feat: use HTTP principal resolver (#564)

Uses the new principal resolvers. Attempts to resolve from configured
principal mapping and if not found, resolves over HTTP for all
`storacha.network` domains.

Author: alanshaw

pnpm-lock.yaml

@@ -40,10 +40,11 @@ catalog:
   "@storacha/capabilities": ^1.12.0
   "@storacha/client": ^1.8.17
   "@storacha/did-mailto": ^1.0.2
-  "@storacha/filecoin-api": ^1.2.0
+  "@storacha/filecoin-api": ^1.3.4
   "@storacha/filecoin-client": ^1.0.15
   "@storacha/indexing-service-client": ^2.6.9
   "@storacha/one-webcrypto": ^1.0.1
+  "@storacha/principal-resolver": ^1.0.0
   "@storacha/router": ^1.1.1
   "@storacha/upload-api": ^2.8.0-rc.0
   "@storacha/upload-client": ^1.3.6

pnpm-workspace.yaml

@@ -1,8 +1,8 @@
 import { Config } from 'sst/node/config'
-import { API, error, ok } from '@ucanto/core'
+import { API } from '@ucanto/core'
 import * as Delegation from '@ucanto/core/delegation'
 import { CAR, Legacy, Codec } from '@ucanto/transport'
-import { DIDResolutionError, Schema } from '@ucanto/validator'
+import { Schema } from '@ucanto/validator'
 import * as Link from 'multiformats/link'
 import { base64 } from 'multiformats/bases/base64'
 import * as Sentry from '@sentry/serverless'
@@ -12,6 +12,7 @@ import * as Proof from '@storacha/client/proof'
 import { Client as IndexingServiceClient } from '@storacha/indexing-service-client'
 import * as UploadAPI from '@storacha/upload-api'
 import * as UCANCaps from '@storacha/capabilities/ucan'
+import { HTTPResolver, CacheResolver, MapResolver, TieredResolver } from '@storacha/principal-resolver'
 import {
   composeCarStoresWithOrderedHas,
   createCarStore,
@@ -514,6 +515,13 @@ export async function ucanInvocationRouter(request) {
     }
   }
 
+  const principalResolver = TieredResolver.create([
+    MapResolver.create(principalMapping),
+    CacheResolver.create(
+      HTTPResolver.create([/^did:web:.*\.storacha\.network$/])
+    ),
+  ])
+
   const server = createUcantoServer(serviceSigner, {
     codec,
     // @ts-expect-error needs update of upload-api
@@ -523,10 +531,7 @@ export async function ucanInvocationRouter(request) {
     registry: allocationBlobRegistry,
     blobsStorage,
     blobRetriever,
-    resolveDIDKey: (did) =>
-      Schema.did({ method: 'web' }).is(did) && principalMapping[did]
-        ? ok([principalMapping[did]])
-        : error(new DIDResolutionError(did)),
+    ...principalResolver,
     getServiceConnection: () => connection,
     // TODO: to be deprecated with `store/*` protocol
     storeTable: createStoreTable(AWS_REGION, storeTableName, {

upload-api/functions/ucan-invocation-router.js

@@ -24,6 +24,7 @@
     "@storacha/did-mailto": "catalog:",
     "@storacha/indexing-service-client": "catalog:",
     "@storacha/one-webcrypto": "catalog:",
+    "@storacha/principal-resolver": "catalog:",
     "@storacha/router": "catalog:",
     "@storacha/upload-api": "catalog:",
     "@ucanto/client": "catalog:",