@@ -12,6 +12,12 @@ import { makeBridgeManager } from './bridge';
12
12
13
13
const NUM_IBC_PORTS = 3 ;
14
14
15
+ // The old way of provisioning used an environment variable that
16
+ // was an account ACL. The new way uses "provisionpass", a
17
+ // "bearer token" that is checked in handler.go before a provision
18
+ // transaction is even sent to the JS side.
19
+ const FIXME_DEPRECATED_BOOT_ADDRESS = true ;
20
+
15
21
console . debug ( `loading bootstrap.js` ) ;
16
22
17
23
function parseArgs ( argv ) {
@@ -214,9 +220,6 @@ export default function setup(syscall, state, helpers) {
214
220
async fromBridge ( _srcID , obj ) {
215
221
switch ( obj . type ) {
216
222
case 'PLEASE_PROVISION' : {
217
- if ( ! packetSendersWhitelist . includes ( obj . submitter ) ) {
218
- throw Error ( 'Permission denied' ) ;
219
- }
220
223
const { nickname, address } = obj ;
221
224
return E ( vats . provisioning )
222
225
. pleaseProvision ( nickname , address , PROVISIONER_INDEX )
@@ -321,7 +324,7 @@ export default function setup(syscall, state, helpers) {
321
324
322
325
D ( devices . mailbox ) . registerInboundHandler ( vats . vattp ) ;
323
326
await E ( vats . vattp ) . registerMailboxDevice ( devices . mailbox ) ;
324
- if ( bootAddress ) {
327
+ if ( FIXME_DEPRECATED_BOOT_ADDRESS && bootAddress ) {
325
328
// FIXME: The old way: register egresses for the addresses.
326
329
await Promise . all (
327
330
[ bootAddress , ...additionalAddresses ] . map ( addr =>
@@ -349,23 +352,25 @@ export default function setup(syscall, state, helpers) {
349
352
// Must occur after makeChainBundler.
350
353
await registerNetworkProtocols ( vats , bridgeManager , pswl ) ;
351
354
352
- // accept provisioning requests from the controller
353
- const provisioner = harden ( {
354
- pleaseProvision ( nickname , pubkey ) {
355
- console . debug ( 'Provisioning' , nickname , pubkey ) ;
356
- return E ( vats . provisioning ) . pleaseProvision (
357
- nickname ,
358
- pubkey ,
359
- PROVISIONER_INDEX ,
360
- ) ;
361
- } ,
362
- } ) ;
363
- // bootAddress holds the pubkey of controller
364
- await E ( vats . comms ) . addEgress (
365
- bootAddress ,
366
- KEY_REG_INDEX ,
367
- provisioner ,
368
- ) ;
355
+ if ( FIXME_DEPRECATED_BOOT_ADDRESS && bootAddress ) {
356
+ // accept provisioning requests from the controller
357
+ const provisioner = harden ( {
358
+ pleaseProvision ( nickname , pubkey ) {
359
+ console . debug ( 'Provisioning' , nickname , pubkey ) ;
360
+ return E ( vats . provisioning ) . pleaseProvision (
361
+ nickname ,
362
+ pubkey ,
363
+ PROVISIONER_INDEX ,
364
+ ) ;
365
+ } ,
366
+ } ) ;
367
+ // bootAddress holds the pubkey of controller
368
+ await E ( vats . comms ) . addEgress (
369
+ bootAddress ,
370
+ KEY_REG_INDEX ,
371
+ provisioner ,
372
+ ) ;
373
+ }
369
374
break ;
370
375
}
371
376
case 'controller' :
@@ -447,22 +452,23 @@ export default function setup(syscall, state, helpers) {
447
452
) ;
448
453
449
454
await registerNetworkProtocols ( vats , bridgeManager , pswl ) ;
450
-
451
- const demoProvider = harden ( {
452
- // build a chain-side bundle for a client.
453
- async getDemoBundle ( nickname ) {
454
- return chainBundler . createUserBundle ( nickname ) ;
455
- } ,
456
- } ) ;
457
- await Promise . all (
458
- [ bootAddress , ...additionalAddresses ] . map ( addr =>
459
- E ( vats . comms ) . addEgress (
460
- addr ,
461
- PROVISIONER_INDEX ,
462
- demoProvider ,
455
+ if ( FIXME_DEPRECATED_BOOT_ADDRESS && bootAddress ) {
456
+ const demoProvider = harden ( {
457
+ // build a chain-side bundle for a client.
458
+ async getDemoBundle ( nickname ) {
459
+ return chainBundler . createUserBundle ( nickname ) ;
460
+ } ,
461
+ } ) ;
462
+ await Promise . all (
463
+ [ bootAddress , ...additionalAddresses ] . map ( addr =>
464
+ E ( vats . comms ) . addEgress (
465
+ addr ,
466
+ PROVISIONER_INDEX ,
467
+ demoProvider ,
468
+ ) ,
463
469
) ,
464
- ) ,
465
- ) ;
470
+ ) ;
471
+ }
466
472
break ;
467
473
}
468
474
case 'two_client' : {
0 commit comments