Understanding the KeepKey Template
SDK example Repo: https://github.com/BitHighlander/keepkey-template
Quick get started
npx degit BitHighlander/keepkey-template your app name
Topics:
KeepKey: buy a keepkey, Keepkey.com
KeepKey REST api: https://medium.com/@highlander_35968/understanding-the-keepkey-rest-api-f9801b5db220
Swagger: https://swagger.io/
lets get Started:
Import the SDK into your project.
`` const onStart = async function () {
try {
const spec = "http://localhost:1646/spec/swagger.json";
const apiKey = localStorage.getItem("apiKey") || "1234";
const config = {
apiKey,
pairingInfo: {
name: "KeepKey-template Demo App",
imageUrl:
"
",
basePath: spec,
url: "http://localhost:1646",
},
};
// init
const sdk = await KeepKeySdk.create(config);
if (config.apiKey !== apiKey)
localStorage.setItem("apiKey", config.apiKey);
};
// onstart get data
useEffect(() => {
onStart();
}, []);
useEffect(() => { onStart(); }, []);
Lets go over the config:
spec: The url hosting the api specification. The keepkey rest api swagger.jon is a formal specification for all the interactions of your keepkey.
apiKey: every new application that requests to communicate with your keepkey will be issues an apiKey. The application must store this apiKey in order to avoid the user needing to re-approve this application for communication.
imageUrl: the dapp should host a image for the user to recognize the dapp on the pairing screen.
url: the url is the domain the dapp is hosted on. KeepKey desktop will remember these URL’s and allow users to return to your dapp from inside keepkey desktop itself. This prevents common attacks related to phishing
Notes on API docs:
View the swagger docs directly:
link: http://localhost:1646/docs
Auth:
Lets talk about auth. this line
const sdk = await KeepKeySdk.create(config);
if (config.apiKey !== apiKey)
localStorage.setItem("apiKey", config.apiKey);
Note that the config object passed into the keepkey sdk package is mutated. The apiKey issued by the KeepKey desktop application is returned to the sdk package and added to the config.
In this example we set the value into local storage. The ensures that when the user returns to this application they will not be forced to accept a pairing again.
Notes: It’s important to understand an apiKey pairing does not allow an application to spend your money. Every transaction still required user interaction via the physical KeepKey. It only allows pubkey keys to be given to the application as needed to build transactions and report balances. It also allows an application to submit transactions to be signed by the device. Users may revoke these keys at any time, and all communication is logged and auditable via these apiKeys.
Features:
code:
const featuresKK = await sdk.system.info.getFeatures();
Pubkeys:
We use the SDK to get the publicKey for Dash
let path =
{
symbol: 'DASH',
address_n: [0x80000000 + 44, 0x80000000 + 5, 0x80000000 + 0],
coin: 'Bitcoin',
script_type: 'p2pkh',
showDisplay: false
}
let responsePubkey = await sdk.system.info.getPublicKey(path)
console.log("responsePubkey: ", responsePubkey)
console.log("responsePubkey: ", responsePubkey.xpub)
Note that the path for DASH is 5. as found on > https://github.com/satoshilabs/slips/blob/master/slip-0044.md
And Finally we get the xpub for dash returned.
Sign TX:
UTXO example:
inputs = [
{
addressNList: [2147483692, 2147483653, 2147483648, 0, 0],
scriptType: "p2pkh",
amount: String(390000),
vout: 0,
txid: "d5f65ee80147b4bcc70b75e4bbf2d7382021b871bd8867ef8fa525ef50864882",
tx: input,
},
];
outputs = [
{
address: "1MJ2tj2ThBE62zXbBYA5ZaN3fdve5CPAz1",
addressType: "spend",
// scriptType: core.BTCOutputScriptType.PayToAddress,
amount: String(390000 - 10000),
isChange: false,
},
];
input = {
coin: "Bitcoin",
inputs,
outputs,
version: 1,
locktime: 0,
};
// @ts-ignore
console.log("Sign! ", JSON.stringify(input));
console.log("sdk: ", sdk);
console.log("sdk: ", sdk.utxo);
// @ts-ignore
responseSign = await sdk.utxo.utxoSignTransaction(input);
AddressNList: Is the path the pubkey is on
isChange: when marked the KeepKey will verify the address is owned by the Keepkey and display this to the user. This prevent accidental loss of funds by using a change address not owned by your wallet.
scriptType: A script type in the context of Bitcoin refers to a specific set of instructions that dictate how a transaction’s output can be spent. It defines the conditions that need to be met for the recipient to access the funds. One common script type is P2PKH (Pay-to-Public-Key-Hash), where funds can only be spent if the recipient can prove ownership of the private key corresponding to a specific public key hash. Different script types enable various transaction complexities and features on the Bitcoin network.
Twitter:KeepkeyDevs
Discord: https://discord.gg/jKZ2ShRmbA
We are having a problem with the formatting of codes in posts, we apologize for that
Posted Using LeoFinance Alpha
Congratulations @keepkey! You have completed the following achievement on the Hive blockchain And have been rewarded with New badge(s)
Your next target is to reach 300 upvotes.
You can view your badges on your board and compare yourself to others in the Ranking
If you no longer want to receive notifications, reply to this comment with the word
STOPCheck out our last posts: