[VM2] Support authorization keys

executor/wasm/src/lib.rs

@@ -379,6 +379,7 @@ impl ExecutorV2 {
                     .with_parent_block_hash(parent_block_hash)
                     .with_block_height(block_height)
                     .with_runtime_native_config(runtime_native_config)
+                    .with_authorization_keys(BTreeSet::from_iter([initiator]))
                     .build()
                     .map_err(InstallContractError::FailedBuildingExecuteRequest)?;
 
@@ -499,6 +500,7 @@ impl ExecutorV2 {
             block_height,
             sandboxed,
             runtime_native_config,
+            authorization_keys,
         } = execute_request;
 
         let (entity_addr, source_purse) = get_purse_for_entity(&mut tracking_copy, caller_key)?;
@@ -577,6 +579,7 @@ impl ExecutorV2 {
                                     block_info,
                                     transaction_hash,
                                     gas_limit,
+                                    authorization_keys.clone(),
                                 );
                             }
                             EntityKind::SmartContract(ContractRuntimeTag::VmCasperV2) => {
@@ -686,6 +689,7 @@ impl ExecutorV2 {
                             block_info,
                             transaction_hash,
                             gas_limit,
+                            authorization_keys,
                         );
                     }
                     Some(stored_value) => {
@@ -752,6 +756,7 @@ impl ExecutorV2 {
             runtime_native_config,
             parent_block_hash: parent_block_hash.inner().value(),
             block_height,
+            authorization_keys,
         };
 
         // Check that the input argument size does not exceed the VM memory limit
@@ -887,11 +892,16 @@ impl ExecutorV2 {
         block_info: BlockInfo,
         transaction_hash: TransactionHash,
         gas_limit: u64,
+        authorization_keys: BTreeSet<AccountHash>,
     ) -> Result<ExecuteResult, ExecuteError>
     where
         R: GlobalStateReader + 'static,
     {
-        let authorization_keys = BTreeSet::from_iter([initiator]);
+        let authorization_keys = if authorization_keys.is_empty() {
+            BTreeSet::from_iter([initiator])
+        } else {
+            authorization_keys
+        };
         let initiator_addr = InitiatorAddr::AccountHash(initiator);
         let executable_item =
             ExecutableItem::Invocation(TransactionInvocationTarget::ByHash(entity_addr.value()));
@@ -1112,6 +1122,7 @@ impl Executor for ExecutorV2 {
             .with_block_height(request.block_height)
             .with_sandboxed(true) // Enable sandboxed mode
             .with_runtime_native_config(runtime_native_config)
+            .with_authorization_keys(BTreeSet::from_iter([request.initiator]))
             .build()
             .map_err(|error| {
                 ExecuteError::InternalHost(InternalHostError::ExecuteRequestBuildFailure(error))

executor/wasm/src/testing.rs

@@ -1,4 +1,5 @@
 use std::{
+    collections::BTreeSet,
     env, fs,
     path::{Path, PathBuf},
     sync::Arc,
@@ -157,6 +158,7 @@ pub fn base_execute_builder(chainspec_config: &ChainspecConfig) -> ExecuteReques
         .with_runtime_native_config(make_runtime_config(chainspec_config))
         .with_parent_block_hash(BlockHash::new(Digest::hash(b"block1")))
         .with_runtime_native_config(runtime_native_config)
+        .with_authorization_keys(BTreeSet::from_iter([*DEFAULT_ACCOUNT_HASH]))
 }
 
 pub fn make_runtime_config(chainspec_config: &ChainspecConfig) -> RuntimeNativeConfig {

executor/wasm/tests/ee_966.rs

@@ -1,4 +1,4 @@
-use std::sync::Arc;
+use std::{collections::BTreeSet, sync::Arc};
 
 use bytes::Bytes;
 use casper_execution_engine::engine_state::ExecutionEngineV1;
@@ -94,6 +94,7 @@ fn argument_size_exceeds_memory_limit() {
         .with_block_height(1)
         .with_parent_block_hash(BlockHash::new(Digest::hash(b"block1")))
         .with_runtime_native_config(runtime_native_config)
+        .with_authorization_keys(BTreeSet::from_iter([*DEFAULT_ACCOUNT_HASH]))
         .build()
         .expect("should build");
     let result = executor.execute_with_provider(state_root_hash, &global_state, execute_request);
@@ -135,6 +136,7 @@ fn should_run_ee_966_with_zero_min_and_zero_max_memory() {
         .with_block_height(1)
         .with_parent_block_hash(BlockHash::new(Digest::hash(b"block1")))
         .with_runtime_native_config(runtime_native_config)
+        .with_authorization_keys(BTreeSet::from_iter([*DEFAULT_ACCOUNT_HASH]))
         .build()
         .expect("should build");
 
