From 8de6e7152244186c15c7acbfa679c98518ae018e Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Thu, 13 May 2021 20:08:17 +0200
Subject: [PATCH 01/39] more interfaces

---
 src/utils/cryptography.ts | 20 ++++++++++++--------
 1 file changed, 12 insertions(+), 8 deletions(-)

diff --git a/src/utils/cryptography.ts b/src/utils/cryptography.ts
index bb13a29..9dca74f 100644
--- a/src/utils/cryptography.ts
+++ b/src/utils/cryptography.ts
@@ -6,15 +6,19 @@ import util from "tweetnacl-util";
 
 export type Base64 = string;
 
+export interface MessageData {
+  ourPublicKey: Base64;
+  nonce: Base64;
+  ciphertext: Base64;
+}
+
+export interface OurData {
+  ourSecretKey: Base64;
+}
+
 export interface EncryptedMessage {
-  readonly ourData: {
-    ourSecretKey: Base64;
-  };
-  readonly messageData: {
-    ourPublicKey: Base64;
-    nonce: Base64;
-    ciphertext: Base64;
-  };
+  readonly ourData: OurData;
+  readonly messageData: MessageData;
 }
 
 /**

From 8c0acd9a664db2bb4e7732382724bd4cda4b685e Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Thu, 13 May 2021 20:08:29 +0200
Subject: [PATCH 02/39] post messageData

---
 src/components/AccessForm.vue | 19 +++++++++++++++++--
 1 file changed, 17 insertions(+), 2 deletions(-)

diff --git a/src/components/AccessForm.vue b/src/components/AccessForm.vue
index 17484f1..d312025 100644
--- a/src/components/AccessForm.vue
+++ b/src/components/AccessForm.vue
@@ -39,7 +39,7 @@
 
 <script lang="ts">
 import { defineComponent } from "vue";
-import { encryptJson } from "@/utils/cryptography";
+import { encryptJson, MessageData } from "@/utils/cryptography";
 import elForm from "element-plus/lib/el-form";
 
 export default defineComponent({
@@ -84,13 +84,28 @@ export default defineComponent({
             const enclavePublicKey = this.$store.getters.enclavePublicKey;
             // Get the unproxied form data before encrypting, for clarity.
             const data = Object.assign({}, this.form);
-            await encryptJson(data, enclavePublicKey);
+            const { messageData } = await encryptJson(data, enclavePublicKey);
+            if (messageData) {
+              console.log(messageData);
+              this.postEncryptedBox(messageData);
+            }
           } else {
             console.log("error submit!!");
             return false;
           }
         }
       );
+    },
+    async postEncryptedBox(data: MessageData) {
+      await this.axios
+        .post(
+          process.env.VUE_APP_JWT_URL ??
+            "https://rtc-data.registree.io/data/attest",
+          data
+        )
+        .then(result => {
+          console.log(result);
+        });
     }
   }
 });

From eee5f6f855e11e2f55f7db895eaa32b30001a7ec Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Fri, 14 May 2021 18:04:35 +0200
Subject: [PATCH 03/39] post and decrypt box

---
 src/components/AccessForm.vue | 66 +++++++++++++++++++++++++++--------
 1 file changed, 51 insertions(+), 15 deletions(-)

diff --git a/src/components/AccessForm.vue b/src/components/AccessForm.vue
index d312025..18a109d 100644
--- a/src/components/AccessForm.vue
+++ b/src/components/AccessForm.vue
@@ -30,17 +30,22 @@
       ></el-input-number>
     </el-form-item>
     <el-form-item style="margin-top: 15px">
-      <el-button type="primary" @click="onSubmit('accessForm')"
-        >Create</el-button
+      <el-button
+        type="primary"
+        :loading="loading"
+        @click="onSubmit('accessForm')"
       >
+        Create
+      </el-button>
     </el-form-item>
   </el-form>
 </template>
 
 <script lang="ts">
 import { defineComponent } from "vue";
-import { encryptJson, MessageData } from "@/utils/cryptography";
+import { decryptMessage, encryptJson, MessageData } from "@/utils/cryptography";
 import elForm from "element-plus/lib/el-form";
+import { notifyErrors } from "@/utils/error-notification";
 
 export default defineComponent({
   data() {
@@ -73,21 +78,32 @@ export default defineComponent({
             trigger: "change"
           }
         ]
-      }
+      },
+      loading: false
     };
   },
+  computed: {
+    serverPublicKey() {
+      return this.$store.getters.enclavePublicKey;
+    },
+    ourSecretKey() {
+      return this.$store.getters.ourSecretKey;
+    }
+  },
   methods: {
     onSubmit(formName: string) {
       (this.$refs[formName] as typeof elForm).validate(
         async (valid: boolean) => {
           if (valid) {
-            const enclavePublicKey = this.$store.getters.enclavePublicKey;
+            this.loading = true;
             // Get the unproxied form data before encrypting, for clarity.
             const data = Object.assign({}, this.form);
-            const { messageData } = await encryptJson(data, enclavePublicKey);
+            const { messageData } = await encryptJson(
+              data,
+              this.serverPublicKey
+            );
             if (messageData) {
-              console.log(messageData);
-              this.postEncryptedBox(messageData);
+              await this.postEncryptedBox(messageData);
             }
           } else {
             console.log("error submit!!");
@@ -96,15 +112,35 @@ export default defineComponent({
         }
       );
     },
-    async postEncryptedBox(data: MessageData) {
+    async postEncryptedBox(messageData: MessageData) {
+      const payload = {
+        metadata: {
+          nonce: messageData.nonce,
+          uploader_pub_key: messageData.ourPublicKey
+        },
+        payload: messageData.ciphertext
+      };
       await this.axios
-        .post(
-          process.env.VUE_APP_JWT_URL ??
-            "https://rtc-data.registree.io/data/attest",
-          data
-        )
-        .then(result => {
+        .post("https://rtc-data.registree.io/auth/tokens", payload)
+        .then(async result => {
           console.log(result);
+          if (result.status === 200) {
+            const { execution_token, nonce } = result.data;
+            await notifyErrors("decryptMessage failed", async () =>
+              decryptMessage(
+                execution_token,
+                nonce,
+                this.serverPublicKey,
+                this.ourSecretKey
+              )
+            );
+          }
+        })
+        .catch(error => {
+          console.log(`post resul ${error}`);
+        })
+        .finally(() => {
+          this.loading = false;
         });
     }
   }

From d016d72744c710cabc43d37b9545cc6e501fa864 Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Fri, 14 May 2021 19:08:41 +0200
Subject: [PATCH 04/39] secret key getter, sealbox action

---
 src/store/index.ts | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/src/store/index.ts b/src/store/index.ts
index f73bfe8..4e83044 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -1,5 +1,10 @@
 import { createLogger, createStore } from "vuex";
-import { encryptBlob, Base64, decryptMessage } from "@/utils/cryptography";
+import {
+  encryptBlob,
+  Base64,
+  decryptMessage,
+  encryptJson
+} from "@/utils/cryptography";
 import { verifyToken } from "@/utils/jwt";
 import { AttestationToken } from "@/utils/attestation-token";
 import base64url from "base64url";
@@ -33,6 +38,10 @@ export default createStore<State>({
         return null;
       }
       return base64url.toBase64(token.enclaveHeldData);
+    },
+    ourSecretKey(state) {
+      const key = state.ourSecretKey;
+      return key ?? null;
     }
   },
   mutations: {
@@ -115,6 +124,14 @@ export default createStore<State>({
       const accessKey = btoa(message.slice(0, 24).toString());
       const uuid = message.slice(24);
       commit("saveUploadResult", { accessKey, uuid });
+    },
+    async sealBox({ commit, getters }, data) {
+      const { messageData, ourData } = await encryptJson(
+        data,
+        await getters.enclavePublicKey
+      );
+      commit("saveSecretKey", ourData.ourSecretKey);
+      return messageData;
     }
   },
   modules: {}

From 65336251877ea1ea4636ed0dbd14f841f2813c9b Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Fri, 14 May 2021 19:27:08 +0200
Subject: [PATCH 05/39] decrypt message

---
 src/components/AccessForm.vue | 35 ++++++++++++++++-------------------
 1 file changed, 16 insertions(+), 19 deletions(-)

diff --git a/src/components/AccessForm.vue b/src/components/AccessForm.vue
index 18a109d..1f08ccd 100644
--- a/src/components/AccessForm.vue
+++ b/src/components/AccessForm.vue
@@ -43,9 +43,10 @@
 
 <script lang="ts">
 import { defineComponent } from "vue";
-import { decryptMessage, encryptJson, MessageData } from "@/utils/cryptography";
+import { decryptMessage, MessageData } from "@/utils/cryptography";
 import elForm from "element-plus/lib/el-form";
 import { notifyErrors } from "@/utils/error-notification";
+import { mapActions, mapGetters, mapState } from "vuex";
 
 export default defineComponent({
   data() {
@@ -83,14 +84,11 @@ export default defineComponent({
     };
   },
   computed: {
-    serverPublicKey() {
-      return this.$store.getters.enclavePublicKey;
-    },
-    ourSecretKey() {
-      return this.$store.getters.ourSecretKey;
-    }
+    ...mapState(["ourSecretKey"]),
+    ...mapGetters(["enclavePublicKey"])
   },
   methods: {
+    ...mapActions(["sealBox"]),
     onSubmit(formName: string) {
       (this.$refs[formName] as typeof elForm).validate(
         async (valid: boolean) => {
@@ -98,13 +96,11 @@ export default defineComponent({
             this.loading = true;
             // Get the unproxied form data before encrypting, for clarity.
             const data = Object.assign({}, this.form);
-            const { messageData } = await encryptJson(
-              data,
-              this.serverPublicKey
-            );
-            if (messageData) {
-              await this.postEncryptedBox(messageData);
-            }
+            await this.sealBox(data).then(async messageData => {
+              if (messageData) {
+                await this.postEncryptedBox(messageData);
+              }
+            });
           } else {
             console.log("error submit!!");
             return false;
@@ -126,14 +122,15 @@ export default defineComponent({
           console.log(result);
           if (result.status === 200) {
             const { execution_token, nonce } = result.data;
-            await notifyErrors("decryptMessage failed", async () =>
-              decryptMessage(
+            await notifyErrors("Attestation failed", async () => {
+              const decryptedResult = decryptMessage(
                 execution_token,
                 nonce,
-                this.serverPublicKey,
+                this.enclavePublicKey,
                 this.ourSecretKey
-              )
-            );
+              );
+              console.log(decryptedResult);
+            });
           }
         })
         .catch(error => {

From 1e6a8f951ea1d1c0c7913f9b1d9230bb7cdbbb5d Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Thu, 20 May 2021 22:39:42 +0200
Subject: [PATCH 06/39] moved post encryted box method to vuex

---
 src/components/AccessForm.vue | 41 ++----------------------
 src/store/index.ts            | 59 ++++++++++++++++++++++++++---------
 2 files changed, 46 insertions(+), 54 deletions(-)

diff --git a/src/components/AccessForm.vue b/src/components/AccessForm.vue
index 1f08ccd..1d6e13a 100644
--- a/src/components/AccessForm.vue
+++ b/src/components/AccessForm.vue
@@ -43,9 +43,7 @@
 
 <script lang="ts">
 import { defineComponent } from "vue";
-import { decryptMessage, MessageData } from "@/utils/cryptography";
 import elForm from "element-plus/lib/el-form";
-import { notifyErrors } from "@/utils/error-notification";
 import { mapActions, mapGetters, mapState } from "vuex";
 
 export default defineComponent({
@@ -96,49 +94,14 @@ export default defineComponent({
             this.loading = true;
             // Get the unproxied form data before encrypting, for clarity.
             const data = Object.assign({}, this.form);
-            await this.sealBox(data).then(async messageData => {
-              if (messageData) {
-                await this.postEncryptedBox(messageData);
-              }
-            });
+            await this.sealBox(data);
+            //TODO: trigger Dialog box here instead?
           } else {
             console.log("error submit!!");
             return false;
           }
         }
       );
-    },
-    async postEncryptedBox(messageData: MessageData) {
-      const payload = {
-        metadata: {
-          nonce: messageData.nonce,
-          uploader_pub_key: messageData.ourPublicKey
-        },
-        payload: messageData.ciphertext
-      };
-      await this.axios
-        .post("https://rtc-data.registree.io/auth/tokens", payload)
-        .then(async result => {
-          console.log(result);
-          if (result.status === 200) {
-            const { execution_token, nonce } = result.data;
-            await notifyErrors("Attestation failed", async () => {
-              const decryptedResult = decryptMessage(
-                execution_token,
-                nonce,
-                this.enclavePublicKey,
-                this.ourSecretKey
-              );
-              console.log(decryptedResult);
-            });
-          }
-        })
-        .catch(error => {
-          console.log(`post resul ${error}`);
-        })
-        .finally(() => {
-          this.loading = false;
-        });
     }
   }
 });
diff --git a/src/store/index.ts b/src/store/index.ts
index 4e83044..c8d0127 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -97,27 +97,45 @@ export default createStore<State>({
       if (res.status !== 200) {
         return "error";
       }
-      await dispatch("decryptUploadResponse", res.data);
+      const msg = await dispatch("decryptResponse", res.data);
+
+      if (!msg) {
+        // TODO: Error Handling
+        return "error";
+      }
+
+      await dispatch("parseUploadMessage", msg);
     },
-    async decryptUploadResponse(
-      { state, dispatch, getters },
-      response: UploadResponse
-    ) {
+    async postAccessForm({ dispatch }, request: UploadRequest) {
+      const res = await axios.post<UploadResponse>(
+        "https://rtc-data.registree.io/auth/tokens",
+        request
+      );
+      if (res.status !== 200) {
+        return "error";
+      }
+      const msg = await dispatch("decryptResponse", res.data);
+
+      if (!msg) {
+        // TODO: Error Handling
+        return "error";
+      }
+
+      //TODO: Open Dialog Box show message
+
+      await dispatch("saveDecryptedMsg", msg);
+    },
+    async decryptResponse({ state, getters }, response: UploadResponse) {
       const enclavePubKey = getters.enclavePublicKey;
       if (!enclavePubKey || !state.ourSecretKey) {
         return "error";
       }
-      const msg = decryptMessage(
+      return decryptMessage(
         response.ciphertext,
         response.nonce,
         enclavePubKey,
         state.ourSecretKey
       );
-      if (!msg) {
-        // TODO: Error Handling
-        return "error";
-      }
-      await dispatch("parseUploadMessage", msg);
     },
     async parseUploadMessage({ commit }, message: Uint8Array) {
       console.log("parseUploadMessage:", message);
@@ -125,13 +143,24 @@ export default createStore<State>({
       const uuid = message.slice(24);
       commit("saveUploadResult", { accessKey, uuid });
     },
-    async sealBox({ commit, getters }, data) {
-      const { messageData, ourData } = await encryptJson(
+    async sealBox({ commit, dispatch, getters }, data) {
+      const enclavePubKey = getters.enclavePublicKey;
+      if (!enclavePubKey) {
+        return null;
+      }
+      const { ourData, messageData } = await encryptJson(
         data,
-        await getters.enclavePublicKey
+        enclavePubKey as Base64
       );
+
       commit("saveSecretKey", ourData.ourSecretKey);
-      return messageData;
+      dispatch("postAccessForm", {
+        metadata: {
+          nonce: messageData.nonce,
+          uploader_pub_key: messageData.ourPublicKey
+        },
+        payload: messageData.ciphertext
+      });
     }
   },
   modules: {}

From 4893d73ce27d19dbf3d97d904ed78cc73554f6f3 Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Thu, 20 May 2021 22:53:02 +0200
Subject: [PATCH 07/39] save decrypted msg

---
 src/store/index.ts | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/src/store/index.ts b/src/store/index.ts
index c8d0127..9de7625 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -19,6 +19,7 @@ export interface State {
   ourSecretKey: Base64 | null;
   attestationResult: AttestationToken | null;
   uploadResult: { accessKey: string; uuid: Uint8Array } | null;
+  decryptedMessage: string | null;
 }
 
 // TODO: add typescript typings for Vuex
@@ -29,7 +30,8 @@ export default createStore<State>({
     jwtToken: null,
     ourSecretKey: null,
     attestationResult: null,
-    uploadResult: null
+    uploadResult: null,
+    decryptedMessage: null
   },
   getters: {
     enclavePublicKey(state) {
@@ -59,6 +61,9 @@ export default createStore<State>({
       uploadResult: { accessKey: string; uuid: Uint8Array }
     ) {
       state.uploadResult = uploadResult;
+    },
+    saveDecryptedMsg(state, msg) {
+      state.decryptedMessage = msg;
     }
   },
   actions: {
@@ -106,7 +111,7 @@ export default createStore<State>({
 
       await dispatch("parseUploadMessage", msg);
     },
-    async postAccessForm({ dispatch }, request: UploadRequest) {
+    async postAccessForm({ dispatch, commit }, request: UploadRequest) {
       const res = await axios.post<UploadResponse>(
         "https://rtc-data.registree.io/auth/tokens",
         request
@@ -123,7 +128,7 @@ export default createStore<State>({
 
       //TODO: Open Dialog Box show message
 
-      await dispatch("saveDecryptedMsg", msg);
+      commit("saveDecryptedMsg", msg);
     },
     async decryptResponse({ state, getters }, response: UploadResponse) {
       const enclavePubKey = getters.enclavePublicKey;

