IOST multiple signature

multi_sig.sh

set -eu

TEST_USER_ID="testname"
GROUP="group"

function init_account() {
	pubkey1=2ott3o9CZcaoZCe4nGYo1azEfEpY4W771GBFe133WW1p
	seckey1=3MWryACc5nSxRDJCJLe9Xq2spR1j7d5wYbZ4pZN4SvfgUxhG497DQxo5ahENoCnDkLsc7haSveP1q1zkt26JWhog
	iwallet account import $TEST_USER_ID $seckey1
	iwallet --account admin account create $TEST_USER_ID --owner $pubkey1 --active $pubkey1 --initial_balance 20 --initial_ram 20000 --initial_gas_pledge 200
	iwallet --account admin account create manager1 --initial_balance 20 --initial_ram 20000 --initial_gas_pledge 200
	iwallet --account admin account create manager2 --initial_balance 20 --initial_ram 20000 --initial_gas_pledge 200
	iwallet --account admin account create manager3 --initial_balance 20 --initial_ram 20000 --initial_gas_pledge 200
	
	# First, add three items for the active/owner permission. 
	# Then, remove the old keypairs.
	# Finally, since 34 + 34 + 34 > 100(100 is the default permission threshold), only when these three users all sign the tx can the tx be succeesfully sent and run.
	iwallet --account $TEST_USER_ID call \
		auth.iost assignPermission \[\"$TEST_USER_ID\",\"active\",\"manager1@active\",34\] \
		auth.iost assignPermission \[\"$TEST_USER_ID\",\"active\",\"manager2@active\",34\] \
		auth.iost assignPermission \[\"$TEST_USER_ID\",\"active\",\"manager3@active\",34\] \
		auth.iost revokePermission \[\"$TEST_USER_ID\",\"active\",\"$pubkey1\"\] \
		auth.iost assignPermission \[\"$TEST_USER_ID\",\"owner\",\"manager1@active\",34\] \
		auth.iost assignPermission \[\"$TEST_USER_ID\",\"owner\",\"manager2@active\",34\] \
		auth.iost assignPermission \[\"$TEST_USER_ID\",\"owner\",\"manager3@active\",34\] \
		auth.iost revokePermission \[\"$TEST_USER_ID\",\"owner\",\"$pubkey1\"\]
}

function test_singlesig_fail() {
	# We expected the old keypair is invalid now
	iwallet --account $TEST_USER_ID call token.iost transfer [\"iost\",\"$TEST_USER_ID\",\"admin\",\"10\",\"\"] && (echo "should fail, but succeed"; exit 1) || echo "command failed as expected"
}

function test_multisig_usage() {
	delay_seconds=5 # In practice, since you need to send tx file to different persons and collect their signatures, 600(10 minutes) or 1200(20 minutes) may be a better choice for this parameter.  
	actionStr="[\"iost\",\"$TEST_USER_ID\",\"admin\",\"10\",\"\"]"
	txStr="--tx_time_delay $delay_seconds token.iost transfer $actionStr"
	txFile="tx.json"
	# First, the operator generates the tx file.
	iwallet call --output $txFile $txStr
	# Then, diffrent users sign the tx file and generate signature files seperately. 
	# Following commands are assumed to be run by different persons, on different machines.
	iwallet sign --as_publisher_sign $txFile ~/.iwallet/manager1.json sig2
	iwallet sign --as_publisher_sign $txFile ~/.iwallet/manager2.json sig3
	iwallet sign --as_publisher_sign $txFile ~/.iwallet/manager3.json sig4
	# Finally, the operator send to signed tx to the blockchain.
	iwallet --account $TEST_USER_ID send --signature_files sig2,sig3,sig4 --as_publisher_sign $txFile || (echo "should succeed, but fail"; exit 1)
}

init_account
test_multisig_usage
test_singlesig_fail
echo "multisig test succeed!"