Tutorial: Build an API requester

This tutorial walks you through the process of creating a simple Golang program that can invoke Insolar MainNet API.

Note

You can also use the CLI tool of the same name (requester) to invoke the API.

Code examples in this tutorial are straightforward, statements are successive (without conditional expressions and cycles). This lets you focus on substance rather than code structure: how to use cryptographic functions provided by Golang packages to correctly sign API requests to MainNet.

You can learn to sign requests in two ways:

  • By creating a new private key (together with a new Insolar Wallet), or

  • By using an existing private key if you have already created your Wallet in the web interface.

Note

This tutorial uses the API endpoint of Insolar TestNet in code examples.

What you will build

You will build a program that creates a member on the Insolar network or uses an existing one and, as a member, transfers funds from its account to the account of another member.

What you will need

How to complete this tutorial

  • To start from scratch, go through the step-by-step instructions listed below and pay attention to comments in code examples.

  • To skip the basics, read (and copy-paste) a working requester code provided at the end of this tutorial.

Building the requester

In Insolar MainNet (and TestNet), all requests to contracts go through two phases:

Phase 1: A client requests a seed from a node. The seed is a unique piece of information (explained in more detail in the following sections).

Phase 2: The client forms and sends a contract request in the following way:

  1. Puts the seed value and a public key into a contract request body.

  2. Takes a hash of the body’s bytes.

  3. Signs the hash with a private key.

  4. Puts both the hash and signature into corresponding headers.

  5. Sends the request to the node that provided the seed in the previous phase.

To automate this process, you can build a simple requester program by completing the following steps:

  1. Prepare: install the necessary tools, import the necessary packages, and initialize an HTTP client.

  2. Declare structures that correspond to request bodies described in the Insolar API specification.

  3. Create a seed getter function. The getter is reused to put a new seed into every contract request.

  4. Create a sender function that signs and sends contract requests given a private key.

  5. Generate a new private key or use an existing one.

  6. Form and send a transfer request: get a new seed and call the sender function.

  7. Test the requester against Insolar TestNet.

All the above steps are detailed in sections below.

Step 1: Prepare

To build the requester, install, import, and set up the following:

  1. Install a copy of the standard crypto library with the secp256k1 elliptic curve implementation provided by Insolar:

    go get -t github.com/insolar/x-crypto/ecdsa/...

  2. In a new Main.go file, import the packages your requester will use (or skip this step and let your IDE do it for you along the way). For example:

     1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
    package main

import (
  // You will need:
  // - Basic Golang functionality.
  "bytes"
  "fmt"
  "golang.org/x/net/publicsuffix"
  "io/ioutil"
  "log"
  "strconv"
  // - HTTP client and a cookiejar.
  "net/http"
  "net/http/cookiejar"
  // - Big numbers to store signatures.
  "math/big"
  // - Basic cryptography.
  "crypto/rand"
  "crypto/sha256"
  // - Basic encoding capabilities.
  "encoding/asn1"
  "encoding/base64"
  "encoding/json"
  "encoding/pem"
  // - A copy of the standard crypto library with
  //   the ECDSA secp256k1 curve implementation.
  xecdsa "github.com/insolar/x-crypto/ecdsa"
  xelliptic "github.com/insolar/x-crypto/elliptic"
  "github.com/insolar/x-crypto/x509"
)

  3. Declare, set, and initialize the following:

    1. Insolar supports ECDSA-signed requests. Since an ECDSA signature in Golang consists of two big integers, declare a single structure to contain it.

    2. Set the API endpoint URL to that of TestNet.

    3. Create and initialize an HTTP client for connection reuse and store a cookiejar inside.

    4. Create a variable for the JSON RPC 2.0 request identifier. The identifier is to be incremented for every request and each corresponding response will contain it.

    31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
    // Declare a structure to contain the ECDSA signature.
type ecdsaSignature struct {
  R, S *big.Int
}

// Set the endpoint URL to that of TestNet.
const (
  TestNetURL = "https://wallet-api.testnet.insolar.io/api/rpc"
)

// Create and initialize an HTTP client for connection reuse
// and put a cookiejar into it.
var client *http.Client
var jar cookiejar.Jar
func init() {
  // All users of cookiejar should import "golang.org/x/net/publicsuffix"
  jar, err := cookiejar.New(&cookiejar.Options{
    PublicSuffixList: publicsuffix.List})
  if err != nil {
    log.Fatal(err)
  }
  client = &http.Client{
    Jar: jar,
  }
}

// Create a variable for the JSON RPC 2.0 request identifier.
var id int = 1
// The identifier is incremented in every request
// and each corresponding response contains it.

With that, everything your requester requires is set up.

Next, declare request structures in accordance with the Insolar API specification.

Step 2: Declare request structures

To invoke the MainNet (or TestNet) API, you need structures for three requests: seed getter, member creation, and transfer.

All the requests have the same base structure in accordance with the JSON RPC 2.0 specification. For example:

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "contract.call"
  "params": { ... }
}

Where "params" is an optional object that may contain parameters of a particular method.

Define the base structure and nest more structures for all the required parameters. For example:

 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
// Continue in the Main.go file...

// Declare a base structure to form requests to Insolar API
// in accordance with the specification.
type requestBody struct {
  JSONRPC        string         `json:"jsonrpc"`
  ID             int            `json:"id"`
  Method         string         `json:"method"`
}

type requestBodyWithParams struct {
  JSONRPC        string         `json:"jsonrpc"`
  ID             int            `json:"id"`
  Method         string         `json:"method"`
  // Params is a structure that depends on a particular method.
  Params         interface{}    `json:"params"`
}

// Insolar MainNet defines params of a contract request as follows.
type params struct {
  Seed            string       `json:"seed"`
  CallSite        string       `json:"callSite"`
  // CallParams is a structure that depends on a particular method.
  CallParams      interface{}  `json:"callParams"`
  PublicKey       string       `json:"publicKey"`
}

// The transfer request has a reference in params.
type paramsWithReference struct {
  params
  Reference       string  `json:"reference"`
}

// The member.create request has no callParams,
// so here goes an empty structure.
type memberCreateCallParams struct {}

// The transfer request sends an amount of funds to
// a member identified by a reference.
type transferCallParams struct {
  Amount            string    `json:"amount"`
  ToMemberReference string    `json:"toMemberReference"`
}

Now that the requester has all the requests structures it is supposed to use, the next step is to create the following functions:

  1. A seed getter to retrieve a new seed for each contract request.

  2. A sender function that signs and sends contract requests.

Step 3: Create a seed getter

Each signed request to Insolar API has to contain a seed in its body. Seed is a unique piece of information generated by a node that:

  • Has a short lifespan.

  • Expires upon first use.

  • Protects from request duplicates.

Upon receiving a contract request, any node checks if it was the one that generated the seed and if the seed is still alive. So, each contract request with a seed must be sent to the node you requested the seed from.

Tip

To make sure that the contract request is routed to the correct node, retrieve all the cookies with routing information from the node’s response and store them in the HTTP client as described in the preparation step.

To form contract requests, create a seed getter function you can reuse.

The seed getter does the following:

  1. Forms a node.getSeed request body in JSON format.

  2. Creates an HTTP request with the body and a Content-Type (application/json) HTTP header.

  3. Sends the request and receives a response.

  4. Retrieves the seed from the response and returns it.

For example:

104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
// Continue in the Main.go file...

// Create a function to get a new seed for each signed request.
func getNewSeed() (string) {
  // Form a request body for getSeed.
  getSeedReq := requestBody{
    JSONRPC: "2.0",
    Method:  "node.getSeed",
    ID:      id,
  }
  // Increment the id for future requests.
  id++

  // Marshal the payload into JSON.
  jsonSeedReq, err := json.Marshal(getSeedReq)
  if err != nil {
    log.Fatalln(err)
  }

  // Create a new HTTP request.
  seedReq, err := http.NewRequest("POST", TestNetURL,
    bytes.NewBuffer(jsonSeedReq))
  if err != nil {
    log.Fatalln(err)
  }
  seedReq.Header.Set("Content-Type", "application/json")

  // Send the request.
  seedResponse, err := client.Do(seedReq)
  if err != nil {
    log.Fatalln(err)
  }
  defer seedReq.Body.Close()

  // Receive the response body.
  seedRespBody, err := ioutil.ReadAll(seedResponse.Body)
  if err != nil {
    log.Fatalln(err)
  }

  // Unmarshal the response.
  var newSeed map[string]interface{}
  err = json.Unmarshal(seedRespBody, &newSeed)
  if err != nil {
    log.Fatalln(err)
  }

  // (Optional) Print the request and its response.
  print := "POST to " + TestNetURL +
    "\nPayload: " + string(jsonSeedReq) +
    "\nResponse status code: " +  strconv.Itoa(seedResponse.StatusCode) +
    "\nResponse: " + string(seedRespBody) + "\n"
  fmt.Println(print)

  // Retrieve and return the new seed.
  return newSeed["result"].(map[string]interface{})["seed"].(string)
}

Now, every getNewSeed() call returns a living seed that can be put into the body of a contract request.

The next step is to create a sender function that signs and sends such requests.

Step 4: Create a sender function

The sender function does the following:

  1. Takes a request body and an ECDSA private key as arguments.

  2. Forms an HTTP request with the body and the following HTTP headers:

    1. Content-Type — application/json.

    2. Digest that contains a Base64 string with an SHA-256 hash of the body’s bytes.

    3. Signature that contains a Base64 string with an ECDSA signature (in ASN.1 DER format) of the hash’s bytes.

  3. Sends the request.

  4. Retrieves the response and returns it as a JSON object.

For example:

Tip

In Golang, the ECDSA signature consists of two big integers. To convert the signature into the ASN.1 DER format, put it into the ecdsaSignature structure.

161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
// Continue in the Main.go file...

