@smontero/hashed-confidential-docs

Hashed Confidential Docs Client API

Enables the usage of the Hashed Confidential docs services by client applications.

To install the hashed private client api run the following command:

npm i --save @smontero/hashed-confidential-docs

Access to most of the functionality is done through the HashedConfidentailDocs object which enables its configuration and provides access to the different API objects:

import { HashedConfidentialDocs } from '@smontero/hashed-confidential-docs'

A new instance of the HashedConfidentialDocs class has to be created passing in the
ipfs url, ipfs auth header, polkadot service class instance and a faucet instance:

``
const hcd = new HashedConfidentialDocs({
ipfsURL: 'https://ipfs.infura.io:5001',
ipfsAuthHeader: Basic ${Buffer.from(${process.env.IPFS_PROJECT_ID}:${process.env.IPFS_PROJECT_SECRET}).toString('base64')},
polkadot,
faucet
})
`

Then the user has to be logged in to hashed confidential docs, to login the user a VaultAuthProvider is required, the VaultAuthProvider used depends on how the user is login in to the system ex. username/password, google sign in or a native wallet, the current auth channels are:

- PasswordVaultAuthProvider: for a user login in using username/password
- GoogleVaultAuthProvider: for a user login in google sign in

The creation and initialization of a vaultAuthProvider is done through creation methods which are exported from this package while the classes themselves are not.

- createPasswordVaultAuthProvider
`
const vaultAuthProvider = await createPasswordVaultAuthProvider({
authName, // the name to identify this auth channel
jwt, // the JSON Web Token generated by the authentication channel
faucetServerUrl, //the url for the hashed faucet server
password
})
`
- createGoogleVaultAuthProvider
`
const vaultAuthProvider = await createGoogleVaultAuthProvider({
authName, // the name to identify this auth channel
jwt, // the JSON Web Token generated by the authentication channel
faucetServerUrl, //the url for the hashed faucet server
googleDrive //instance of the google drive service class
})
`

During the VaultAuthProvider creation, the jwt token is verified, after the creation of the VaultAuthProvider the decoded can be accessed as follows:

vaultAuthProvider.decodedJWT

await hcd.login(vaultAuthProvider)

Its important to note that the polkadot service class instance passed in to the hashed confidential docs will be configured with a VaultWallet when the user is logged in, that will enable this instance to be used to call extrinsics and sign on behalf of the user.

Once logged in the services provided by the OwnedData,SharedData and Group objects can be accessed.

OwnedData services

* add: Store a payload(object or File) in the hashed private service

`
const ownedData = await hcd.ownedData().add({
name: 'name1',
description: 'desc1',
payload: {
prop1: 1,
prop2: 'str1'
}
})
`


* viewByCID: View a stored payload by owned data cid, returns the deciphered payload(object or File)

`
const ownedData = await hcd.ownedData().viewByCID(cid)
`

SharedData services

* share: Share the specified existing owned data record with another user

`
let sharedData = await hp.sharedData().share({
toUserAddress: '5FSuxe2q7qCYKie8yqmM56U4ovD1YtBb3DoPzGKjwZ98vxua',
name: 'name1',
description: 'desc1',
payload: {
prop1: 1,
prop2: 'str1'
}
})
`

* viewByCID: View a stored payload by shared data cid, returns the deciphered payload(object or File)

`
const ownedData = await hcd.sharedData().viewByCID(cid)
`

Group services

* createGroup: Creates a new group with the logged in user as the owner

`
const group = await hcd.group().createGroup('test1')
`

* addGroupMember: Adds a member to the specified group, only owners and admins are able to add members

`
await hcd.group().addGroupMember({
groupAddress: group.group,
memberAddress,
role: GroupRole.MEMBER
})
`


Export Vault

* exportVault: Exports vault secret data
* BrowserDownloadExporter Exports payload as a file download in the browser

`
const exporter = BrowserDownloadExporter()
await hcd.vault().exportVault(exporter)
``