/extension-inject/types';
 import type { KeyringPair, KeyringPair$Json, KeyringPair$Meta } from '@polkadot/keyring/types';
 import type { SignerPayloadJSON, SignerPayloadRaw } from '@polkadot/types/types';
 import type { SubjectInfo } from '@polkadot/ui-keyring/observable/types';
+import type { HexString } from '@polkadot/util/types';
 import type { KeypairType } from '@polkadot/util-crypto/types';
 // added for plus to import RequestUpdateMeta
-import type { AccountJson, AllowedPath, ApplyAddedTime, AuthorizeRequest, AuthUrls, MessageTypes, MetadataRequest, RequestAccountBatchExport, RequestAccountChangePassword, RequestAccountCreateExternal, RequestAccountCreateHardware, RequestAccountCreateSuri, RequestAccountEdit, RequestAccountExport, RequestAccountForget, RequestAccountShow, RequestAccountTie, RequestAccountValidate, RequestAuthorizeApprove, RequestBatchRestore, RequestDeriveCreate, RequestDeriveValidate, RequestJsonRestore, RequestMetadataApprove, RequestMetadataReject, RequestSeedCreate, RequestSeedValidate, RequestSigningApprovePassword, RequestSigningApproveSignature, RequestSigningCancel, RequestSigningIsLocked, RequestTypes, RequestUpdateAuthorizedAccounts, RequestUpdateMeta, ResponseAccountExport, ResponseAccountsExport, ResponseAuthorizeList, ResponseDeriveValidate, ResponseJsonGetAccountInfo, ResponseSeedCreate, ResponseSeedValidate, ResponseSigningIsLocked, ResponseType, SigningRequest } from '../types';
+import type { AccountJson, AllowedPath, ApplyAddedTime, AuthorizeRequest, AuthUrls, MessageTypes, MetadataRequest, RequestAccountBatchExport, RequestAccountChangePassword, RequestAccountCreateExternal, RequestAccountCreateHardware, RequestAccountCreateSuri, RequestAccountEdit, RequestAccountExport, RequestAccountForget, RequestAccountShow, RequestAccountTie, RequestAccountValidate, RequestAuthorizeApprove, RequestBatchRestore, RequestDeriveCreate, RequestDeriveValidate, RequestJsonRestore, RequestMetadataApprove, RequestMetadataReject, RequestSeedCreate, RequestSeedValidate, RequestSigningApprovePassword, RequestSigningApproveSignature, RequestSigningCancel, RequestSigningIsLocked, RequestSigninSignature, RequestTypes, RequestUnlockAllAccounts, RequestUpdateAuthorizedAccounts, RequestUpdateMeta, ResponseAccountExport, ResponseAccountsExport, ResponseAuthorizeList, ResponseDeriveValidate, ResponseJsonGetAccountInfo, ResponseSeedCreate, ResponseSeedValidate, ResponseSigningIsLocked, ResponseType, SigningRequest } from '../types';
 import type State from './State';
 
 import { ALLOWED_PATH, PASSWORD_EXPIRY_MS, START_WITH_PATH } from '@polkadot/extension-base/defaults';
@@ -131,16 +132,35 @@ export default class Extension {
   }
 
   private lockExtension (): boolean {
+    // clear cache and lock all accounts
+    Object.entries(this.#cachedUnlocks).forEach(([address]) => {
+      const pair = keyring.getPair(address);
+
+      if (pair && !pair.isLocked) {
+        pair.lock();
+      }
+
+      this.#cachedUnlocks[address] = 0;
+    });
+
+    // apply to all open tabs
     const currentDomain = chrome.runtime.getURL('/');
 
     chrome.tabs.query({}, function (tabs) {
+      // eslint-disable-next-line @typescript-eslint/prefer-for-of
       for (let i = 0; i < tabs.length; i++) {
-        const tabParsedUrl = new URL(tabs[i].url!);
+        const { id, url } = tabs[i];
+
+        if (!url || id === undefined) {
+          continue;
+        }
+
+        const tabParsedUrl = new URL(url);
 