// Create a function to send signed requests.
func sendSignedRequest(payload requestBodyWithParams,
  privateKey *ecdsa.PrivateKey) map[string]interface{} {

  // Marshal the payload into JSON.
  jsonPayload, err := json.Marshal(payload)
  if err != nil {
    log.Fatalln(err)
  }

  // Take a SHA-256 hash of the payload's bytes.
  hash := sha256.Sum256(jsonPayload)

  // Sign the hash with the private key.
  r, s, err := ecdsa.Sign(rand.Reader, privateKey, hash[:])
  if err != nil {
    log.Fatalln(err)
  }

  // Convert the signature into ASN.1 DER format.
  sig := ecdsaSignature{
    R: r,
    S: s,
  }
  signature, err := asn1.Marshal(sig)
  if err != nil {
    log.Fatalln(err)
  }

  // Encode both hash and signature to a Base64 string.
  hash64 := base64.StdEncoding.EncodeToString(hash[:])
  signature64 := base64.StdEncoding.EncodeToString(signature)

  // Create a new request and set its headers.
  request, err := http.NewRequest("POST", TestNetURL,
    bytes.NewBuffer(jsonPayload))
  if err != nil {
    log.Fatalln(err)
  }
  request.Header.Set("Content-Type", "application/json")

  // Put the hash string into the HTTP Digest header.
  request.Header.Set("Digest", "SHA-256="+hash64)

  // Put the signature string into the HTTP Signature header.
  request.Header.Set("Signature", "keyId=\"public-key\", " +
     "algorithm=\"ecdsa\", headers=\"digest\", signature="+signature64)

  // Send the signed request.
  response, err := client.Do(request)
  if err != nil {
    log.Fatalln(err)
  }
  defer response.Body.Close()

  // Receive the response body.
  responseBody, err := ioutil.ReadAll(response.Body)
  if err != nil {
    log.Fatalln(err)
  }

  // Unmarshal it into a JSON object.
  var JSONObject map[string]interface{}
  err = json.Unmarshal(responseBody, &JSONObject)
  if err != nil {
    log.Fatalln(err)
  }

  // (Optional) Print the request and its response.
  print := "POST to " + TestNetURL +
    "\nPayload: " + string(jsonPayload) +
    "\nResponse status code: " + strconv.Itoa(response.StatusCode) +
    "\nResponse: " + string(responseBody) + "\n"
  fmt.Println(print)

  // Return the JSON object.
  return JSONObject
}

Now, every sendSignedRequest(payload, privateKey) call returns the result of a contract method execution.

With the seed getter and sender functions, you have everything you need to send a contract request. The next step is to:

  • Generate a key pair and create a member using a special contract request, or

  • Use an existing member account by retrieving the corresponding private key from the Insolar Wallet’s web interface and converting the key to PEM format.

Step 5: Generate a new key pair or use an existing one

The body of each request that calls a contract method must be hashed by a SHA256 algorithm. Each hash must be signed by a private key generated by a p256k1 elliptic curve.

Depending on whether or not you already have an Insolar Wallet, choose one of the following:

Generate a key pair and create a member

Use an existing private key

To create a member, send the corresponding member creation request—a signed request to a contract method that does the following:

  • Creates a new member and corresponding account objects.

  • Returns a reference to the member—address in the Insolar network.

  • Binds a given public key to the member.

Insolar uses this public key to identify a member and check the signature generated by the paired private key.

Warning

You will not be able to access your member object without the private key and, as such, transfer funds.

First, take care of the keys by following these steps:

  1. Generate a key pair using the elliptic curve and convert both keys to PEM format.

  2. Export the private key into a file.

  3. Save the file to a secure place.

Next, form and sigh the member creation request:

  1. Call the getNewSeed() function and put a new seed into a variable.

  2. Form the member.create request body with the seed and the generated public key.

  3. Call the sendSignedRequest() function, pass it the body and the private key, and receive a member reference in response.

  4. Put the reference into a variable (the transfer request in the next step requires it).

For example:

Tip

To encode the key to PEM format, first, convert it to ASN.1 DER using the x509 library.

241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
// Continue in the Main.go file...

// Create the main function to form and send signed requests.
func main() {

  // Generate a key pair.
  privateKey := new(xecdsa.PrivateKey)
  privateKey, err := xecdsa.GenerateKey(xelliptic.P256(), rand.Reader)
  var publicKey xecdsa.PublicKey
  publicKey = privateKey.PublicKey

  // Convert both private and public keys into PEM format.
  x509PublicKey, err := x509.MarshalPKIXPublicKey(&publicKey)
  if err != nil {
    log.Fatalln(err)
  }
  pemPublicKey := pem.EncodeToMemory(&pem.Block{Type: "PUBLIC KEY",
     Bytes: x509PublicKey})

  x509PrivateKey, err := x509.MarshalECPrivateKey(privateKey)
  if err != nil {
    log.Fatalln(err)
  }
  pemPrivateKey := pem.EncodeToMemory(&pem.Block{Type: "PRIVATE KEY",
     Bytes: x509PrivateKey})

  // The private key is required to sign requests.
  // Make sure to put it into a file to save it to a secure place later.
  file, err := os.Create("private.pem")
  if err != nil {
    fmt.Println(err)
    return
  }
  file.WriteString(string(pemPrivateKey))
  file.Close()

  // Get a seed to form the request.
  seed := getNewSeed()
  // Form a request body for member.create.
  createMemberReq := requestBodyWithParams{
    JSONRPC: "2.0",
    Method:  "contract.call",
    ID:      id,
    Params:params {
      Seed: seed,
      CallSite: "member.create",
      CallParams:memberCreateCallParams {},
      PublicKey: string(pemPublicKey)},
  }
  // Increment the JSON RPC 2.0 request identifier for future requests.
  id++

  // Send the signed member.create request.
  newMember := sendSignedRequest(createMemberReq, privateKey)

  // Put the reference to your new member into a variable
  // to easily form transfer requests.
  memberReference := newMember["result"].(
  map[string]interface{})["callResult"].(
  map[string]interface{})["reference"].(string)
  fmt.Println("Member reference is " + memberReference)

  // The main function is to be continued...

