Administrators and Key Users

Administrator

An Admin User can be used to make changes to the system (see below), but is not allowed to create or use keys.

Create client with administrator permissions

adminClient, err := tsm.NewPasswordClientFromCredentials(adminCreds)
if err != nil {
        panic(err)
}

For the examples below, the adminClient refers to the code above.

Create Key User

usersClient = tsm.NewUsersClient(adminClient)
userCreds, err := usersClient.CreatePasswordUser("user", "")

Pinging

err := adminClient.AuthenticatedPing(0) // node index as parameter, only nodes controlled by this SDK

Pause - resume

err = adminClient.Pause()

// Now key generation and reshare is not allowed
// but these are operations are backup safe and can be performed (using ECDSA as example)
// ecdsaClient.PublicKey(keyID, nil)
// ecdsaClient.Sign(keyID, nil, messageHash[:])
// ecdsaClient.PresigGen(keyID, 10)
// ecdsaClient.PartialSignWithPresig(keyID, "", nil, messageHash[:])

err = admClient.Resume()
// Key generation and reshare allowed

Reset password

usersClient := tsm.NewUsersClient(adminClient)
newCredentials, err := usersClient.ResetPassword(credentials.UserID)

Disable + enable users

usersClient := tsm.NewUsersClient(adminClient)
err := usersClient.Disable(credentials.UserID)
// User is not allowed to perform operations, but is not deleted

err = usersClient.Enable(credentials.UserID)
// User can perform operations

Key User

A Key User (or Password User) is used to create keys, and to use these keys for signing. Keys are locked to the Key User who created the key.

Text

client, err := tsm.NewPasswordClientFromCredentials(userCreds)
if err != nil {
        panic(err)
}

For the examples below, the client refers to the code above.

Generate key

ecdsaClient := tsm.NewECDSAClient(client)
curveName := "secp256k1"
keyID, err := ecdsaClient.Keygen(curveName)