From 9e1e2e31c84d983a1bea86ea51a058be62ec283d Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Thu, 20 May 2021 23:57:06 +0200
Subject: [PATCH 08/39] update mutation nomenclature

---
 src/store/index.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/store/index.ts b/src/store/index.ts
index 9de7625..5240031 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -62,7 +62,7 @@ export default createStore<State>({
     ) {
       state.uploadResult = uploadResult;
     },
-    saveDecryptedMsg(state, msg) {
+    setDecryptedMsg(state, msg) {
       state.decryptedMessage = msg;
     }
   },
@@ -128,7 +128,7 @@ export default createStore<State>({
 
       //TODO: Open Dialog Box show message
 
-      commit("saveDecryptedMsg", msg);
+      commit("setDecryptedMsg", msg);
     },
     async decryptResponse({ state, getters }, response: UploadResponse) {
       const enclavePubKey = getters.enclavePublicKey;

From b31b8f0571da825dad0e0287605965776c6dbf8d Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Thu, 20 May 2021 23:57:41 +0200
Subject: [PATCH 09/39] show msg dialog and reset on close

---
 src/components/AccessForm.vue | 22 ++++++++++++++++++++--
 1 file changed, 20 insertions(+), 2 deletions(-)

diff --git a/src/components/AccessForm.vue b/src/components/AccessForm.vue
index 1d6e13a..e048233 100644
--- a/src/components/AccessForm.vue
+++ b/src/components/AccessForm.vue
@@ -44,7 +44,8 @@
 <script lang="ts">
 import { defineComponent } from "vue";
 import elForm from "element-plus/lib/el-form";
-import { mapActions, mapGetters, mapState } from "vuex";
+import { ElMessageBox } from "element-plus";
+import { mapActions, mapGetters, mapMutations, mapState } from "vuex";
 
 export default defineComponent({
   data() {
@@ -82,11 +83,12 @@ export default defineComponent({
     };
   },
   computed: {
-    ...mapState(["ourSecretKey"]),
+    ...mapState(["ourSecretKey", "decryptedMessage"]),
     ...mapGetters(["enclavePublicKey"])
   },
   methods: {
     ...mapActions(["sealBox"]),
+    ...mapMutations(["setDecryptedMsg"]),
     onSubmit(formName: string) {
       (this.$refs[formName] as typeof elForm).validate(
         async (valid: boolean) => {
@@ -102,6 +104,22 @@ export default defineComponent({
           }
         }
       );
+    },
+    async handleMsgDisplay(message: string) {
+      await ElMessageBox({
+        title: "Something",
+        message,
+        beforeClose: () => {
+          this.setDecryptedMsg(null);
+        }
+      });
+    }
+  },
+  watch: {
+    decryptedMessage(newState: string | null) {
+      if (newState) {
+        this.handleMsgDisplay(newState);
+      }
     }
   }
 });

From c2674dde097bd0d7310c991639958729ea958f18 Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Fri, 21 May 2021 11:58:24 +0200
Subject: [PATCH 10/39] stop loading after box is sealed and posted

---
 src/components/AccessForm.vue | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/components/AccessForm.vue b/src/components/AccessForm.vue
index e048233..40b4706 100644
--- a/src/components/AccessForm.vue
+++ b/src/components/AccessForm.vue
@@ -97,6 +97,7 @@ export default defineComponent({
             // Get the unproxied form data before encrypting, for clarity.
             const data = Object.assign({}, this.form);
             await this.sealBox(data);
+            this.loading = false;
             //TODO: trigger Dialog box here instead?
           } else {
             console.log("error submit!!");

From b8112a52a9aeaa1a44e83626a8e5fd1923b87f8b Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Fri, 21 May 2021 12:04:31 +0200
Subject: [PATCH 11/39] action nomanclature

---
 src/components/AccessForm.vue | 4 ++--
 src/store/index.ts            | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/components/AccessForm.vue b/src/components/AccessForm.vue
index 40b4706..71ce56e 100644
--- a/src/components/AccessForm.vue
+++ b/src/components/AccessForm.vue
@@ -87,7 +87,7 @@ export default defineComponent({
     ...mapGetters(["enclavePublicKey"])
   },
   methods: {
-    ...mapActions(["sealBox"]),
+    ...mapActions(["requestExecutionToken"]),
     ...mapMutations(["setDecryptedMsg"]),
     onSubmit(formName: string) {
       (this.$refs[formName] as typeof elForm).validate(
@@ -96,7 +96,7 @@ export default defineComponent({
             this.loading = true;
             // Get the unproxied form data before encrypting, for clarity.
             const data = Object.assign({}, this.form);
-            await this.sealBox(data);
+            await this.requestExecutionToken(data);
             this.loading = false;
             //TODO: trigger Dialog box here instead?
           } else {
diff --git a/src/store/index.ts b/src/store/index.ts
index 5240031..d012475 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -148,7 +148,7 @@ export default createStore<State>({
       const uuid = message.slice(24);
       commit("saveUploadResult", { accessKey, uuid });
     },
-    async sealBox({ commit, dispatch, getters }, data) {
+    async requestExecutionToken({ commit, dispatch, getters }, data) {
       const enclavePubKey = getters.enclavePublicKey;
       if (!enclavePubKey) {
         return null;

From a66cde3a350a58ae6320e7bf6d4bea1f7ec56f2d Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Sat, 22 May 2021 14:38:05 +0200
Subject: [PATCH 12/39] no return from action

---
 src/store/index.ts | 28 ++++++++++++++++++++++++----
 1 file changed, 24 insertions(+), 4 deletions(-)

diff --git a/src/store/index.ts b/src/store/index.ts
index d012475..dd3f5f8 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -94,7 +94,7 @@ export default createStore<State>({
         payload: messageData.ciphertext
       });
     },
-    async uploadFile({ dispatch }, request: UploadRequest) {
+    async uploadFile({ dispatch, getters }, request: UploadRequest) {
       const res = await axios.post<UploadResponse>(
         "https://rtc-data.registree.io/data/uploads",
         request
@@ -102,7 +102,17 @@ export default createStore<State>({
       if (res.status !== 200) {
         return "error";
       }
-      const msg = await dispatch("decryptResponse", res.data);
+
+      const { nonce, ciphertext } = res.data;
+      const enclavePubKey = getters.enclavePublicKey;
+      const ourSecretKey = getters.ourSecretKey;
+
+      const msg = decryptMessage(
+        ciphertext,
+        nonce,
+        enclavePubKey,
+        ourSecretKey
+      );
 
       if (!msg) {
         // TODO: Error Handling
@@ -111,7 +121,7 @@ export default createStore<State>({
 
       await dispatch("parseUploadMessage", msg);
     },
-    async postAccessForm({ dispatch, commit }, request: UploadRequest) {
+    async postAccessForm({ commit, getters }, request: UploadRequest) {
       const res = await axios.post<UploadResponse>(
         "https://rtc-data.registree.io/auth/tokens",
         request
@@ -119,7 +129,17 @@ export default createStore<State>({
       if (res.status !== 200) {
         return "error";
       }
-      const msg = await dispatch("decryptResponse", res.data);
+
+      const { nonce, ciphertext } = res.data;
+      const enclavePubKey = getters.enclavePublicKey;
+      const ourSecretKey = getters.ourSecretKey;
+
+      const msg = decryptMessage(
+        ciphertext,
+        nonce,
+        enclavePubKey,
+        ourSecretKey
+      );
 
       if (!msg) {
         // TODO: Error Handling

From 5d5f8bfa276c6b83e260e40f0c071dec50312bf1 Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Tue, 25 May 2021 16:48:43 +0200
Subject: [PATCH 13/39] use ourSecretKey's state instead of getters