Now that you have your member reference and key pair, you can transfer funds to other members.

To use the key, follow these steps:

  1. Log in to your Insolar Wallet.

    Note

    Remember that this tutorial uses Insolar TestNet as an example, so the Wallet must be created there.

    Be ready to copy the address.

    _images/xns-acc-addr.png

  2. In a new tab, log in to your Wallet again, open Settings > Reveal private key, enter your password, and click REVEAL.

    _images/settings-reveal-key.png

    Be ready to copy the key.

    _images/copy-priv-key.png

Next, consider the code sample below that does the following:

  1. Uses the private key and elliptic curve to calculate the public key.

  2. Converts both public and private keys into PEM format as the API requires.

Attention

Copy your XNS address and private key and, in the highlighted lines, replace the insolar:XXX... and HHH... placeholders respectively. The XNS address is required to form transfer requests as described in the next step.

241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
 // Continue in the Main.go file...

 // Create the main function to form and send signed requests.
 func main() {
   // Log in to your Insolar Wallet, copy the XNS account address,
   // allocate a variable for it, and paste the value (replace the Xs).
   memberReference := "insolar:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"

   // In the Wallet, open Settings > Reveal private key, enter your password,
   // copy the key, allocate a variable for it, and paste the value (replace the Hs).
   hexPrivate := "HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH"

   // Declare a new big int variable, specify the key as its value,
   // and set its format to base16.
   i := new(big.Int)
   i.SetString(hexPrivate,16)

   // Create a new elliptic curve and feed the value to it
   // to get the X and Y values of the public key.
   privateKey := new(xecdsa.PrivateKey)
   privateKey.PublicKey.Curve = xelliptic.P256K()
   privateKey.D = i
   privateKey.PublicKey.X, privateKey.PublicKey.Y = xelliptic.P256K(
     ).ScalarBaseMult(i.Bytes())

   // Convert the private key to PEM.
   x509Encoded, err := x509.MarshalPKCS8PrivateKey(privateKey)
   if err != nil {
     panic(err)
   }
   pemPrivateKey := pem.EncodeToMemory(&pem.Block{Type:
     "PRIVATE KEY", Bytes: x509Encoded})

   // Convert the public key to PEM.
   x509EncodedPub, err := x509.MarshalPKIXPublicKey(&privateKey.PublicKey)
   if err != nil {
     panic(err)
   }
   pemPublicKey := pem.EncodeToMemory(&pem.Block{Type:
     "PUBLIC KEY", Bytes: x509EncodedPub})
   // (Optional) Print the key pair.
   fmt.Println(string(pemPrivateKey))
   fmt.Println(string(pemPublicKey))

   // The main function is to be continued...

Now that you’ve calculated the public key and converted both public and private keys to PEM, you can transfer funds to other members.

Step 6: Form and send a transfer request

The transfer request is a signed request to a contract method that transfers an amount of funds to another member.

To transfer funds, follow these steps:

  1. In the web interface, send some funds to your XNS address or member reference returned by the member creation request.

  2. Acquire a recipient reference—reference to an existing member to transfer the funds to.

  3. Call the getNewSeed() function and put a new seed into a variable.

  4. Form a member.transfer request body with the following values:

    • A new seed

    • An amount of funds to transfer

    • A recipient reference

    • Your reference (XNS address)—for identification

    • Your public key—to check the signature

  5. Call the sendSignedRequest() function and pass it the body and the private key.

The transfer request responds with a fee value.

For example:

Attention

In the highlighted line, replace the insolar:YYY... placeholder with the reference to an existing recipient member.

304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
// Continue in the main() function...

// Get a new seed to form a transfer request.
seed = getNewSeed()

// Form a request body for the transfer request.
transferReq := requestBodyWithParams{
  JSONRPC: "2.0",
  Method:  "contract.call",
  ID:      id,
  Params:paramsWithReference{ params:params{
    Seed: seed,
    CallSite: "member.transfer",
    CallParams:transferCallParams {
      Amount: "100",
      ToMemberReference: "insolar:YYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYY",
      },
    PublicKey: string(pemPublicKey),
    },
    Reference: string(memberReference),
  },
}
// Increment the id for future requests.
id++

// Send the signed transfer request.
newTransfer := sendSignedRequest(transferReq, privateKey)
fee := newTransfer["result"].(
  map[string]interface{})["callResult"].(
  map[string]interface{})["fee"].(string)

// (Optional) Print out the fee.
fmt.Println("Fee is " + fee)

// Remember to close the main function.
}

With that, the requester, as a member, can send funds to other members of the Insolar network.

Step 7: Test the requester

To test the requester, do the following:

  1. Make sure the endpoint URL is set to that of TestNet.

  2. Run the requester:

    go run Main.go

Summary

Congratulations! You have just developed a requester capable of forming signed contract requests to Insolar MainNet API.

Build upon it:

  1. Create structures for other contract requests.

  2. Export the getter and sender functions to use them in other packages.

Full requester code examples

Below are the full requester code examples in Golang. Click the panels to expand and click again to hide.

API requester that generates a new private key

Attention

In the highlighted line, replace the insolar:YYY... placeholder with a reference to an existing recipient member.

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
package main

import (
  // You will need:
  // - Basic Golang functionality.
  "bytes"
  "fmt"
  "golang.org/x/net/publicsuffix"
  "io/ioutil"
  "log"
  "os"
  "strconv"
  // - HTTP client and a cookiejar.
  "net/http"
  "net/http/cookiejar"
  // - Big numbers to store signatures.
  "math/big"
  // - Basic cryptography.
  "crypto/rand"
  "crypto/sha256"
  // - Basic encoding capabilities.
  "encoding/asn1"
  "encoding/base64"
  "encoding/json"
  "encoding/pem"
  // - A copy of the standard crypto library with
  //   the ECDSA secp256k1 curve implementation.
  xecdsa "github.com/insolar/x-crypto/ecdsa"
  xelliptic "github.com/insolar/x-crypto/elliptic"
  "github.com/insolar/x-crypto/x509"
)

// Declare a structure to contain the ECDSA signature.
type ecdsaSignature struct {
  R, S *big.Int
}

// Set the endpoint URL to that of TestNet.
const (
  TestNetURL = "https://wallet-api.testnet.insolar.io/api/rpc"
)

// Create and initialize an HTTP client for connection reuse
// and put a cookiejar into it.
var client *http.Client
var jar cookiejar.Jar
func init() {
  // All users of cookiejar should import "golang.org/x/net/publicsuffix"
  jar, err := cookiejar.New(&cookiejar.Options{PublicSuffixList: publicsuffix.List})
  if err != nil {
    log.Fatal(err)
  }
  client = &http.Client{
    Jar: jar,
  }
}

// Create a variable for the JSON RPC 2.0 request identifier.
var id int = 1
// The identifier is to be incremented for every request and
// each corresponding response will contain it.

// Declare a nested structure to form requests to Insolar API
// in accordance with the specification.
// Insolar MainNet uses the basic JSON RPC 2.0 request structure.
type requestBody struct {
  JSONRPC        string         `json:"jsonrpc"`
  ID             int            `json:"id"`
  Method         string         `json:"method"`
}

type requestBodyWithParams struct {
  JSONRPC        string         `json:"jsonrpc"`
  ID             int            `json:"id"`
  Method         string         `json:"method"`
  // Params is a structure that depends on a particular method.
  Params         interface{}    `json:"params"`
}

// Insolar MainNet defines params of the signed request as follows.
type params struct {
  Seed            string       `json:"seed"`
  CallSite        string       `json:"callSite"`
  // CallParams is a structure that depends on a particular method.
  CallParams      interface{}  `json:"callParams"`
  PublicKey       string       `json:"publicKey"`
}

type paramsWithReference struct {
  params
  Reference       string  `json:"reference"`
}

// The member.create request has no parameters,
// so it's an empty structure:
type memberCreateCallParams struct {}

// The transfer request sends an amount of funds
// to the member identified by a reference:
type transferCallParams struct {
  Amount            string    `json:"amount"`
  ToMemberReference string    `json:"toMemberReference"`
}

// Create a function to get a new seed for each signed request.
func getNewSeed() string {
  // Form a request body for getSeed:
  getSeedReq := requestBody{
    JSONRPC: "2.0",
    Method:  "node.getSeed",
    ID:      id,
  }
  // Increment the id for future requests.
  id++

  // Marshal the payload into JSON.
  jsonSeedReq, err := json.Marshal(getSeedReq)
  if err != nil {
    log.Fatalln(err)
  }

  // Create a new HTTP request and send it.
  seedReq, err := http.NewRequest("POST", TestNetURL,
    bytes.NewBuffer(jsonSeedReq))
  if err != nil {
    log.Fatalln(err)
  }
  seedReq.Header.Set("Content-Type", "application/json")

  // Perform the request.
  seedResponse, err := client.Do(seedReq)
  if err != nil {
    log.Fatalln(err)
  }
  defer seedReq.Body.Close()

  // Receive the response body.
  seedRespBody, err := ioutil.ReadAll(seedResponse.Body)
  if err != nil {
    log.Fatalln(err)
  }

  // Unmarshal the response.
  var newSeed map[string]interface{}
  err = json.Unmarshal(seedRespBody, &newSeed)
  if err != nil {
    log.Fatalln(err)
  }

  // (Optional) Print the request and its response.
  print := "POST to " + TestNetURL +
    "\nPayload: " + string(jsonSeedReq) +
    "\nResponse status code: " +  strconv.Itoa(seedResponse.StatusCode) +
    "\nResponse: " + string(seedRespBody) + "\n"
  fmt.Println(print)