@@ -173,6 +175,7 @@ fn should_run_ee_966_cant_have_too_much_initial_memory() {
         .with_block_height(1)
         .with_parent_block_hash(BlockHash::new(Digest::hash(b"block1")))
         .with_runtime_native_config(runtime_native_config)
+        .with_authorization_keys(BTreeSet::from_iter([*DEFAULT_ACCOUNT_HASH]))
         .build()
         .expect("should build");
 
@@ -217,6 +220,7 @@ fn should_run_ee_966_cant_have_too_much_max_memory() {
         .with_block_height(1)
         .with_parent_block_hash(BlockHash::new(Digest::hash(b"block1")))
         .with_runtime_native_config(runtime_native_config)
+        .with_authorization_keys(BTreeSet::from_iter([*DEFAULT_ACCOUNT_HASH]))
         .build()
         .expect("should build");
 
@@ -261,6 +265,7 @@ fn should_run_ee_966_cant_have_way_too_much_max_memory() {
         .with_block_height(1)
         .with_parent_block_hash(BlockHash::new(Digest::hash(b"block1")))
         .with_runtime_native_config(runtime_native_config)
+        .with_authorization_keys(BTreeSet::from_iter([*DEFAULT_ACCOUNT_HASH]))
         .build()
         .expect("should build");
 
@@ -305,6 +310,7 @@ fn should_run_ee_966_cant_have_larger_initial_than_max_memory() {
         .with_block_height(1)
         .with_parent_block_hash(BlockHash::new(Digest::hash(b"block1")))
         .with_runtime_native_config(runtime_native_config)
+        .with_authorization_keys(BTreeSet::from_iter([*DEFAULT_ACCOUNT_HASH]))
         .build()
         .expect("should build");
 
@@ -354,6 +360,7 @@ fn should_run_ee_966_should_request_exactly_maximum_as_initial() {
         .with_block_height(1)
         .with_parent_block_hash(BlockHash::new(Digest::hash(b"block1")))
         .with_runtime_native_config(runtime_native_config)
+        .with_authorization_keys(BTreeSet::from_iter([*DEFAULT_ACCOUNT_HASH]))
         .build()
         .expect("should build");
 
@@ -394,6 +401,7 @@ fn should_run_ee_966_should_request_exactly_maximum() {
         .with_block_height(1)
         .with_parent_block_hash(BlockHash::new(Digest::hash(b"block1")))
         .with_runtime_native_config(runtime_native_config)
+        .with_authorization_keys(BTreeSet::from_iter([*DEFAULT_ACCOUNT_HASH]))
         .build()
         .expect("should build");
 
@@ -433,6 +441,7 @@ fn should_run_ee_966_regression_fail_when_growing_mem_past_max() {
         .with_block_height(1)
         .with_parent_block_hash(BlockHash::new(Digest::hash(b"block1")))
         .with_runtime_native_config(runtime_native_config)
+        .with_authorization_keys(BTreeSet::from_iter([*DEFAULT_ACCOUNT_HASH]))
         .build()
         .expect("should build");
 

executor/wasm_host/src/context.rs

@@ -1,4 +1,4 @@
-use std::sync::Arc;
+use std::{collections::BTreeSet, sync::Arc};
 
 use bytes::Bytes;
 use casper_executor_wasm_interface::executor::Executor;
@@ -47,4 +47,6 @@ pub struct Context<S: GlobalStateReader, E: Executor> {
     pub sandboxed: bool,
     /// Runtime native config.
     pub runtime_native_config: RuntimeNativeConfig,
+    /// Authorization keys for this execution.
+    pub authorization_keys: BTreeSet<AccountHash>,
 }

executor/wasm_host/src/host.rs

@@ -934,6 +934,7 @@ pub fn casper_create<S: GlobalStateReader + 'static, E: Executor + 'static>(
                 .with_block_height(1) // TODO: Carry on block height
                 .with_parent_block_hash(BlockHash::new(Digest::from_raw([0; 32]))) // TODO: Carry on parent block hash
                 .with_runtime_native_config(caller.context().runtime_native_config.clone())
+                .with_authorization_keys(caller.context().authorization_keys.clone())
                 .build()
                 .map_err(InternalHostError::ExecuteRequestBuildFailure)?;
 