         const tabDomain = `${tabParsedUrl?.protocol}//${tabParsedUrl?.hostname}/`;
 
         if (tabDomain === currentDomain) {
-          chrome.tabs.reload(tabs[i].id!).catch(console.error);
+          chrome.tabs.reload(id).catch(console.error);
         }
       }
     });
@@ -197,7 +217,7 @@ export default class Extension {
 
     console.warn('NO TIE ANYMORE IN NEW DESIGN, genesisHash:', genesisHash);
 
-    keyring.saveAccountMeta(pair, { ...pair.meta, genesisHash: null }); //NO TIE ANYMORE IN NEW DESIGN
+    keyring.saveAccountMeta(pair, { ...pair.meta, genesisHash: null }); // NO TIE ANYMORE IN NEW DESIGN
 
     return true;
   }
@@ -384,6 +404,58 @@ export default class Extension {
     };
   }
 
+  private accountsUnlockAll ({ cacheTime, password }: RequestUnlockAllAccounts): boolean {
+    console.log('get message to unlock accounts ...');
+
+    if (!password) {
+      throw new Error('Password needed to unlock the account');
+    }
+
+    const accounts = keyring.getAccounts();
+
+    const localAccounts = accounts.filter(({ meta }) => !meta.isExternal);
+
+    console.log('localAccounts:', localAccounts);
+
+    const res = localAccounts.map(({ address }) => {
+      const pair = keyring.getPair(address);
+
+      if (!pair) {
+        throw new Error('Unable to find pair');
+      }
+
+      if (pair.isLocked) {
+        pair.decodePkcs8(password);
+      }
+
+      this.#cachedUnlocks[address] = Date.now() + cacheTime;
+
+      return true;
+    });
+
+    return res.every((success) => success);
+  }
+
+  private areLocksExpired (): boolean {
+    return Object.entries(this.#cachedUnlocks).every(([, time]) => time < Date.now());
+  }
+
+  private handleRegistry (payload: SignerPayloadJSON): void {
+    // Get the metadata for the genesisHash
+    const currentMetadata = this.metadataGet(payload.genesisHash);
+
+    // set the registry before calling the sign function
+    const signedExtensions = currentMetadata?.signedExtensions?.length
+      ? currentMetadata.signedExtensions
+      : registry.signedExtensions;
+
+    registry.setSignedExtensions(signedExtensions, currentMetadata?.userExtensions);
+
+    if (currentMetadata) {
+      registry.register(currentMetadata?.types);
+    }
+  }
+
   private signingApprovePassword ({ id, password, remainingTime, savePass }: RequestSigningApprovePassword): boolean {
     const queued = this.#state.getSignRequest(id);
 
@@ -417,16 +489,7 @@ export default class Extension {
     const { payload } = request;
 
     if (isJsonPayload(payload)) {
-      // Get the metadata for the genesisHash
-      const currentMetadata = this.#state.knownMetadata.find((meta: MetadataDef) =>
-        meta.genesisHash === payload.genesisHash);
-
-      // set the registry before calling the sign function
-      registry.setSignedExtensions(payload.signedExtensions, currentMetadata?.userExtensions);
-
-      if (currentMetadata) {
-        registry.register(currentMetadata?.types);
-      }
+      this.handleRegistry(payload);
     }
 
     const result = request.sign(registry, pair);
@@ -447,6 +510,27 @@ export default class Extension {
     return true;
   }
 
+  private getSignature ({ payload }: RequestSigninSignature): HexString | null {
+    const { address } = payload;
+
+    if (!payload?.address || !payload.genesisHash) {
+      throw new Error('Invalid payload: missing required fields.');
+    }
+
+    const pair = keyring.getPair(address);
+
+    this.refreshAccountPasswordCache(pair); // check if auto lock duration is expired
+
+    if (pair.isLocked) {
+      return null;
+    }
+
+    this.handleRegistry(payload);
+    const { signature } = registry.createType('ExtrinsicPayload', payload, { version: payload.version }).sign(pair);
+
+    return signature;
+  }
+
   private signingApproveSignature ({ id, signature, signedTransaction }: RequestSigningApproveSignature): boolean {
     const queued = this.#state.getSignRequest(id);
 
@@ -595,12 +679,23 @@ export default class Extension {
       case 'pri(accounts.create.suri)':
         return this.accountsCreateSuri(request as RequestAccountCreateSuri);
 
-      case 'pri(accounts.updateMeta)': // added for polkagate
+      // ----------------added for polkagate---------------------
+      case 'pri(accounts.updateMeta)':
         return this.accountsUpdateMeta(request as RequestUpdateMeta);
 
-      case 'pri(extension.lock)': // added for polkagate
+      case 'pri(extension.lock)':
         return this.lockExtension();
 
+      case 'pri(signing.getSignature)':
+        return this.getSignature(request as RequestSigninSignature);
+
+      case 'pri(accounts.unlockAll)':
+        return this.accountsUnlockAll(request as RequestUnlockAllAccounts);
+
+      case 'pri(accounts.locksExpired)':
+        return this.areLocksExpired();
+      // -------------------------------------
+
       case 'pri(accounts.changePassword)':
         return this.accountsChangePassword(request as RequestAccountChangePassword);
 

packages/extension-base/src/background/types.ts

@@ -102,10 +102,13 @@ export interface RequestSignatures {
   'pri(accounts.create.suri)': [RequestAccountCreateSuri, boolean];
   'pri(accounts.edit)': [RequestAccountEdit, boolean];
 
-  'pri(accounts.updateMeta)': [RequestUpdateMeta, boolean]; // added for polkagate
-  'pri(extension.lock)': [null, boolean]; // added for polkagate
-  'pri(authorize.ignore)': [string, void]; // added for polkagate
-  'pri(metadata.update)': [MetadataDef, boolean]; // added for polkagate
+  // added for polkagate
+  'pri(accounts.updateMeta)': [RequestUpdateMeta, boolean];
+  'pri(extension.lock)': [null, boolean];
+  'pri(authorize.ignore)': [string, void];
+  'pri(metadata.update)': [MetadataDef, boolean];
+  'pri(accounts.unlockAll)': [RequestUnlockAllAccounts, boolean];
+  'pri(accounts.locksExpired)': [null, boolean];
 
   'pri(accounts.export)': [RequestAccountExport, ResponseAccountExport];
   'pri(accounts.batchExport)': [RequestAccountBatchExport, ResponseAccountsExport]
@@ -115,6 +118,7 @@ export interface RequestSignatures {
   'pri(accounts.subscribe)': [RequestAccountSubscribe, boolean, AccountJson[]];
   'pri(accounts.validate)': [RequestAccountValidate, boolean];
   'pri(accounts.changePassword)': [RequestAccountChangePassword, boolean];
+  'pri(signing.getSignature)': [RequestSigninSignature, HexString | null];
   'pri(authorize.approve)': [RequestAuthorizeApprove, boolean];
   'pri(authorize.update)': [RequestUpdateAuthorizedAccounts, void];
   'pri(authorize.list)': [null, ResponseAuthorizeList];
@@ -306,6 +310,10 @@ export interface RequestSigningApprovePassword {
   remainingTime?: number;
 }
 