---
 src/store/index.ts | 16 ++++++----------
 1 file changed, 6 insertions(+), 10 deletions(-)

diff --git a/src/store/index.ts b/src/store/index.ts
index dd3f5f8..1a55da7 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -40,10 +40,6 @@ export default createStore<State>({
         return null;
       }
       return base64url.toBase64(token.enclaveHeldData);
-    },
-    ourSecretKey(state) {
-      const key = state.ourSecretKey;
-      return key ?? null;
     }
   },
   mutations: {
@@ -94,7 +90,7 @@ export default createStore<State>({
         payload: messageData.ciphertext
       });
     },
-    async uploadFile({ dispatch, getters }, request: UploadRequest) {
+    async uploadFile({ dispatch, getters, state }, request: UploadRequest) {
       const res = await axios.post<UploadResponse>(
         "https://rtc-data.registree.io/data/uploads",
         request
@@ -105,13 +101,13 @@ export default createStore<State>({
 
       const { nonce, ciphertext } = res.data;
       const enclavePubKey = getters.enclavePublicKey;
-      const ourSecretKey = getters.ourSecretKey;
+      const ourSecretKey = state.ourSecretKey;
 
       const msg = decryptMessage(
         ciphertext,
         nonce,
         enclavePubKey,
-        ourSecretKey
+        ourSecretKey as Base64
       );
 
       if (!msg) {
@@ -121,7 +117,7 @@ export default createStore<State>({
 
       await dispatch("parseUploadMessage", msg);
     },
-    async postAccessForm({ commit, getters }, request: UploadRequest) {
+    async postAccessForm({ commit, getters, state }, request: UploadRequest) {
       const res = await axios.post<UploadResponse>(
         "https://rtc-data.registree.io/auth/tokens",
         request
@@ -132,13 +128,13 @@ export default createStore<State>({
 
       const { nonce, ciphertext } = res.data;
       const enclavePubKey = getters.enclavePublicKey;
-      const ourSecretKey = getters.ourSecretKey;
+      const ourSecretKey = state.ourSecretKey;
 
       const msg = decryptMessage(
         ciphertext,
         nonce,
         enclavePubKey,
-        ourSecretKey
+        ourSecretKey as Base64
       );
 
       if (!msg) {

From ded93bb26563287c8311ede86723568b829837af Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Tue, 25 May 2021 16:53:28 +0200
Subject: [PATCH 14/39] // TODO: Error Handling

---
 src/store/index.ts | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/store/index.ts b/src/store/index.ts
index 1a55da7..ccb27d4 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -96,6 +96,7 @@ export default createStore<State>({
         request
       );
       if (res.status !== 200) {
+        // TODO: Error Handling
         return "error";
       }
 
@@ -123,6 +124,7 @@ export default createStore<State>({
         request
       );
       if (res.status !== 200) {
+        // TODO: Error Handling
         return "error";
       }
 
@@ -149,6 +151,7 @@ export default createStore<State>({
     async decryptResponse({ state, getters }, response: UploadResponse) {
       const enclavePubKey = getters.enclavePublicKey;
       if (!enclavePubKey || !state.ourSecretKey) {
+        // TODO: Error Handling
         return "error";
       }
       return decryptMessage(

From 8853f7a469b5b1edb887446461ebeb00c04406df Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Tue, 25 May 2021 17:32:03 +0200
Subject: [PATCH 15/39] check if ourSecretKey is null

---
 src/store/index.ts | 18 ++++++++++--------
 1 file changed, 10 insertions(+), 8 deletions(-)

diff --git a/src/store/index.ts b/src/store/index.ts
index ccb27d4..794bbb2 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -95,20 +95,21 @@ export default createStore<State>({
         "https://rtc-data.registree.io/data/uploads",
         request
       );
-      if (res.status !== 200) {
+      const enclavePubKey = getters.enclavePublicKey;
+      const ourSecretKey = state.ourSecretKey;
+
+      if (res.status !== 200 || !enclavePubKey || !ourSecretKey) {
         // TODO: Error Handling
         return "error";
       }
 
       const { nonce, ciphertext } = res.data;
-      const enclavePubKey = getters.enclavePublicKey;
-      const ourSecretKey = state.ourSecretKey;
 
       const msg = decryptMessage(
         ciphertext,
         nonce,
         enclavePubKey,
-        ourSecretKey as Base64
+        ourSecretKey
       );
 
       if (!msg) {
@@ -123,20 +124,21 @@ export default createStore<State>({
         "https://rtc-data.registree.io/auth/tokens",
         request
       );
-      if (res.status !== 200) {
+      const enclavePubKey = getters.enclavePublicKey;
+      const ourSecretKey = state.ourSecretKey;
+
+      if (res.status !== 200 || !enclavePubKey || !ourSecretKey) {
         // TODO: Error Handling
         return "error";
       }
 
       const { nonce, ciphertext } = res.data;
-      const enclavePubKey = getters.enclavePublicKey;
-      const ourSecretKey = state.ourSecretKey;
 
       const msg = decryptMessage(
         ciphertext,
         nonce,
         enclavePubKey,
-        ourSecretKey as Base64
+        ourSecretKey
       );
 
       if (!msg) {

From cf0b2ec73d8985615bb845ca70c8b34d121c4258 Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Tue, 25 May 2021 17:36:22 +0200
Subject: [PATCH 16/39] catch requestExecutionToken

---
 src/components/AccessForm.vue | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/components/AccessForm.vue b/src/components/AccessForm.vue
index 71ce56e..520a1cb 100644
--- a/src/components/AccessForm.vue
+++ b/src/components/AccessForm.vue
@@ -96,7 +96,12 @@ export default defineComponent({
             this.loading = true;
             // Get the unproxied form data before encrypting, for clarity.
             const data = Object.assign({}, this.form);
-            await this.requestExecutionToken(data);
+            try {
+              await this.requestExecutionToken(data);
+            } catch (e) {
+              console.log(e);
+              // TODO: Error Handling
+            }
             this.loading = false;
             //TODO: trigger Dialog box here instead?
           } else {

From b667b9726d448c524819ca8d6bac3ef78eac298d Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Wed, 26 May 2021 21:52:59 +0200
Subject: [PATCH 17/39] refactor(store): making all the action return types
 explicit

Co-authored-by: Pi Delport <pi@registree.io>
---
 src/store/index.ts | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/src/store/index.ts b/src/store/index.ts
index 794bbb2..4478952 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -90,7 +90,10 @@ export default createStore<State>({
         payload: messageData.ciphertext
       });
     },
-    async uploadFile({ dispatch, getters, state }, request: UploadRequest) {
+    async uploadFile(
+      { dispatch, getters, state },
+      request: UploadRequest
+    ): Promise<void> {
       const res = await axios.post<UploadResponse>(
         "https://rtc-data.registree.io/data/uploads",
         request
@@ -119,7 +122,10 @@ export default createStore<State>({
 
       await dispatch("parseUploadMessage", msg);
     },
-    async postAccessForm({ commit, getters, state }, request: UploadRequest) {
+    async postAccessForm(
+      { commit, getters, state },
+      request: UploadRequest
+    ): Promise<void> {
       const res = await axios.post<UploadResponse>(
         "https://rtc-data.registree.io/auth/tokens",
         request

From 57cebfda7ce038e6eb9d1f1eb773b1738db7df91 Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Wed, 26 May 2021 21:57:06 +0200
Subject: [PATCH 18/39] refactor(AccessForm): use notifyErrors around
 requestExecutionToken

Co-authored-by: Pi Delport <pi@registree.io>
---
 src/components/AccessForm.vue | 10 ++++------
 1 file changed, 4 insertions(+), 6 deletions(-)

diff --git a/src/components/AccessForm.vue b/src/components/AccessForm.vue
index 520a1cb..5e7d5ae 100644
--- a/src/components/AccessForm.vue
+++ b/src/components/AccessForm.vue
@@ -46,6 +46,7 @@ import { defineComponent } from "vue";
 import elForm from "element-plus/lib/el-form";
 import { ElMessageBox } from "element-plus";
 import { mapActions, mapGetters, mapMutations, mapState } from "vuex";
+import { notifyErrors } from "@/utils/error-notification";
 
 export default defineComponent({
   data() {
@@ -96,12 +97,9 @@ export default defineComponent({
             this.loading = true;
             // Get the unproxied form data before encrypting, for clarity.
             const data = Object.assign({}, this.form);
-            try {
-              await this.requestExecutionToken(data);
-            } catch (e) {
-              console.log(e);
-              // TODO: Error Handling
-            }
+            await notifyErrors("Execution token request failed", () => {
+              return this.requestExecutionToken(data);
+            });
             this.loading = false;
             //TODO: trigger Dialog box here instead?
           } else {

From 7b160bc1447bac7c4af62f4d7acd65b6bbe14fb2 Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Wed, 26 May 2021 21:58:47 +0200
Subject: [PATCH 19/39] refactor(AccessForm): change create to request

Co-authored-by: Pi Delport <pi@registree.io>
---
 src/components/AccessForm.vue | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/components/AccessForm.vue b/src/components/AccessForm.vue
index 5e7d5ae..05608af 100644
--- a/src/components/AccessForm.vue
+++ b/src/components/AccessForm.vue
@@ -35,7 +35,7 @@
         :loading="loading"
         @click="onSubmit('accessForm')"
       >
-        Create
+        Request
       </el-button>
     </el-form-item>
   </el-form>

From 4d143bec55e938ba72a4d67e198d782d6b2de337 Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Wed, 26 May 2021 22:06:38 +0200
Subject: [PATCH 20/39] throw instead of returning error