@@ -1084,6 +1085,7 @@ pub fn casper_system<S: GlobalStateReader + 'static, E: Executor + 'static>(
         .with_block_height(1) // TODO: Carry on block height
         .with_parent_block_hash(BlockHash::new(Digest::from_raw([0; 32]))) // TODO: Carry on parent block hash
         .with_runtime_native_config(caller.context().runtime_native_config.clone())
+        .with_authorization_keys(caller.context().authorization_keys.clone())
         .build()
         .map_err(InternalHostError::ExecuteRequestBuildFailure)?;
 
@@ -1180,6 +1182,7 @@ pub fn casper_call<S: GlobalStateReader + 'static, E: Executor + 'static>(
         .with_block_height(1) // TODO: Carry on block height
         .with_parent_block_hash(BlockHash::new(Digest::from_raw([0; 32]))) // TODO: Carry on parent block hash
         .with_runtime_native_config(caller.context().runtime_native_config.clone())
+        .with_authorization_keys(caller.context().authorization_keys.clone())
         .build()
         .map_err(InternalHostError::ExecuteRequestBuildFailure)?;
 
@@ -1568,6 +1571,7 @@ pub fn casper_upgrade<S: GlobalStateReader + 'static, E: Executor>(
             .with_block_height(1) // TODO: Carry on block height
             .with_parent_block_hash(BlockHash::new(Digest::from_raw([0; 32]))) // TODO: Carry on parent block hash
             .with_runtime_native_config(caller.context().runtime_native_config.clone())
+            .with_authorization_keys(caller.context().authorization_keys.clone())
             .build()
             .map_err(InternalHostError::ExecuteRequestBuildFailure)?;
 

executor/wasm_interface/src/executor.rs

@@ -1,4 +1,4 @@
-use std::sync::Arc;
+use std::{collections::BTreeSet, sync::Arc};
 
 use borsh::BorshSerialize;
 use bytes::Bytes;
@@ -62,6 +62,8 @@ pub struct ExecuteRequest {
     pub sandboxed: bool,
     /// Runtime native config.
     pub runtime_native_config: RuntimeNativeConfig,
+    /// Authorization keys for this execution.
+    pub authorization_keys: BTreeSet<AccountHash>,
 }
 
 /// Builder for `ExecuteRequest`.
@@ -82,6 +84,7 @@ pub struct ExecuteRequestBuilder {
     block_height: Option<u64>,
     sandboxed: Option<bool>,
     runtime_native_config: Option<RuntimeNativeConfig>,
+    authorization_keys: Option<BTreeSet<AccountHash>>,
 }
 
 impl ExecuteRequestBuilder {
@@ -216,6 +219,12 @@ impl ExecuteRequestBuilder {
         self
     }
 
+    /// Set the authorization keys.
+    pub fn with_authorization_keys(mut self, authorization_keys: BTreeSet<AccountHash>) -> Self {
+        self.authorization_keys = Some(authorization_keys);
+        self
+    }
+
     /// Build the `ExecuteRequest`.
     pub fn build(self) -> Result<ExecuteRequest, &'static str> {
         let initiator = self.initiator.ok_or("Initiator is not set")?;
@@ -239,6 +248,9 @@ impl ExecuteRequestBuilder {
         let runtime_native_config = self
             .runtime_native_config
             .ok_or("Runtime native config not set")?;
+        let authorization_keys = self
+            .authorization_keys
+            .ok_or("Authorization keys are not set")?;
         Ok(ExecuteRequest {
             initiator,
             caller_key,
@@ -255,6 +267,7 @@ impl ExecuteRequestBuilder {
             block_height,
             sandboxed,
             runtime_native_config,
+            authorization_keys,
         })
     }
 }

executor/wasmer_backend/src/lib.rs

@@ -519,6 +519,7 @@ where
             runtime_native_config: data.context.runtime_native_config.clone(),
             parent_block_hash: data.context.parent_block_hash,
             block_height: data.context.block_height,
+            authorization_keys: data.context.authorization_keys.clone(),
         }
     }
 }

node/src/components/contract_runtime/operations/wasm_v2_request.rs

@@ -306,7 +306,12 @@ impl WasmV2Request {
 
                 builder = builder.with_execution_kind(execution_kind);
 
-                let execute_request = builder.build().expect("should build");
+                let authorization_keys = transaction.signers();
+
+                let execute_request = builder
+                    .with_authorization_keys(authorization_keys)
+                    .build()
+                    .expect("should build");
 
                 Ok(Self::Execute(execute_request))
             }