[FAB-9644] Interfaces for pluggable endorsement/valid

This change set adds interfaces for the pluggable endorsement and validation.

Change-Id: I51d1cbf55e7b01ec0bf173fe9a92f953591af448
Signed-off-by: yacovm <yacovm@il.ibm.com>

Author: yacovm

core/handlers/endorsement/api/endorsement.go

@@ -0,0 +1,40 @@
+/*
+Copyright IBM Corp. All Rights Reserved.
+
+SPDX-License-Identifier: Apache-2.0
+*/
+
+package endorsement
+
+import (
+	"github.com/hyperledger/fabric/protos/peer"
+)
+
+// Argument defines the argument for endorsement
+type Argument interface {
+	Dependency
+	// Arg returns the bytes of the argument
+	Arg() []byte
+}
+
+// Dependency marks a dependency passed to the Init() method
+type Dependency interface {
+}
+
+// Plugin endorses a proposal response
+type Plugin interface {
+	// Endorse signs the given payload(ProposalResponsePayload bytes), and optionally mutates it.
+	// Returns:
+	// The Endorsement: A signature over the payload, and an identity that is used to verify the signature
+	// The payload that was given as input (could be modified within this function)
+	// Or error on failure
+	Endorse(payload []byte, sp *peer.SignedProposal) (*peer.Endorsement, []byte, error)
+
+	// Init injects dependencies into the instance of the Plugin
+	Init(dependencies ...Dependency) error
+}
+
+// PluginFactory creates a new instance of a Plugin
+type PluginFactory interface {
+	New() Plugin
+}

core/handlers/endorsement/api/identities/identities.go

@@ -0,0 +1,29 @@
+/*
+Copyright IBM Corp. All Rights Reserved.
+
+SPDX-License-Identifier: Apache-2.0
+*/
+
+package endorsement
+
+import (
+	"github.com/hyperledger/fabric/core/handlers/endorsement/api"
+	"github.com/hyperledger/fabric/protos/peer"
+)
+
+// SigningIdentity signs messages and serializes its public identity to bytes
+type SigningIdentity interface {
+	// Serialize returns a byte representation of this identity which is used to verify
+	// messages signed by this SigningIdentity
+	Serialize() ([]byte, error)
+
+	// Sign signs the given payload and returns a signature
+	Sign([]byte) ([]byte, error)
+}
+
+// SigningIdentityFetcher fetches a signing identity based on the proposal
+type SigningIdentityFetcher interface {
+	endorsement.Dependency
+	// SigningIdentityForRequest returns a signing identity for the given proposal
+	SigningIdentityForRequest(*peer.SignedProposal) (SigningIdentity, error)
+}

core/handlers/endorsement/api/state/state.go

@@ -0,0 +1,25 @@
+/*
+Copyright IBM Corp. All Rights Reserved.
+
+SPDX-License-Identifier: Apache-2.0
+*/
+
+package endorsement
+
+import (
+	"github.com/hyperledger/fabric/core/handlers/endorsement/api"
+	"github.com/hyperledger/fabric/protos/ledger/rwset"
+)
+
+// State defines interaction with the world state
+type State interface {
+	endorsement.Dependency
+	// GetPrivateDataMultipleKeys gets the values for the multiple private data items in a single call
+	GetPrivateDataMultipleKeys(namespace, collection string, keys []string) ([][]byte, error)
+
+	// GetStateMultipleKeys gets the values for multiple keys in a single call
+	GetStateMultipleKeys(namespace string, keys []string) ([][]byte, error)
+
+	// GetTransientByTXID gets the values private data associated with the given txID
+	GetTransientByTXID(txID string) ([]*rwset.TxPvtReadWriteSet, error)
+}

core/handlers/validation/api/identities/identities.go

@@ -0,0 +1,59 @@
+/*
+Copyright IBM Corp. All Rights Reserved.
+
+SPDX-License-Identifier: Apache-2.0
+*/
+
+package validation
+
+import (
+	"github.com/hyperledger/fabric/core/handlers/validation/api"
+	"github.com/hyperledger/fabric/protos/msp"
+)
+
+// IdentityDeserializer converts serialized identities
+// to identities.
+type IdentityDeserializer interface {
+	validation.Dependency
+	// DeserializeIdentity deserializes an identity.
+	// Deserialization will fail if the identity is associated to
+	// an msp that is different from this one that is performing
+	// the deserialization.
+	DeserializeIdentity(serializedIdentity []byte) (Identity, error)
+}
+
+// Identity interface defining operations associated to a "certificate".
+// That is, the public part of the identity could be thought to be a certificate,
+// and offers solely signature verification capabilities. This is to be used
+// at the peer side when verifying certificates that transactions are signed
+// with, and verifying signatures that correspond to these certificates.///
+type Identity interface {
+	// Validate uses the rules that govern this identity to validate it.
+	Validate() error
+
+	// SatisfiesPrincipal checks whether this instance matches
+	// the description supplied in MSPPrincipal. The check may
+	// involve a byte-by-byte comparison (if the principal is
+	// a serialized identity) or may require MSP validation
+	SatisfiesPrincipal(principal *msp.MSPPrincipal) error
+
+	// Verify a signature over some message using this identity as reference
+	Verify(msg []byte, sig []byte) error
+
+	// GetIdentityIdentifier returns the identifier of that identity
+	GetIdentityIdentifier() *IdentityIdentifier
+
+	// GetMSPIdentifier returns the MSP Id for this instance
+	GetMSPIdentifier() string
+}
+
+// IdentityIdentifier is a holder for the identifier of a specific
+// identity, naturally namespaced, by its provider identifier.
+type IdentityIdentifier struct {
+
+	// The identifier of the associated membership service provider
+	Mspid string
+
+	// The identifier for an identity within a provider
+	Id string
+}

core/handlers/validation/api/state/state.go

@@ -0,0 +1,35 @@
+/*
+Copyright IBM Corp. All Rights Reserved.
+
+SPDX-License-Identifier: Apache-2.0
+*/
+
+package validation
+
+import "github.com/hyperledger/fabric/core/handlers/validation/api"
+
+// State defines interaction with the world state
+type State interface {
+	validation.Dependency
+	// GetStateMultipleKeys gets the values for multiple keys in a single call
+	GetStateMultipleKeys(namespace string, keys []string) ([][]byte, error)
+
+	// GetStateRangeScanIterator returns an iterator that contains all the key-values between given key ranges.
+	// startKey is included in the results and endKey is excluded. An empty startKey refers to the first available key
+	// and an empty endKey refers to the last available key. For scanning all the keys, both the startKey and the endKey
+	// can be supplied as empty strings. However, a full scan should be used judiciously for performance reasons.
+	// The returned ResultsIterator contains results of type *KV which is defined in protos/ledger/queryresult.
+	GetStateRangeScanIterator(namespace string, startKey string, endKey string) (ResultsIterator, error)
+}
+
+// ResultsIterator - an iterator for query result set
+type ResultsIterator interface {
+	// Next returns the next item in the result set. The `QueryResult` is expected to be nil when
+	// the iterator gets exhausted
+	Next() (QueryResult, error)
+	// Close releases resources occupied by the iterator
+	Close()
+}
+
+// QueryResult - a general interface for supporting different types of query results. Actual types differ for different queries
+type QueryResult interface{}

core/handlers/validation/api/validation.go

@@ -0,0 +1,35 @@
+/*
+Copyright IBM Corp. All Rights Reserved.
+
+SPDX-License-Identifier: Apache-2.0
+*/
+
+package validation
+
+import "github.com/hyperledger/fabric/protos/common"
+
+// Argument defines the argument for validation
+type Argument interface {
+	Dependency
+	// Arg returns the bytes of the argument
+	Arg() []byte
+}
+
+// Dependency marks a dependency passed to the Init() method
+type Dependency interface {
+}
+
+// Plugin validates transactions
+type Plugin interface {
+	// Validate returns nil if the action at the given position inside the transaction
+	// at the given position in the given block is valid, or an error if not.
+	Validate(block *common.Block, namespace string, txPosition int, actionPosition int) error
+
+	// Init injects dependencies into the instance of the Plugin
+	Init(dependencies ...Dependency) error
+}
+
+// PluginFactory creates a new instance of a Plugin
+type PluginFactory interface {
+	New() Plugin
+}