py-libp2p/libp2p/security/simple_security.py

import asyncio
from typing import cast

from libp2p.network.connection.raw_connection_interface import IRawConnection
from libp2p.peer.id import ID
from libp2p.security.secure_conn_interface import ISecureConn
from libp2p.security.secure_transport_interface import ISecureTransport

from .typing import TSecurityDetails


class SimpleSecurityTransport(ISecureTransport):
    key_phrase: str

    def __init__(self, key_phrase: str) -> None:
        self.key_phrase = key_phrase

    async def secure_inbound(self, conn: IRawConnection) -> ISecureConn:
        """
        Secure the connection, either locally or by communicating with opposing node via conn,
        for an inbound connection (i.e. we are not the initiator)
        :return: secure connection object (that implements secure_conn_interface)
        """
        await conn.write(self.key_phrase.encode())
        incoming = (await conn.read()).decode()

        if incoming != self.key_phrase:
            raise Exception("Key phrase differed between nodes. Expected " + self.key_phrase)

        secure_conn = SimpleSecureConn(conn, self.key_phrase)
        return secure_conn

    async def secure_outbound(self, conn: IRawConnection, peer_id: ID) -> ISecureConn:
        """
        Secure the connection, either locally or by communicating with opposing node via conn,
        for an inbound connection (i.e. we are the initiator)
        :return: secure connection object (that implements secure_conn_interface)
        """
        await conn.write(self.key_phrase.encode())
        incoming = (await conn.read()).decode()

        # Force context switch, as this security transport is built for testing locally
        # in a single event loop
        await asyncio.sleep(0)

        if incoming != self.key_phrase:
            raise Exception("Key phrase differed between nodes. Expected " + self.key_phrase)

        secure_conn = SimpleSecureConn(conn, self.key_phrase)
        return secure_conn


class SimpleSecureConn(ISecureConn):
    conn: IRawConnection
    key_phrase: str
    details: TSecurityDetails

    def __init__(self, conn: IRawConnection, key_phrase: str) -> None:
        self.conn = conn
        self.details = cast(TSecurityDetails, {})
        self.details["key_phrase"] = key_phrase

    def get_conn(self) -> IRawConnection:
        """
        :return: connection object that has been made secure
        """
        return self.conn

    def get_security_details(self) -> TSecurityDetails:
        """
        :return: map containing details about the connections security
        """
        return self.details