aleph-v / ghost-wallet Goto Github PK

We need to add code which produces a challenge [hash of the address requested], submits the challenge to be signed by the UF2 device, then forwards that signature to the ethereum transaction code.

The project needs to be able to take the information from the database back end and the result of the UF2 signing operation, format it, and then request the user send the transaction from their metamask account.

This depends on the completion of the database task.
We need to implement the JS code to request and verify FIDO2 onetime password logins securely. We need to do significant research to make sure the login page is non by passable and that any other code only runs after a valid login.

We need to figure out how we want to do database management: sql, mongo db, graph ql?
We need to store the following information:

• Username and FIDO2 passwordless login data
• Identity contract address for each user
• Personal Faucet private key for each user
  The research component of this is figuring out which of these will work the best and be the most secure. After that we need to actually implement a database.

Add a component which after a valid login allows a user to send some ether to pay for gas costs of the new account verification. It should access the database to get the user's private key then format and send a transaction with the requested amount of ether to the new address. For high security it should likely request a UF2 verification request or some other hardware root of trust verification before sending.
This system will likely not use the same transaction path as the account registration transaction [namely metamask].