  // Retrieve and return the current seed.
  return newSeed["result"].(map[string]interface{})["seed"].(string)
}

// Create a function to send signed requests.
func sendSignedRequest(payload requestBodyWithParams,
  privateKey *xecdsa.PrivateKey) map[string]interface{} {
  // Marshal the payload into JSON:
  jsonPayload, err := json.Marshal(payload)
  if err != nil {
    log.Fatalln(err)
  }

  // Take a SHA-256 hash of the payload's bytes.
  hash := sha256.Sum256(jsonPayload)

  // Sign the hash with the private key.
  r, s, err := xecdsa.Sign(rand.Reader, privateKey, hash[:])
  if err != nil {
    log.Fatalln(err)
  }

  // Convert the signature into ASN.1 DER format.
  sig := ecdsaSignature{
    R: r,
    S: s,
  }
  signature, err := asn1.Marshal(sig)
  if err != nil {
    log.Fatalln(err)
  }

  // Convert both hash and signature into a Base64 string.
  hash64 := base64.StdEncoding.EncodeToString(hash[:])
  signature64 := base64.StdEncoding.EncodeToString(signature)

  // Create a new request and set its headers.
  request, err := http.NewRequest("POST", TestNetURL,
    bytes.NewBuffer(jsonPayload))
  if err != nil {
    log.Fatalln(err)
  }
  request.Header.Set("Content-Type", "application/json")

  // Put the hash string into the HTTP Digest header.
  request.Header.Set("Digest", "SHA-256="+hash64)

  // Put the signature string into the HTTP Signature header.
  request.Header.Set("Signature", "keyId=\"public-key\", " +
    "algorithm=\"ecdsa\", headers=\"digest\", signature="+signature64)

  // Send the signed request.
  response, err := client.Do(request)
  if err != nil {
    log.Fatalln(err)
  }
  defer response.Body.Close()

  // Receive the response body.
  responseBody, err := ioutil.ReadAll(response.Body)
  if err != nil {
    log.Fatalln(err)
  }

  // Unmarshal it into a JSON object.
  var JSONObject map[string]interface{}
  err = json.Unmarshal(responseBody, &JSONObject)
  if err != nil {
    log.Fatalln(err)
  }

  // (Optional) Print the request and its response.
  print := "POST to " + TestNetURL +
    "\nPayload: " + string(jsonPayload) +
    "\nResponse status code: " + strconv.Itoa(response.StatusCode) +
    "\nResponse: " + string(responseBody) + "\n"
  fmt.Println(print)

  // Return the response.
  return JSONObject
}

// Create the main function to form and send signed requests.
func main() {
  // Generate a key pair:
  privateKey := new(xecdsa.PrivateKey)
  privateKey, err := xecdsa.GenerateKey(xelliptic.P256(), rand.Reader)
  var publicKey xecdsa.PublicKey
  publicKey = privateKey.PublicKey

  // Convert both private and public keys into PEM format.
  x509PublicKey, err := x509.MarshalPKIXPublicKey(&publicKey)
  if err != nil {
    log.Fatalln(err)
  }
  pemPublicKey := pem.EncodeToMemory(&pem.Block{Type:
    "PUBLIC KEY", Bytes: x509PublicKey})

  x509PrivateKey, err := x509.MarshalECPrivateKey(privateKey)
  if err != nil {
    log.Fatalln(err)
  }
  pemPrivateKey := pem.EncodeToMemory(&pem.Block{Type:
    "PRIVATE KEY", Bytes: x509PrivateKey})

  // The private key is required to sign requests.
  // Make sure to put it into a file to save it in a secure place later.
  file, err := os.Create("private.pem")
  if err != nil {
    fmt.Println(err)
    return
  }
  file.WriteString(string(pemPrivateKey))
  file.Close()

  // Get a seed to form the request:
  seed := getNewSeed()
  // Form a request body for member.create:
  createMemberReq := requestBodyWithParams{
    JSONRPC: "2.0",
    Method:  "contract.call",
    ID:      id,
    Params:params {
      Seed: seed,
      CallSite: "member.create",
      CallParams:memberCreateCallParams {},
      PublicKey: string(pemPublicKey)},
  }
  // Increment the JSON RPC 2.0 request identifier for future requests.
  id++

  // Send the signed member.create request.
  newMember := sendSignedRequest(createMemberReq, privateKey)

  // Put the reference to your new member into a variable
  // to send transfer requests.
  memberReference := newMember["result"].(
    map[string]interface{})["callResult"].(
    map[string]interface{})["reference"].(string)
  fmt.Println("Member reference is " + memberReference)

  // Get a new seed to form a transfer request.
  seed = getNewSeed()
  // Form a request body for transfer.
  transferReq := requestBodyWithParams{
    JSONRPC: "2.0",
    Method:  "contract.call",
    ID:      id,
    Params:paramsWithReference{ params:params{
      Seed: seed,
      CallSite: "member.transfer",
      CallParams:transferCallParams {
        Amount: "10000000",

        ToMemberReference: "insolar:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX",

      },
      PublicKey: string(pemPublicKey),
    },
      Reference: string(memberReference),
    },
  }
  // Increment the id for future requests:
  id++

  // Send the signed transfer request.
  newTransfer := sendSignedRequest(transferReq, privateKey)
  fee := newTransfer["result"].(
    map[string]interface{})["callResult"].(
      map[string]interface{})["fee"].(string)

  // (Optional) Print out the fee.
  fmt.Println("Fee is " + fee)
}
API requester that uses an existing private key

Attention

In the highlighted lines, replace the placeholders:

  • insolar:XXX... with your XNS address

  • HHH... with your private key

  • YYY... with the XNS address of the recipient

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
package main

import (
   // You will need:
   // - Basic Golang functionality.
   "bytes"
   "fmt"
   "golang.org/x/net/publicsuffix"
   "io/ioutil"
   "log"
   "strconv"
   // - HTTP client and a cookiejar.
   "net/http"
   "net/http/cookiejar"
   // - Big numbers to store signatures.
   "math/big"
   // - Basic cryptography.
   "crypto/rand"
   "crypto/sha256"
   "encoding/asn1"
   "encoding/base64"
   "encoding/json"
   // - Basic encoding capabilities.
   "encoding/pem"
   // - A copy of the standard crypto library with
   //   the ECDSA secp256k1 curve implementation.
   xecdsa "github.com/insolar/x-crypto/ecdsa"
   xelliptic "github.com/insolar/x-crypto/elliptic"
   "github.com/insolar/x-crypto/x509"
)

// Declare a structure to contain the ECDSA signature.
type ecdsaSignature struct {
   R, S *big.Int
}

// Set the endpoint URL to that of TestNet.
const (
   TestNetURL = "https://wallet-api.testnet.insolar.io/api/rpc"
)

// Create and initialize an HTTP client for connection reuse
// and put a cookiejar into it.
var client *http.Client
var jar cookiejar.Jar
func init() {
   // All users of cookiejar should import "golang.org/x/net/publicsuffix"
   jar, err := cookiejar.New(&cookiejar.Options{
      PublicSuffixList: publicsuffix.List})
   if err != nil {
      log.Fatal(err)
   }
   client = &http.Client{
      Jar: jar,
   }
}

// Create a variable for the JSON RPC 2.0 request identifier.
var id int = 1
// The identifier is to be incremented for every request and
// each corresponding response will contain it.

// Declare a nested structure to form requests to Insolar API
// in accordance with the specification.
// The Platform uses the basic JSON RPC 2.0 request structure.
type requestBody struct {
   JSONRPC        string         `json:"jsonrpc"`
   ID             int            `json:"id"`
   Method         string         `json:"method"`
}

type requestBodyWithParams struct {
   JSONRPC        string         `json:"jsonrpc"`
   ID             int            `json:"id"`
   Method         string         `json:"method"`
   // Params is a structure that depends on a particular method.
   Params         interface{}    `json:"params"`
}

// The Platform defines params of the signed request as follows.
type params struct {
   Seed            string       `json:"seed"`
   CallSite        string       `json:"callSite"`
   // CallParams is a structure that depends on a particular method.
   CallParams      interface{}  `json:"callParams"`
   PublicKey       string       `json:"publicKey"`
}

type paramsWithReference struct {
   params
   Reference       string  `json:"reference"`
}

// The member.create request has no parameters,
// so it's an empty structure.
type memberCreateCallParams struct {}

// The transfer request sends an amount of funds to
// the member identified by a reference.
type transferCallParams struct {
   Amount            string    `json:"amount"`
   ToMemberReference string    `json:"toMemberReference"`
}

// Create a function to get a new seed for each signed request.
func getNewSeed() string {
   // Form a request body for getSeed:
   getSeedReq := requestBody{
      JSONRPC: "2.0",
      Method:  "node.getSeed",
      ID:      id,
   }
   // Increment the id for future requests.
   id++

   // Marshal the payload into JSON:
   jsonSeedReq, err := json.Marshal(getSeedReq)
   if err != nil {
      log.Fatalln(err)
   }

   // Create a new HTTP request and send it.
   seedReq, err := http.NewRequest("POST", TestNetURL,
      bytes.NewBuffer(jsonSeedReq))
   if err != nil {
      log.Fatalln(err)
   }
   seedReq.Header.Set("Content-Type", "application/json")

   // Perform the request.
   seedResponse, err := client.Do(seedReq)
   if err != nil {
      log.Fatalln(err)
   }
   defer seedReq.Body.Close()

   // Receive the response body.
   seedRespBody, err := ioutil.ReadAll(seedResponse.Body)
   if err != nil {
      log.Fatalln(err)
   }

   // Unmarshal the response.
   var newSeed map[string]interface{}
   err = json.Unmarshal(seedRespBody, &newSeed)
   if err != nil {
      log.Fatalln(err)
   }

   // (Optional) Print the request and its response.
   print := "POST to " + TestNetURL +
      "\nPayload: " + string(jsonSeedReq) +
      "\nResponse status code: " +  strconv.Itoa(seedResponse.StatusCode) +
      "\nResponse: " + string(seedRespBody) + "\n"
   fmt.Println(print)