+export interface RequestSigninSignature {
+  payload: SignerPayloadJSON;
+}
+
 export interface RequestSigningApproveSignature {
   id: string;
   signature: HexString;
@@ -391,6 +399,10 @@ export interface ResponseSeedValidate {
   address: string;
   suri: string;
 }
+export interface RequestUnlockAllAccounts {
+  password: string;
+  cacheTime: number; // milisec
+}
 
 export interface ResponseAccountExport {
   exportedJson: KeyringPair$Json;

packages/extension-base/src/defaults.ts

@@ -16,7 +16,8 @@ const START_WITH_PATH = [
   '/send/',
   '/settingsfs/',
   '/stake/',
-  '/socialRecovery/'
+  '/socialRecovery/',
+  '/migratePasswords'
 ] as const;
 
 const ROOT_PATH = [

packages/extension-chains/src/bundle.ts

@@ -19,18 +19,22 @@ const definitions = new Map<string, MetadataDef>(
 
 const expanded = new Map<string, Chain>();
 
-export function metadataExpand(definition: MetadataDef, isPartial = false): Chain {
+export function metadataExpand (definition: MetadataDef, isPartial = false): Chain {
   const cached = expanded.get(definition.genesisHash);
 
   if (cached && cached.specVersion === definition.specVersion) {
     return cached;
   }
 
-  const { chain, genesisHash, icon, metaCalls, specVersion, ss58Format, tokenDecimals, tokenSymbol, types, userExtensions } = definition;
+  const { chain, genesisHash, icon, metaCalls, signedExtensions, specVersion, ss58Format, tokenDecimals, tokenSymbol, types, userExtensions } = definition;
   const registry = new TypeRegistry();
 
   if (!isPartial) {
     registry.register(types);
+
+    if (definition.knownTypes) {
+      registry.setKnownTypes(definition.knownTypes);
+    }
   }
 
   registry.setChainProperties(registry.createType('ChainProperties', {
@@ -42,7 +46,9 @@ export function metadataExpand(definition: MetadataDef, isPartial = false): Chai
   const hasMetadata = !!metaCalls && !isPartial;
 
   if (hasMetadata) {
-    registry.setMetadata(new Metadata(registry, base64Decode(metaCalls)), undefined, userExtensions);
+    const metadata = new Metadata(registry, base64Decode(metaCalls));
+
+    registry.setMetadata(metadata, signedExtensions, userExtensions || {});
   }
 
   const isUnknown = genesisHash === '0x';

packages/extension-inject/package.json

@@ -18,9 +18,9 @@
   "version": "0.47.5",
   "main": "index.js",
   "dependencies": {
-    "@polkadot/api": "^16.4.6",
-    "@polkadot/rpc-provider": "^16.4.6",
-    "@polkadot/types": "^16.4.6",
+    "@polkadot/api": "^16.4.8",
+    "@polkadot/rpc-provider": "^16.4.8",
+    "@polkadot/types": "^16.4.8",
     "@polkadot/util": "^13.1.1",
     "@polkadot/util-crypto": "^13.1.1",
     "@polkadot/x-global": "^13.1.1",

packages/extension-inject/src/types.ts

@@ -6,6 +6,7 @@ import type { ProviderInterface } from '@polkadot/rpc-provider/types';
 import type { ExtDef } from '@polkadot/types/extrinsic/signedExtensions/types';
 import type { HexString } from '@polkadot/util/types';
 import type { KeypairType } from '@polkadot/util-crypto/types';
+import type { RegisteredTypes } from '@polkadot/types/types';
 
 // eslint-disable-next-line no-undef
 type This = typeof globalThis;
@@ -68,6 +69,8 @@ export interface MetadataDef extends MetadataDefBase {
   tokenSymbol: string;
   types: Record<string, Record<string, string> | string>;
   metaCalls?: string;
+  knownTypes?: RegisteredTypes;
+  signedExtensions?: string[];
   userExtensions?: ExtDef;
 }
 

packages/extension-polkagate/src/class/endpointManager.ts

@@ -3,7 +3,7 @@
 
 import type { EndpointType } from '../util/types';
 
-import { NO_PASS_PERIOD as ENDPOINT_TIMEOUT } from '../util/constants';
+import { ENDPOINT_TIMEOUT } from '../util/constants';
 
 // Define types for saved endpoints and listener function
 type SavedEndpoints = Record<string, Record<string, EndpointType>>;