Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(wallet-daemon): add new authentication method #1275

Open
ksrichard opened this issue Jan 31, 2025 · 0 comments
Open

feat(wallet-daemon): add new authentication method #1275

ksrichard opened this issue Jan 31, 2025 · 0 comments
Assignees
Milestone

Comments

@ksrichard
Copy link
Collaborator

Context

We must have an authentication method in wallet daemon to avoid any attacks that ends with stolen funds for example.

Proposal for authentication method

Use Webauthn (more info about the flow: webauthn.me) as an optional authentication method in wallet daemon.
This method allows us to securely do authentication on a public/private key basis. You are also allowed to use security hardware devices like Yubikey.
This method works perfectly on browser, but it needs to be working from CLI or code to call RPC methods.

Proposal for CLI

Webauthn authentication can work like we generate a simple URL that the user can open in browser, do authentication to get a token that can be pasted to the CLI prompt to make it working.

Proposal for RPC calls from code

TBD

@ksrichard ksrichard moved this to Selected for development in Tari Digital Assets Network (DAN) backlog Jan 31, 2025
@ksrichard ksrichard added this to the v0.8.0 milestone Jan 31, 2025
@ksrichard ksrichard self-assigned this Jan 31, 2025
@ksrichard ksrichard moved this from Selected for development to In Progress in Tari Digital Assets Network (DAN) backlog Jan 31, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Development

No branches or pull requests

1 participant