Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Known issue: Wallet Backend as proxy for the cross-origin http requests #92

Open
kkmanos opened this issue Oct 11, 2024 · 0 comments
Open

Comments

@kkmanos
Copy link
Member

kkmanos commented Oct 11, 2024

Since wwWallet now runs on the browser after the PR which transferred the protocols to the frontend, the issue with cross-origin request blocking was raised when communicating with external servers for the issuance and presentation flows.

A temporary solution that has been adopted is the utilization of the wallet-backend-server as the proxy for the http requests directed to the Issuers and Verifiers.

However, the primary target of the wwWallet project is always to build an architecture which prevents the wallet-backend-server from gaining insight to personal or transaction-related data being exchanged between the wallet-frontend and external parties (issuers/verifiers). That being said, the HTTP proxy module needs to be eliminated and figure a different way to tackle this challenge which will maintain the anonymity of the wallet-frontend.

Possible solution

In the case where the wwWallet is wrapped with a native wrapper, then the native wrapper application can be utilized to intercept the HTTP calls and execute them on behalf of the browser app to avoid cross-origin request blocking.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant