add accountant_service.rs that handles rp count submitting, update db to assign epoch at vote time instead of when we get them

Author: fabian1409

Cargo.lock

@@ -8,22 +8,24 @@ repository.workspace = true
 license.workspace = true
 
 [dependencies]
-alloy-primitives.workspace = true
+alloy = { workspace = true, features = ["full", "rpc", "rpc-client-ws"] }
 ark-babyjubjub = { workspace = true }
 ark-serde-compat = { workspace = true }
 ark-serialize = { workspace = true }
 axum = { workspace = true, features = ["json", "macros"] }
 backon = { workspace = true, features = ["std", "tokio-sleep"] }
 config.workspace = true
 eyre = { workspace = true }
+futures-util = { workspace = true }
 humantime-serde = { workspace = true }
 itertools.workspace = true
 metrics = { workspace = true }
 rustls = { workspace = true }
+secrecy = { workspace = true, features = ["serde"] }
 serde = { workspace = true, features = ["derive"] }
 serde_json = { workspace = true }
 sqlx = { workspace = true, features = ["postgres", "runtime-tokio-rustls"] }
-taceo-nodes-common = { workspace = true, features = ["api", "postgres"] }
+taceo-nodes-common = { workspace = true, features = ["api", "postgres", "web3"] }
 telemetry-batteries = { workspace = true }
 thiserror.workspace = true
 tokio = { workspace = true, features = [
@@ -34,9 +36,16 @@ tokio = { workspace = true, features = [
   "time",
   "tokio-macros",
 ] }
+tokio-util = { workspace = true }
 tracing = { workspace = true, features = ["release_max_level_debug"] }
 uuid.workspace = true
 world-id-primitives = { workspace = true }
 
+[dev-dependencies]
+taceo-nodes-common = { workspace = true, features = [
+  "postgres",
+  "test-utils",
+] }
+
 [target.'cfg(not(target_env = "msvc"))'.dependencies]
 tikv-jemallocator = { workspace = true }

services/oprf-accountant/Cargo.toml

@@ -1,19 +1,20 @@
 -- Stores RP (relying party) signatures over proof requests so they can be verified later.
-create table if not exists rp_signatures (
+CREATE TABLE IF NOT EXISTS rp_signatures (
     id BIGINT GENERATED ALWAYS AS identity PRIMARY KEY,
     rp_id BIGINT NOT NULL,
-    epoch BIGINT NOT NULL,
     -- version is currently always 1
     version SMALLINT NOT NULL DEFAULT 1,
     nonce BYTEA NOT NULL,
     -- Signed validity window (u64 unix seconds stored as bigint)
-    signed_created_at BIGINT NOT NULL,
-    signed_expires_at BIGINT NOT NULL,
+    created_at BIGINT NOT NULL,
+    expires_at BIGINT NOT NULL,
+    -- The request's action field; part of the signed message for Uniqueness Proof requests.
+    action BYTEA NOT NULL,
     -- RP ECDSA (secp256k1) signature over the message (alloy Signature, 65 bytes)
-    signature BYTEA NOT NULL,
+    signature BYTEA,
+    -- Auxiliary data passed to a WIP101 signer contract's `verifyRpRequest`; only present
+    -- (and only meaningful) when `signature` is NULL, i.e. the RP is WIP101-backed.
+    wip101_data BYTEA,
     -- Record insertion timestamp (bookkeeping)
-    created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
-
-    -- A given nonce should be signed at most once per RP (replay protection)
-    constraint uq_rp_signatures_rp_id_nonce unique (rp_id, nonce, epoch)
+    recorded_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
 );