---
 src/store/index.ts | 10 ++++------
 1 file changed, 4 insertions(+), 6 deletions(-)

diff --git a/src/store/index.ts b/src/store/index.ts
index 4478952..8e4a82f 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -103,7 +103,7 @@ export default createStore<State>({
 
       if (res.status !== 200 || !enclavePubKey || !ourSecretKey) {
         // TODO: Error Handling
-        return "error";
+        throw "error";
       }
 
       const { nonce, ciphertext } = res.data;
@@ -117,7 +117,7 @@ export default createStore<State>({
 
       if (!msg) {
         // TODO: Error Handling
-        return "error";
+        throw "error";
       }
 
       await dispatch("parseUploadMessage", msg);
@@ -135,7 +135,7 @@ export default createStore<State>({
 
       if (res.status !== 200 || !enclavePubKey || !ourSecretKey) {
         // TODO: Error Handling
-        return "error";
+        throw "error";
       }
 
       const { nonce, ciphertext } = res.data;
@@ -149,11 +149,9 @@ export default createStore<State>({
 
       if (!msg) {
         // TODO: Error Handling
-        return "error";
+        throw "error";
       }
 
-      //TODO: Open Dialog Box show message
-
       commit("setDecryptedMsg", msg);
     },
     async decryptResponse({ state, getters }, response: UploadResponse) {

From 587dfe7177baad70bd10794a47e258f017af4d9a Mon Sep 17 00:00:00 2001
From: Pi Delport <pi@registree.io>
Date: Thu, 27 May 2021 16:18:22 +0200
Subject: [PATCH 21/39] chore(AccessForm): remove TODO

Co-authored-by: Jonathan Ngbonga <jongbonga@gmail.com>
---
 src/components/AccessForm.vue | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/components/AccessForm.vue b/src/components/AccessForm.vue
index 05608af..b247850 100644
--- a/src/components/AccessForm.vue
+++ b/src/components/AccessForm.vue
@@ -101,7 +101,6 @@ export default defineComponent({
               return this.requestExecutionToken(data);
             });
             this.loading = false;
-            //TODO: trigger Dialog box here instead?
           } else {
             console.log("error submit!!");
             return false;

From 941c57437db598b9bde1fbe2878a9c25d625f39d Mon Sep 17 00:00:00 2001
From: Jonathan Ngbonga <jongbonga@gmail.com>
Date: Wed, 26 May 2021 22:10:24 +0200
Subject: [PATCH 22/39] change decryptedMessage to executionToken

---
 src/components/AccessForm.vue | 4 ++--
 src/store/index.ts            | 6 +++---
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/src/components/AccessForm.vue b/src/components/AccessForm.vue
index b247850..55e3dfc 100644
--- a/src/components/AccessForm.vue
+++ b/src/components/AccessForm.vue
@@ -84,7 +84,7 @@ export default defineComponent({
     };
   },
   computed: {
-    ...mapState(["ourSecretKey", "decryptedMessage"]),
+    ...mapState(["ourSecretKey", "executionToken"]),
     ...mapGetters(["enclavePublicKey"])
   },
   methods: {
@@ -119,7 +119,7 @@ export default defineComponent({
     }
   },
   watch: {
-    decryptedMessage(newState: string | null) {
+    executionToken(newState: string | null) {
       if (newState) {
         this.handleMsgDisplay(newState);
       }
diff --git a/src/store/index.ts b/src/store/index.ts
index 8e4a82f..4024b20 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -19,7 +19,7 @@ export interface State {
   ourSecretKey: Base64 | null;
   attestationResult: AttestationToken | null;
   uploadResult: { accessKey: string; uuid: Uint8Array } | null;
-  decryptedMessage: string | null;
+  executionToken: Uint8Array | null;
 }
 
 // TODO: add typescript typings for Vuex
@@ -31,7 +31,7 @@ export default createStore<State>({
     ourSecretKey: null,
     attestationResult: null,
     uploadResult: null,
-    decryptedMessage: null
+    executionToken: null
   },
   getters: {
     enclavePublicKey(state) {
@@ -59,7 +59,7 @@ export default createStore<State>({
       state.uploadResult = uploadResult;
     },
     setDecryptedMsg(state, msg) {
-      state.decryptedMessage = msg;
+      state.executionToken = msg;
     }
   },
   actions: {

From 63d0de83506d3e87770ec4bb29af81f3d1fb74e6 Mon Sep 17 00:00:00 2001
From: Pi Delport <pi@registree.io>
Date: Thu, 27 May 2021 16:39:57 +0200
Subject: [PATCH 23/39] refactor(store): use axios validateStatus to check the
 status code

This will give us a bit more HTTP debugging context on failure, compared
to checking and throwing later.
---
 src/store/index.ts | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/src/store/index.ts b/src/store/index.ts
index 4024b20..dbd5cf5 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -96,12 +96,13 @@ export default createStore<State>({
     ): Promise<void> {
       const res = await axios.post<UploadResponse>(
         "https://rtc-data.registree.io/data/uploads",
-        request
+        request,
+        { validateStatus: status => status === 200 }
       );
       const enclavePubKey = getters.enclavePublicKey;
       const ourSecretKey = state.ourSecretKey;
 
-      if (res.status !== 200 || !enclavePubKey || !ourSecretKey) {
+      if (!enclavePubKey || !ourSecretKey) {
         // TODO: Error Handling
         throw "error";
       }
@@ -128,12 +129,13 @@ export default createStore<State>({
     ): Promise<void> {
       const res = await axios.post<UploadResponse>(
         "https://rtc-data.registree.io/auth/tokens",
-        request
+        request,
+        { validateStatus: status => status === 200 }
       );
       const enclavePubKey = getters.enclavePublicKey;
       const ourSecretKey = state.ourSecretKey;
 
-      if (res.status !== 200 || !enclavePubKey || !ourSecretKey) {
+      if (!enclavePubKey || !ourSecretKey) {
         // TODO: Error Handling
         throw "error";
       }

From a4817aa42717fa9ee3c30450ac4ea79b4d787b20 Mon Sep 17 00:00:00 2001
From: Pi Delport <pi@registree.io>
Date: Thu, 27 May 2021 17:05:40 +0200
Subject: [PATCH 24/39] =?UTF-8?q?refactor(store,AccessForm):=20rename=20se?=
 =?UTF-8?q?tDecryptedMsg=20=E2=86=92=20setExecutionToken,=20and=20use=20Ui?=
 =?UTF-8?q?nt8Array?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/components/AccessForm.vue | 11 ++++++-----
 src/store/index.ts            |  6 +++---
 2 files changed, 9 insertions(+), 8 deletions(-)

diff --git a/src/components/AccessForm.vue b/src/components/AccessForm.vue
index 55e3dfc..998c1a6 100644
--- a/src/components/AccessForm.vue
+++ b/src/components/AccessForm.vue
@@ -47,6 +47,7 @@ import elForm from "element-plus/lib/el-form";
 import { ElMessageBox } from "element-plus";
 import { mapActions, mapGetters, mapMutations, mapState } from "vuex";
 import { notifyErrors } from "@/utils/error-notification";
+import util from "tweetnacl-util";
 
 export default defineComponent({
   data() {
@@ -89,7 +90,7 @@ export default defineComponent({
   },
   methods: {
     ...mapActions(["requestExecutionToken"]),
-    ...mapMutations(["setDecryptedMsg"]),
+    ...mapMutations(["setExecutionToken"]),
     onSubmit(formName: string) {
       (this.$refs[formName] as typeof elForm).validate(
         async (valid: boolean) => {
@@ -108,18 +109,18 @@ export default defineComponent({
         }
       );
     },
-    async handleMsgDisplay(message: string) {
+    async handleMsgDisplay(executionToken: Uint8Array) {
       await ElMessageBox({
         title: "Something",
-        message,
+        message: util.encodeBase64(executionToken),
         beforeClose: () => {
-          this.setDecryptedMsg(null);
+          this.setExecutionToken(null);
         }
       });
     }
   },
   watch: {
-    executionToken(newState: string | null) {
+    executionToken(newState: Uint8Array | null) {
       if (newState) {
         this.handleMsgDisplay(newState);
       }
diff --git a/src/store/index.ts b/src/store/index.ts
index dbd5cf5..b175893 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -58,8 +58,8 @@ export default createStore<State>({
     ) {
       state.uploadResult = uploadResult;
     },
-    setDecryptedMsg(state, msg) {
-      state.executionToken = msg;
+    setExecutionToken(state: State, executionToken: Uint8Array): void {
+      state.executionToken = executionToken;
     }
   },
   actions: {
@@ -154,7 +154,7 @@ export default createStore<State>({
         throw "error";
       }
 
-      commit("setDecryptedMsg", msg);
+      commit("setExecutionToken", msg);
     },
     async decryptResponse({ state, getters }, response: UploadResponse) {
       const enclavePubKey = getters.enclavePublicKey;

From f00c6ce2ff71a02cfd5c407271e4d2716b017e32 Mon Sep 17 00:00:00 2001
From: Pi Delport <pi@registree.io>
Date: Thu, 27 May 2021 17:07:26 +0200
Subject: [PATCH 25/39] text(AccessForm): tweak execution token message box
 title

---
 src/components/AccessForm.vue | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/components/AccessForm.vue b/src/components/AccessForm.vue
index 998c1a6..dc74d15 100644
--- a/src/components/AccessForm.vue
+++ b/src/components/AccessForm.vue
@@ -111,7 +111,7 @@ export default defineComponent({
     },
     async handleMsgDisplay(executionToken: Uint8Array) {
       await ElMessageBox({
-        title: "Something",
+        title: "Please copy and save this execution token",
         message: util.encodeBase64(executionToken),
         beforeClose: () => {
           this.setExecutionToken(null);

From 4364cb19b02d279d4fb57659aef5549bfcbacf3b Mon Sep 17 00:00:00 2001
From: Pi Delport <pi@registree.io>
Date: Thu, 27 May 2021 17:10:58 +0200
Subject: [PATCH 26/39] docs(store): add note about execution token format

---
 src/store/index.ts | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/store/index.ts b/src/store/index.ts
index b175893..c788270 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -58,6 +58,8 @@ export default createStore<State>({
     ) {
       state.uploadResult = uploadResult;
     },
+    // XXX: The execution token will probably be a JWT value later,
+    //      but for now, just save it as raw bytes.
     setExecutionToken(state: State, executionToken: Uint8Array): void {
       state.executionToken = executionToken;
     }

From 061bc9355c753695ae75204329426c7c1a61f2fe Mon Sep 17 00:00:00 2001
From: Pi Delport <pi@registree.io>
Date: Thu, 27 May 2021 17:14:38 +0200
Subject: [PATCH 27/39] refactor(store): tweak requestExecutionToken, throw on
 error

---
 src/store/index.ts | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/src/store/index.ts b/src/store/index.ts
index c788270..0ce090c 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -177,13 +177,23 @@ export default createStore<State>({
       const uuid = message.slice(24);
       commit("saveUploadResult", { accessKey, uuid });
     },
-    async requestExecutionToken({ commit, dispatch, getters }, data) {
+
+    /**
+     * Submit an execution token request.
+     *
+     * @see #actions#postAccessForm
+     * @see #mutations#setExecutionToken
+     */
+    async requestExecutionToken(
+      { commit, dispatch, getters },
+      executionTokenRequest
+    ): Promise<void> {
       const enclavePubKey = getters.enclavePublicKey;
       if (!enclavePubKey) {
-        return null;
+        throw "error";
       }
       const { ourData, messageData } = await encryptJson(
-        data,
+        executionTokenRequest,
         enclavePubKey as Base64
       );
 

From d2949ae1cfb662eeb2cc79926aa94d91a0a50446 Mon Sep 17 00:00:00 2001
From: Pi Delport <pi@registree.io>
Date: Thu, 27 May 2021 17:22:17 +0200
Subject: [PATCH 28/39] fix(store): add await for postAccessForm dispatch

---
 src/store/index.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/store/index.ts b/src/store/index.ts
index 0ce090c..cc107bb 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -198,7 +198,7 @@ export default createStore<State>({
       );
 
       commit("saveSecretKey", ourData.ourSecretKey);
-      dispatch("postAccessForm", {
+      await dispatch("postAccessForm", {
         metadata: {
           nonce: messageData.nonce,
           uploader_pub_key: messageData.ourPublicKey

From 31a65a110d88a26f8b9e2d2eb9a87eb9fd6e77c7 Mon Sep 17 00:00:00 2001
From: Pi Delport <pi@registree.io>
Date: Thu, 27 May 2021 17:37:08 +0200
Subject: [PATCH 29/39] lint(cryptography): yarn lint

---
 src/utils/cryptography.ts | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/src/utils/cryptography.ts b/src/utils/cryptography.ts
index 9dca74f..a36229b 100644
--- a/src/utils/cryptography.ts
+++ b/src/utils/cryptography.ts
@@ -115,10 +115,8 @@ function encryptBox(
   ourPublicKey: Uint8Array;
   ourSecretKey: Uint8Array;
 } {
-  const {
-    publicKey: ourPublicKey,
-    secretKey: ourSecretKey
-  } = nacl.box.keyPair();
+  const { publicKey: ourPublicKey, secretKey: ourSecretKey } =
+    nacl.box.keyPair();
   const nonce = nacl.randomBytes(nacl.box.nonceLength);
   const ciphertext = nacl.box(plaintext, nonce, theirPublicKey, ourSecretKey);
   return { ciphertext, nonce, ourPublicKey, ourSecretKey };

From 8127c3fceb9058c0f4b47b12746ca354c9d81c02 Mon Sep 17 00:00:00 2001
From: Pi Delport <pi@registree.io>
Date: Thu, 27 May 2021 17:38:01 +0200
Subject: [PATCH 30/39] refactor(cryptography): pull fields back into
 EncryptedMessage

---
 src/utils/cryptography.ts | 20 ++++++++------------
 1 file changed, 8 insertions(+), 12 deletions(-)

diff --git a/src/utils/cryptography.ts b/src/utils/cryptography.ts
index a36229b..6a4aed7 100644
--- a/src/utils/cryptography.ts
+++ b/src/utils/cryptography.ts
@@ -6,19 +6,15 @@ import util from "tweetnacl-util";
 
 export type Base64 = string;
 
-export interface MessageData {
-  ourPublicKey: Base64;
-  nonce: Base64;
-  ciphertext: Base64;
-}
-
-export interface OurData {
-  ourSecretKey: Base64;
-}
-
 export interface EncryptedMessage {
-  readonly ourData: OurData;
-  readonly messageData: MessageData;
+  readonly ourData: {
+    ourSecretKey: Base64;
+  };
+  readonly messageData: {
+    ourPublicKey: Base64;
+    nonce: Base64;
+    ciphertext: Base64;
+  };
 }
 
 /**

From 47d69123de1abb85cf2c6d08b721ea05ea101696 Mon Sep 17 00:00:00 2001
From: Pi Delport <pi@registree.io>
Date: Thu, 27 May 2021 17:38:24 +0200
Subject: [PATCH 31/39] docs(cryptography): add TODO comment for better local
 key management

---
 src/utils/cryptography.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/utils/cryptography.ts b/src/utils/cryptography.ts
index 6a4aed7..ad0131b 100644
--- a/src/utils/cryptography.ts
+++ b/src/utils/cryptography.ts
@@ -7,6 +7,7 @@ import util from "tweetnacl-util";
 export type Base64 = string;
 
 export interface EncryptedMessage {
+  // TODO: Remove the secret key from this interface, once we have better local key management?
   readonly ourData: {
     ourSecretKey: Base64;
   };

From 777c231c6b007f58ec560136007342e65b66ef88 Mon Sep 17 00:00:00 2001
From: Pi Delport <pi@registree.io>
Date: Thu, 27 May 2021 17:42:02 +0200
Subject: [PATCH 32/39] refactor(store): drop unused code: decryptResponse

---
 src/store/index.ts | 13 -------------
 1 file changed, 13 deletions(-)

diff --git a/src/store/index.ts b/src/store/index.ts
index cc107bb..18b71d6 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -158,19 +158,6 @@ export default createStore<State>({
 
       commit("setExecutionToken", msg);
     },
-    async decryptResponse({ state, getters }, response: UploadResponse) {
-      const enclavePubKey = getters.enclavePublicKey;
-      if (!enclavePubKey || !state.ourSecretKey) {
-        // TODO: Error Handling
-        return "error";
-      }
-      return decryptMessage(
-        response.ciphertext,
-        response.nonce,
-        enclavePubKey,
-        state.ourSecretKey
-      );
-    },
     async parseUploadMessage({ commit }, message: Uint8Array) {
       console.log("parseUploadMessage:", message);
       const accessKey = btoa(message.slice(0, 24).toString());

From ff3a078f0cde5294d736de8a7184a06fd662e37b Mon Sep 17 00:00:00 2001
From: Pi Delport <pi@registree.io>
Date: Thu, 27 May 2021 17:53:59 +0200
Subject: [PATCH 33/39] refactor(models): rename data upload types to "sealed"
 types
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* @/models/data-upload → @/models/sealed-calls
* UploadRequest → SealedRequest
* UploadResponse → SealedResponse
---
 src/models/{data-upload.ts => sealed-calls.ts} |  8 ++++++--
 src/store/index.ts                             | 13 +++++--------
 2 files changed, 11 insertions(+), 10 deletions(-)
 rename src/models/{data-upload.ts => sealed-calls.ts} (75%)

diff --git a/src/models/data-upload.ts b/src/models/sealed-calls.ts
similarity index 75%
rename from src/models/data-upload.ts
rename to src/models/sealed-calls.ts
index 2c01cb5..b75f858 100644
--- a/src/models/data-upload.ts
+++ b/src/models/sealed-calls.ts
@@ -1,4 +1,8 @@
-export interface Request {
+/**
+ * Types for dealing with sealed API calls.
+ */
+
+export interface SealedRequest {
   readonly metadata: Metadata;
   // Base64 encoded Uint8Array
   readonly payload: string;
@@ -11,7 +15,7 @@ export interface Metadata {
   readonly nonce: string;
 }
 
