account plugins

You can use account plugins with GoQuorum or clef to provide additional account management.

See the account plugin reference for more information.

Available account plugins

Name	Version	Description
hashicorp-vault	0.0.1	Enables storage of GoQuorum account keys in a HashiCorp Vault KV v2 engine. Written in Go.

Using GoQuorum and clef

Run an account plugin using GoQuorum or clef:

GoQuorum

geth --plugins file:///path/to/plugins.json ...

clef

clef --plugins file:///path/to/plugins.json ...

plugins.json is the plugins configuration file that defines an account provider:

{
  "providers": {
    "account": {
      "name": "quorum-account-plugin-<NAME>",
      "version": "<VERSION>",
      "config": "file:///path/to/plugin.json"
    }
  }
}

RPC API

A limited API allows users to interact directly with account plugins.

caution

GoQuorum must expose the API using the --http.api plugin@account or --ws.api plugin@account command line options.

plugin@account_newAccount

Creates a plugin-managed account with a new key.

Parameters

config: object - Plugin-specific JSON configuration for creating an account. See the plugin's documentation for more information on the JSON configuration required.

GoQuorum

curl -X POST \
    -H "Content-Type:application/json" \
    -d '
        {
            "jsonrpc":"2.0",
            "method":"plugin@account_newAccount",
            "params":[{<config>}],
            "id":1
        }' \
    http://localhost:22000

JS console

plugin_account.newAccount({<config>})

clef

echo '
    {
        "jsonrpc":"2.0",
        "method":"plugin@account_newAccount",
        "params":[{<config>}],
        "id":1
    }
' | nc -U /path/to/clef.ipc

plugin@account_importRawKey

Creates a plugin-managed account from an existing private key.

note

Although you can use this API to move plugin-managed accounts between nodes, the plugin may provide a preferable alternative. See the plugin's documentation for more information.

Parameters

• rawkey: string - Hex-encoded account private key (without the 0x prefix).
• config: object - Plugin-specific JSON configuration for creating a new account. See the plugin's documentation for more information on the JSON configuration required.

Example

GoQuorum

curl -X POST \
    -H "Content-Type:application/json" \
    -d '
        {
            "jsonrpc":"2.0",
            "method":"plugin@account_importRawKey",
            "params":["<rawkey>", {<config>}],
            "id":1
        }' \
    http://localhost:22000

JS console

plugin_account.importRawKey(<rawkey>, {<config>})

clef

Not supported, use CLI instead

Command line interface

A limited command line interface allows users to interact directly with account plugins. Run the following command to view all geth account plugin subcommands and options:

geth account plugin --help

info

Use the --verbosity option to hide log output. For example, geth --verbosity 1 account plugin new ....

geth account plugin new

Creates a plugin-managed account from an existing key.

Parameters

plugins.account.config: Plugin-specific configuration for creating an account. The value can be file://... or inline JSON. See the plugin's documentation for more information on the JSON configuration required.

JSON file

geth account plugin new \
    --plugins file:///path/to/plugin-config.json \
    --plugins.account.config file:///path/to/new-acct-config.json

inline JSON

geth account plugin new \
    --plugins file:///path/to/plugin-config.json \
    --plugins.account.config '{<json>}'

geth account plugin import

Creates a plugin-managed account from an existing private key.

Parameters

• plugins.account.config: Plugin-specific configuration for creating an account. The value can be file://... or inline JSON. See the plugin's documentation for more information on the JSON configuration required.
• rawkey: Path to the file containing a hex-encoded account private key (without the 0x prefix) (for example /path/to/raw.key).

JSON file

geth account plugin import \
    --plugins file:///path/to/plugin-config.json \
    --plugins.account.config file:///path/to/new-acct-config.json \
    /path/to/raw.key

inline JSON

geth account plugin import \
    --plugins file:///path/to/plugin-config.json \
    --plugins.account.config '{<json>}'
    /path/to/raw.key

geth account plugin list

Lists all the plugin-managed accounts for a given configuration.

geth account plugin list \
    --plugins file:///path/to/plugin-config.json