feat(sdk-core): added OFC BitGo signing on wallet and coins object

allow wallet and coins object to sign using the BitGo key
if the passphrase is not provided during signing

Ticket: WCN-217-2

Author: alextse-bg

modules/sdk-core/src/bitgo/trading/tradingAccount.ts

@@ -22,6 +22,11 @@ export class TradingAccount implements ITradingAccount {
     return this.wallet.id();
   }
 
+  get userKeySigningRequired(): boolean {
+    const walletData = this.wallet.toJSON();
+    return walletData.coinSpecific?.userKeySigningRequired ?? walletData.userKeySigningRequired ?? true;
+  }
+
   /**
    * Signs an arbitrary payload. Use the user key if passphrase/prv is provided, or the BitGo key if not.
    * @param params
@@ -48,8 +53,7 @@ export class TradingAccount implements ITradingAccount {
     params: Omit<SignPayloadParameters, 'walletPassphrase' | 'prv'>
   ): Promise<string> {
     const walletData = this.wallet.toJSON();
-    const userKeySigningRequired = walletData.coinSpecific?.userKeySigningRequired ?? walletData.userKeySigningRequired;
-    if (userKeySigningRequired) {
+    if (this.userKeySigningRequired) {
       throw new Error(
         'Wallet must use user key to sign ofc transaction, please provide the wallet passphrase or visit your wallet settings page to configure one.'
       );

modules/sdk-core/src/bitgo/wallet/wallet.ts

@@ -2137,7 +2137,7 @@ export class Wallet implements IWallet {
    * @param params
    * - txPrebuild
    * - [keychain / key] (object) or prv (string)
-   * - walletPassphrase
+   * - walletPassphrase (optional ONLY for OFC wallets with userKeySigningRequired = false)
    * - verifyTxParams (optional) - when provided, the transaction will be verified before signing
    *   - txParams: transaction parameters used for verification
    *   - verification: optional verification options
@@ -2264,6 +2264,17 @@ export class Wallet implements IWallet {
       };
       return params.customSigningFunction(signTransactionParamsWithSeed);
     }
+
+    if (this.baseCoin.getFamily() === 'ofc') {
+      const userKeySigningRequired = this.toTradingAccount().userKeySigningRequired;
+      const prv = userKeySigningRequired ? await this.getUserPrvAsync(presign as GetUserPrvOptions) : undefined;
+      return this.baseCoin.signTransaction({
+        ...signTransactionParams,
+        prv,
+        wallet: this,
+      });
+    }
+
     return this.baseCoin.signTransaction({
       ...signTransactionParams,
       prv: await this.getUserPrvAsync(presign as GetUserPrvOptions),

modules/sdk-core/src/coins/ofc.ts

@@ -15,6 +15,7 @@ import {
   SignTransactionOptions,
   VerifyAddressOptions,
   VerifyTransactionOptions,
+  Wallet,
 } from '../';
 
 export class Ofc extends BaseCoin {
@@ -104,6 +105,26 @@ export class Ofc extends BaseCoin {
     throw new MethodNotImplementedError();
   }
 
+  /**
+   * Signs a message using a trading wallet's BitGo Key
+   * @param wallet - uses the BitGo key of this trading wallet to sign the message remotely in a KMS
+   * @param message
+   */
+  async signMessage(wallet: Wallet, message: string): Promise<Buffer>;
+  /**
+   * Signs a message using the private key
+   * @param key - uses the private key to sign the message
+   * @param message
+   */
+  async signMessage(key: { prv: string }, message: string): Promise<Buffer>;
+  async signMessage(keyOrWallet: { prv: string } | Wallet, message: string): Promise<Buffer> {
+    if (!(keyOrWallet instanceof Wallet)) {
+      return super.signMessage(keyOrWallet, message);
+    }
+    const signatureHexString = await keyOrWallet.toTradingAccount().signPayload({ payload: message });
+    return Buffer.from(signatureHexString, 'hex');
+  }
+
   /** @inheritDoc */
   auditDecryptedKey(params: AuditDecryptedKeyParams) {
     throw new MethodNotImplementedError();

modules/sdk-core/src/coins/ofcToken.ts

@@ -9,6 +9,7 @@ import {
   SignTransactionOptions as BaseSignTransactionOptions,
   SignedTransaction,
   ITransactionRecipient,
+  Wallet,
 } from '../';
 import { isBolt11Invoice } from '../lightning';
 