-export interface Response {
+export interface SealedResponse {
   // Base64 encoded Uint8Array
   readonly ciphertext: string;
   // Base64 encoded Uint8Array
diff --git a/src/store/index.ts b/src/store/index.ts
index 18b71d6..81548e0 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -8,10 +8,7 @@ import {
 import { verifyToken } from "@/utils/jwt";
 import { AttestationToken } from "@/utils/attestation-token";
 import base64url from "base64url";
-import {
-  Request as UploadRequest,
-  Response as UploadResponse
-} from "@/models/data-upload";
+import { SealedRequest, SealedResponse } from "@/models/sealed-calls";
 import axios from "axios";
 
 export interface State {
@@ -94,9 +91,9 @@ export default createStore<State>({
     },
     async uploadFile(
       { dispatch, getters, state },
-      request: UploadRequest
+      request: SealedRequest
     ): Promise<void> {
-      const res = await axios.post<UploadResponse>(
+      const res = await axios.post<SealedResponse>(
         "https://rtc-data.registree.io/data/uploads",
         request,
         { validateStatus: status => status === 200 }
@@ -127,9 +124,9 @@ export default createStore<State>({
     },
     async postAccessForm(
       { commit, getters, state },
-      request: UploadRequest
+      request: SealedRequest
     ): Promise<void> {
-      const res = await axios.post<UploadResponse>(
+      const res = await axios.post<SealedResponse>(
         "https://rtc-data.registree.io/auth/tokens",
         request,
         { validateStatus: status => status === 200 }

From 952f893c612f488e00365acdecbefbb27d29f4c7 Mon Sep 17 00:00:00 2001
From: Pi Delport <pi@registree.io>
Date: Thu, 27 May 2021 18:16:46 +0200
Subject: [PATCH 34/39] feat(utils): add checkDefined helper

---
 src/utils/checks.ts | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 src/utils/checks.ts

diff --git a/src/utils/checks.ts b/src/utils/checks.ts
new file mode 100644
index 0000000..7d066fc
--- /dev/null
+++ b/src/utils/checks.ts
@@ -0,0 +1,13 @@
+/**
+ * Check that a value is defined.
+ *
+ * @throws Error if `value` is `null` or `undefined`
+ */
+export function checkDefined<T>(value: T | null | undefined): T {
+  if (value === null) {
+    throw new Error("unexpected null value");
+  } else if (value === undefined) {
+    throw new Error("unexpected undefined value");
+  }
+  return value;
+}

From 3f63d9dd18784b1c04247d2e8dc4c41503aafdb8 Mon Sep 17 00:00:00 2001
From: Pi Delport <pi@registree.io>
Date: Thu, 27 May 2021 18:18:05 +0200
Subject: [PATCH 35/39] refactor(store): use checkDefined for null checks

Also add some type annotations, while here.
---
 src/store/index.ts | 53 ++++++++++------------------------------------
 1 file changed, 11 insertions(+), 42 deletions(-)

diff --git a/src/store/index.ts b/src/store/index.ts
index 81548e0..a3e8f35 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -1,3 +1,4 @@
+import { checkDefined } from "@/utils/checks";
 import { createLogger, createStore } from "vuex";
 import {
   encryptBlob,
@@ -72,10 +73,7 @@ export default createStore<State>({
       commit("saveToken", token);
     },
     async encryptAndUploadFile({ commit, dispatch, getters }, message: File) {
-      const enclavePubKey = getters.enclavePublicKey;
-      if (!enclavePubKey) {
-        return null;
-      }
+      const enclavePubKey: string = checkDefined(getters.enclavePublicKey);
       const { ourData, messageData } = await encryptBlob(
         message,
         enclavePubKey as Base64
@@ -98,28 +96,15 @@ export default createStore<State>({
         request,
         { validateStatus: status => status === 200 }
       );
-      const enclavePubKey = getters.enclavePublicKey;
-      const ourSecretKey = state.ourSecretKey;
-
-      if (!enclavePubKey || !ourSecretKey) {
-        // TODO: Error Handling
-        throw "error";
-      }
+      const enclavePubKey: string = checkDefined(getters.enclavePublicKey);
+      const ourSecretKey: Base64 = checkDefined(state.ourSecretKey);
 
       const { nonce, ciphertext } = res.data;
 
-      const msg = decryptMessage(
-        ciphertext,
-        nonce,
-        enclavePubKey,
-        ourSecretKey
+      const msg: Uint8Array = checkDefined(
+        decryptMessage(ciphertext, nonce, enclavePubKey, ourSecretKey)
       );
 
-      if (!msg) {
-        // TODO: Error Handling
-        throw "error";
-      }
-
       await dispatch("parseUploadMessage", msg);
     },
     async postAccessForm(
@@ -131,28 +116,15 @@ export default createStore<State>({
         request,
         { validateStatus: status => status === 200 }
       );
-      const enclavePubKey = getters.enclavePublicKey;
-      const ourSecretKey = state.ourSecretKey;
-
-      if (!enclavePubKey || !ourSecretKey) {
-        // TODO: Error Handling
-        throw "error";
-      }
+      const enclavePubKey: string = checkDefined(getters.enclavePublicKey);
+      const ourSecretKey: Base64 = checkDefined(state.ourSecretKey);
 
       const { nonce, ciphertext } = res.data;
 
-      const msg = decryptMessage(
-        ciphertext,
-        nonce,
-        enclavePubKey,
-        ourSecretKey
+      const msg: Uint8Array = checkDefined(
+        decryptMessage(ciphertext, nonce, enclavePubKey, ourSecretKey)
       );
 
-      if (!msg) {
-        // TODO: Error Handling
-        throw "error";
-      }
-
       commit("setExecutionToken", msg);
     },
     async parseUploadMessage({ commit }, message: Uint8Array) {
@@ -172,10 +144,7 @@ export default createStore<State>({
       { commit, dispatch, getters },
       executionTokenRequest
     ): Promise<void> {
-      const enclavePubKey = getters.enclavePublicKey;
-      if (!enclavePubKey) {
-        throw "error";
-      }
+      const enclavePubKey: string = checkDefined(getters.enclavePublicKey);
       const { ourData, messageData } = await encryptJson(
         executionTokenRequest,
         enclavePubKey as Base64

From 4a8938f16eed9ce65b9a007314ccd26c9fec0dda Mon Sep 17 00:00:00 2001
From: Pi Delport <pi@registree.io>
Date: Thu, 27 May 2021 18:22:07 +0200
Subject: [PATCH 36/39] refactor(AccessForm): remove unused store accessors

---
 src/components/AccessForm.vue | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/src/components/AccessForm.vue b/src/components/AccessForm.vue
index dc74d15..e689540 100644
--- a/src/components/AccessForm.vue
+++ b/src/components/AccessForm.vue
@@ -45,7 +45,7 @@
 import { defineComponent } from "vue";
 import elForm from "element-plus/lib/el-form";
 import { ElMessageBox } from "element-plus";
-import { mapActions, mapGetters, mapMutations, mapState } from "vuex";
+import { mapActions, mapMutations, mapState } from "vuex";
 import { notifyErrors } from "@/utils/error-notification";
 import util from "tweetnacl-util";
 
@@ -85,8 +85,7 @@ export default defineComponent({
     };
   },
   computed: {
-    ...mapState(["ourSecretKey", "executionToken"]),
-    ...mapGetters(["enclavePublicKey"])
+    ...mapState(["executionToken"])
   },
   methods: {
     ...mapActions(["requestExecutionToken"]),

From eff97b78d06ea9c34ab93d59440711682d8dc6a5 Mon Sep 17 00:00:00 2001
From: Pi Delport <pi@registree.io>
Date: Thu, 27 May 2021 19:42:13 +0200
Subject: [PATCH 37/39] refactor(store): pull out UploadResult type

---
 src/store/index.ts | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/src/store/index.ts b/src/store/index.ts
index a3e8f35..b1fa985 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -12,11 +12,16 @@ import base64url from "base64url";
 import { SealedRequest, SealedResponse } from "@/models/sealed-calls";
 import axios from "axios";
 