   // Retrieve and return the current seed.
   return newSeed["result"].(map[string]interface{})["seed"].(string)
}

// Create a function to send signed requests.
func sendSignedRequest(payload requestBodyWithParams,
   privateKey *xecdsa.PrivateKey) map[string]interface{} {
   // Marshal the payload into JSON:
   jsonPayload, err := json.Marshal(payload)
   if err != nil {
      log.Fatalln(err)
   }

   // Take a SHA-256 hash of the payload's bytes.
   hash := sha256.Sum256(jsonPayload)

   // Sign the hash with the private key.
   r, s, err := xecdsa.Sign(rand.Reader, privateKey, hash[:])
   if err != nil {
      log.Fatalln(err)
   }

   // Convert the signature into ASN.1 DER format.
   sig := ecdsaSignature{
      R: r,
      S: s,
   }
   signature, err := asn1.Marshal(sig)
   if err != nil {
      log.Fatalln(err)
   }

   // Convert both hash and signature into a Base64 string.
   hash64 := base64.StdEncoding.EncodeToString(hash[:])
   signature64 := base64.StdEncoding.EncodeToString(signature)

   // Create a new request and set its headers.
   request, err := http.NewRequest("POST", TestNetURL,
      bytes.NewBuffer(jsonPayload))
   if err != nil {
      log.Fatalln(err)
   }
   request.Header.Set("Content-Type", "application/json")

   // Put the hash string into the HTTP Digest header.
   request.Header.Set("Digest", "SHA-256="+hash64)

   // Put the signature string into the HTTP Signature header.
   request.Header.Set("Signature", "keyId=\"public-key\", " +
      "algorithm=\"ecdsa\", headers=\"digest\", signature="+signature64)

   // Send the signed request.
   response, err := client.Do(request)
   if err != nil {
      log.Fatalln(err)
   }
   defer response.Body.Close()

   // Receive the response body.
   responseBody, err := ioutil.ReadAll(response.Body)
   if err != nil {
      log.Fatalln(err)
   }

   // Unmarshal it into a JSON object.
   var JSONObject map[string]interface{}
   err = json.Unmarshal(responseBody, &JSONObject)
   if err != nil {
      log.Fatalln(err)
   }

   // (Optional) Print the request and its response.
   print := "POST to " + TestNetURL +
      "\nPayload: " + string(jsonPayload) +
      "\nResponse status code: " + strconv.Itoa(response.StatusCode) +
      "\nResponse: " + string(responseBody) + "\n"
   fmt.Println(print)

   // Return the response.
   return JSONObject
}

// Create the main function to form and send signed requests.
func main() {
    // Log in to your Insolar Wallet, copy the XNS account address,
   // allocate a variable for it, and paste the value (replace the Xs).
   memberReference := "insolar:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"

   // In the Wallet, open Settings > Reveal private key, enter your password,
   // copy the key, allocate a variable for it, and paste the value (replace the Hs).
   hexPrivate := "HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH"

   // Declare a new big int variable, specify the key as its value,
   // and set its format to base 16.
   i := new(big.Int)
   i.SetString(hexPrivate,16)

   // Create a new elliptic curve and feed the value to it
   // to get the X and Y values of the public key.
   privateKey := new(xecdsa.PrivateKey)
   privateKey.PublicKey.Curve = xelliptic.P256K()
   privateKey.D = i
   privateKey.PublicKey.X, privateKey.PublicKey.Y = xelliptic.P256K(
      ).ScalarBaseMult(i.Bytes())

   // Convert the private key to PEM.
   x509Encoded, err := x509.MarshalPKCS8PrivateKey(privateKey)
   if err != nil {
      panic(err)
   }
   pemPrivateKey := pem.EncodeToMemory(&pem.Block{Type:
      "PRIVATE KEY", Bytes: x509Encoded})

   // Convert the public key to PEM.
   x509EncodedPub, err := x509.MarshalPKIXPublicKey(&privateKey.PublicKey)
   if err != nil {
      panic(err)
   }
   pemPublicKey := pem.EncodeToMemory(&pem.Block{Type:
      "PUBLIC KEY", Bytes: x509EncodedPub})
   // (Optional) Print the key pair.
   fmt.Println(string(pemPrivateKey))
   fmt.Println(string(pemPublicKey))

   // Get a new seed to form a transfer request.
   seed := getNewSeed()
   // Form a request body for transfer:
   transferReq := requestBodyWithParams{
      JSONRPC: "2.0",
      Method:  "contract.call",
      ID:      id,
      Params:paramsWithReference{ params:params{
         Seed: seed,
         CallSite: "member.transfer",
         CallParams:transferCallParams {
            Amount: "10000000",
            ToMemberReference: "insolar:YYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYY",
         },
         PublicKey: string(pemPublicKey),
      },
         Reference: string(memberReference),
      },
   }
   // Increment the id for future requests.
   id++

   // Send the signed transfer request.
   newTransfer := sendSignedRequest(transferReq, privateKey)
   fee := newTransfer["result"].(
      map[string]interface{})["callResult"].(
         map[string]interface{})["fee"].(string)

   // (Optional) Print out the fee.
   fmt.Println("Fee is " + fee)
}