@@ -18,7 +19,8 @@ export interface SignTransactionOptions extends BaseSignTransactionOptions {
   txPrebuild: {
     payload: string;
   };
-  prv: string;
+  prv?: string;
+  wallet?: Wallet;
 }
 
 export { OfcTokenConfig };
@@ -107,15 +109,25 @@ export class OfcToken extends Ofc {
   }
 
   /**
-   * Assemble keychain and half-sign prebuilt transaction
+   * Signs a half-signed OFC transaction.
+   * Signs the transaction remotely using the BitGo key if prv is not provided.
    * @param params
    * @returns {Promise<SignedTransaction>}
    */
   async signTransaction(params: SignTransactionOptions): Promise<SignedTransaction> {
     const txPrebuild = params.txPrebuild;
     const payload = txPrebuild.payload;
-    const signatureBuffer = (await this.signMessage(params, payload)) as any;
-    const signature: string = signatureBuffer.toString('hex');
+
+    let signature: string;
+    if (params.wallet) {
+      signature = await params.wallet.toTradingAccount().signPayload({ payload, prv: params.prv });
+    } else if (params.prv) {
+      const signatureBuffer = (await this.signMessage({ prv: params.prv }, payload)) as any;
+      signature = signatureBuffer.toString('hex');
+    } else {
+      throw new Error('You must pass in either one of wallet or prv');
+    }
+
     return { halfSigned: { payload, signature } } as any;
   }
 

modules/sdk-core/test/unit/bitgo/trading/tradingAccount.ts

@@ -54,7 +54,9 @@ describe('TradingAccount', function () {
       toJSON: sinon.stub().returns({
         id: 'test-wallet-id',
         keys: ['user-key-id', 'backup-key-id', 'bitgo-key-id'],
-        coinSpecific: {},
+        coinSpecific: {
+          userKeySigningRequired: false,
+        },
       }),
       baseCoin: mockBaseCoin,
       bitgo: mockBitGo,
@@ -85,7 +87,6 @@ describe('TradingAccount', function () {
       it('should sign using the BitGo key remotely when no passphrase is provided', async function () {
         const result = await tradingAccount.signPayload({ payload });
 
-        mockWallet.toJSON.calledOnce.should.be.true();
         mockBitGo.post.calledOnce.should.be.true();
         sendStub.calledWith({ payload: JSON.stringify(payload) }).should.be.true();
         result.should.equal(signature);
@@ -98,11 +99,13 @@ describe('TradingAccount', function () {
       });
 
       it('should throw if coinSpecific.userKeySigningRequired is true and no passphrase and prv are provided', async function () {
-        mockWallet.toJSON.onCall(mockWallet.toJSON.callCount).returns({
+        const mockWalletJSON = {
           id: 'test-wallet-id',
           keys: ['user-key-id', 'backup-key-id', 'bitgo-key-id'],
           coinSpecific: { userKeySigningRequired: true },
-        });
+        };
+        mockWallet.toJSON.onCall(mockWallet.toJSON.callCount).returns(mockWalletJSON);
+        mockWallet.toJSON.onCall(mockWallet.toJSON.callCount + 1).returns(mockWalletJSON);
 
         await tradingAccount
           .signPayload({ payload })
@@ -112,12 +115,14 @@ describe('TradingAccount', function () {
       });
 
       it('should fall back to top-level userKeySigningRequired when coinSpecific does not carry it', async function () {
-        mockWallet.toJSON.onCall(mockWallet.toJSON.callCount).returns({
+        const mockWalletJSON = {
           id: 'test-wallet-id',
           keys: ['user-key-id', 'backup-key-id', 'bitgo-key-id'],
           coinSpecific: {},
           userKeySigningRequired: true,
-        });
+        };
+        mockWallet.toJSON.onCall(mockWallet.toJSON.callCount).returns(mockWalletJSON);
+        mockWallet.toJSON.onCall(mockWallet.toJSON.callCount + 1).returns(mockWalletJSON);
 
         await tradingAccount
           .signPayload({ payload })