+interface UploadResult {
+  accessKey: string;
+  uuid: Uint8Array;
+}
+
 export interface State {
   jwtToken: string | null;
   ourSecretKey: Base64 | null;
   attestationResult: AttestationToken | null;
-  uploadResult: { accessKey: string; uuid: Uint8Array } | null;
+  uploadResult: UploadResult | null;
   executionToken: Uint8Array | null;
 }
 
@@ -50,10 +55,7 @@ export default createStore<State>({
     saveSecretKey(state, secretKey: Base64) {
       state.ourSecretKey = secretKey;
     },
-    saveUploadResult(
-      state,
-      uploadResult: { accessKey: string; uuid: Uint8Array }
-    ) {
+    saveUploadResult(state, uploadResult: UploadResult) {
       state.uploadResult = uploadResult;
     },
     // XXX: The execution token will probably be a JWT value later,

From 2c44236582ce5b833c3f4f25cb5e2bf86e727e25 Mon Sep 17 00:00:00 2001
From: Pi Delport <pi@registree.io>
Date: Thu, 27 May 2021 19:46:11 +0200
Subject: [PATCH 38/39] refactor(store): factor out a common sealedPost helper

---
 src/store/index.ts | 147 +++++++++++++++++++++------------------------
 1 file changed, 70 insertions(+), 77 deletions(-)

diff --git a/src/store/index.ts b/src/store/index.ts
index b1fa985..68ca4d9 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -4,6 +4,7 @@ import {
   encryptBlob,
   Base64,
   decryptMessage,
+  EncryptedMessage,
   encryptJson
 } from "@/utils/cryptography";
 import { verifyToken } from "@/utils/jwt";
@@ -74,92 +75,33 @@ export default createStore<State>({
     saveToken({ commit }, token) {
       commit("saveToken", token);
     },
-    async encryptAndUploadFile({ commit, dispatch, getters }, message: File) {
-      const enclavePubKey: string = checkDefined(getters.enclavePublicKey);
-      const { ourData, messageData } = await encryptBlob(
-        message,
-        enclavePubKey as Base64
-      );
-      commit("saveSecretKey", ourData.ourSecretKey);
-      dispatch("uploadFile", {
-        metadata: {
-          nonce: messageData.nonce,
-          uploader_pub_key: messageData.ourPublicKey
-        },
-        payload: messageData.ciphertext
-      });
-    },
-    async uploadFile(
-      { dispatch, getters, state },
-      request: SealedRequest
-    ): Promise<void> {
-      const res = await axios.post<SealedResponse>(
-        "https://rtc-data.registree.io/data/uploads",
-        request,
-        { validateStatus: status => status === 200 }
-      );
-      const enclavePubKey: string = checkDefined(getters.enclavePublicKey);
-      const ourSecretKey: Base64 = checkDefined(state.ourSecretKey);
 
-      const { nonce, ciphertext } = res.data;
-
-      const msg: Uint8Array = checkDefined(
-        decryptMessage(ciphertext, nonce, enclavePubKey, ourSecretKey)
-      );
-
-      await dispatch("parseUploadMessage", msg);
-    },
-    async postAccessForm(
-      { commit, getters, state },
-      request: SealedRequest
-    ): Promise<void> {
-      const res = await axios.post<SealedResponse>(
-        "https://rtc-data.registree.io/auth/tokens",
-        request,
-        { validateStatus: status => status === 200 }
-      );
-      const enclavePubKey: string = checkDefined(getters.enclavePublicKey);
-      const ourSecretKey: Base64 = checkDefined(state.ourSecretKey);
-
-      const { nonce, ciphertext } = res.data;
-
-      const msg: Uint8Array = checkDefined(
-        decryptMessage(ciphertext, nonce, enclavePubKey, ourSecretKey)
+    /**
+     * Upload a data file, and save the resulting UUID and access token.
+     */
+    async encryptAndUploadFile(context, message: File): Promise<void> {
+      const uploadResult = parseUploadResponse(
+        await sealedPost(
+          "https://rtc-data.registree.io/data/uploads",
+          message,
+          checkDefined(context.getters.enclavePublicKey),
+          encryptBlob
+        )
       );
-
-      commit("setExecutionToken", msg);
-    },
-    async parseUploadMessage({ commit }, message: Uint8Array) {
-      console.log("parseUploadMessage:", message);
-      const accessKey = btoa(message.slice(0, 24).toString());
-      const uuid = message.slice(24);
-      commit("saveUploadResult", { accessKey, uuid });
+      context.commit("saveUploadResult", uploadResult);
     },
 
     /**
      * Submit an execution token request.
-     *
-     * @see #actions#postAccessForm
-     * @see #mutations#setExecutionToken
      */
-    async requestExecutionToken(
-      { commit, dispatch, getters },
-      executionTokenRequest
-    ): Promise<void> {
-      const enclavePubKey: string = checkDefined(getters.enclavePublicKey);
-      const { ourData, messageData } = await encryptJson(
+    async requestExecutionToken(context, executionTokenRequest): Promise<void> {
+      const executionToken = await sealedPost(
+        "https://rtc-data.registree.io/data/uploads",
         executionTokenRequest,
-        enclavePubKey as Base64
+        checkDefined(context.getters.enclavePublicKey),
+        encryptJson
       );
-
-      commit("saveSecretKey", ourData.ourSecretKey);
-      await dispatch("postAccessForm", {
-        metadata: {
-          nonce: messageData.nonce,
-          uploader_pub_key: messageData.ourPublicKey
-        },
-        payload: messageData.ciphertext
-      });
+      context.commit("setExecutionToken", executionToken);
     }
   },
   modules: {}
@@ -199,3 +141,54 @@ async function fetchAttestationToken(): Promise<string> {
     }
   }
 }
+
+/**
+ * Helper: Post a sealed request, and unseal the response.
+ *
+ * @param url - The endpoint URL to post to
+ * @param value - The unsealed value to seal and post
+ * @param enclavePubKey - The remote enclave's public key
+ * @param encrypt - Function to encrypt (seal) the value with
+ * @returns - The unsealed response bytes
+ */
+async function sealedPost<T>(
+  url: string,
+  value: T,
+  enclavePubKey: Base64,
+  encrypt: (value: T, theirPublicKey: Base64) => Promise<EncryptedMessage>
+): Promise<Uint8Array> {
+  // Seal:
+  const {
+    ourData: { ourSecretKey: ephemeralSecretKey },
+    messageData
+  }: EncryptedMessage = await encrypt(value, enclavePubKey);
+  const requestBody: SealedRequest = {
+    metadata: {
+      nonce: messageData.nonce,
+      uploader_pub_key: messageData.ourPublicKey
+    },
+    payload: messageData.ciphertext
+  };
+
+  // Post:
+  const axiosResponse = await axios.post<SealedResponse>(url, requestBody, {
+    validateStatus: status => status === 200
+  });
+  const responseBody: SealedResponse = axiosResponse.data;
+
+  // Unseal:
+  const { nonce, ciphertext } = responseBody;
+  return checkDefined(
+    decryptMessage(ciphertext, nonce, enclavePubKey, ephemeralSecretKey)
+  );
+}
+
+/**
+ * Helper: Parse raw data upload result to a data access key and UUID.
+ */
+function parseUploadResponse(bytes: Uint8Array): UploadResult {
+  return {
+    accessKey: btoa(bytes.slice(0, 24).toString()),
+    uuid: bytes.slice(24)
+  };
+}

From 7c176105eec012f1f406e903b6f707b8c506e222 Mon Sep 17 00:00:00 2001
From: Pi Delport <pi@registree.io>
Date: Thu, 27 May 2021 19:48:45 +0200
Subject: [PATCH 39/39] refactor(store): drop unused secret key from store
 state

Each request's ephemeral secret key is now managed inside sealedPost.
---
 src/store/index.ts | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/src/store/index.ts b/src/store/index.ts
index 68ca4d9..14d68ea 100644
--- a/src/store/index.ts
+++ b/src/store/index.ts
@@ -20,7 +20,6 @@ interface UploadResult {
 
 export interface State {
   jwtToken: string | null;
-  ourSecretKey: Base64 | null;
   attestationResult: AttestationToken | null;
   uploadResult: UploadResult | null;
   executionToken: Uint8Array | null;
@@ -32,7 +31,6 @@ export default createStore<State>({
   plugins: process.env.NODE_ENV !== "production" ? [createLogger()] : [],
   state: {
     jwtToken: null,
-    ourSecretKey: null,
     attestationResult: null,
     uploadResult: null,
     executionToken: null
@@ -53,9 +51,6 @@ export default createStore<State>({
     saveAttestationResult(state, attestationResult) {
       state.attestationResult = attestationResult;
     },
-    saveSecretKey(state, secretKey: Base64) {
-      state.ourSecretKey = secretKey;
-    },
     saveUploadResult(state, uploadResult: UploadResult) {
       state.uploadResult = uploadResult;
     },