Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WALLET-388: Retrieve resource and send to the Wallet Backend service. #7

Merged

Conversation

jholleran
Copy link
Contributor

This PR changes the Frontend application to retrieve resource and send to the Wallet Backend service when scanning a QR code. It no longer calls the collect endpoint and now used the existing PUT /wallet endpoint.

The /wallet/collect endpoint is going to be removed to prevent a SSRF attack on the Wallet Backend service.

Also added some error handling but there is more to do here to give a proper message to the user that something went wrong. It could also perform some retries. These issues and improvements will need to be handled in another issue.

@jholleran jholleran requested review from a team as code owners July 25, 2024 11:19
Copy link
Contributor

@edwardsph edwardsph left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That works but can we simplify what is needed from the QR code as we can work out the content type when we fetch the resource. Perhaps @maxleonard or @seilagonzalez would need to comment on this.

@jholleran
Copy link
Contributor Author

jholleran commented Jul 25, 2024

That works but can we simplify what is needed from the QR code as we can work out the content type when we fetch the resource.

It might be but I don't think we should change that as part of this work. I want to keep this focused on replacing the /vallet/collect endpoint.

Copy link
Contributor

@edwardsph edwardsph left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Makes sense - LGTM

@jholleran jholleran merged commit 7c2587e into main Jul 25, 2024
7 checks passed
@jholleran jholleran deleted the feature/WALLET-388-retrieve-resource-and-sent-to-backend branch July 25, 2024 14:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants