0

SEP30 still in draft hence we looking to implement it. while implementing this there are some issues/queries which i need help.

1.Register account (POST /accounts/<address>) :

Here the <address> we consider the one we are going to register and SEP10 jwt token will be issued for the same <address> for request to register. 
    
Now in request identities payload, each role has its own auth_methods with unique stellar_address ? with the response below
{
  "address": "GFDD...", //is this the original <address> returned ?
  "identities": [
    { "role": "sender" },
    { "role": "receiver" }
  ],
  "signers": [
    { "key": "GADF..." } 
  ]
}

2.Now in consideration of the above endpoint let’s talk about GET /accounts. This endpoint will return a list of accounts that the JWT allows access to. Example response below:

{
  "accounts": [
    {
      "address": "GEAC...",
      "identities": [
        { "authenticated": true } //in this example, it’s marked true. How can we ensure we mark it as true ?
      ],
      "signers": [
        { "key": "GADF..." }
      ]
    },
    {
      "address": "GFDD...",
      "identities": [
        { "role": "sender", "authenticated": true },
        { "role": "receiver" },
      ],
      "signers": [
        { "key": "GADF..." }
      ]
    },
    {
      "address": "GACD...",
      "identities": [
        { "role": "sender" },
        { "role": "receiver", "authenticated": true },
      ],
      "signers": [
        { "key": "GADF..." }
      ]
    }
  ]
}

In the registration process multiple identity registration returns the same account "address": "GFDD..." and same signer. While getting all accounts above in response having different accounts with the same signer and also multiple identity roles. What are the expected data relations between parameters ? It appears as if the registration request has a conflict with GET all accounts.

Is the jwt generated by the identity stellar_address ?

  1. DELETE /accounts/<address> : With this endpoint are we expected to only delete the account or the entire identity associated with the account ? Also, will the SEP10 jwt be issued by <address> or identity stellar_address ?

  2. In the SEP30 implementation, with the register endpoint we need to pass identities to register, which are saved in our database. For the data relation of identity and signing key should we consider every identity with one signing key relation or every registered account with one signing key ?

  3. How should SEP30 verify with external authentication ? How will this make sure that external authentication token is valid ? https://github.com/stellar/stellar-protocol/blob/master/ecosystem/sep-0030.md#authentication

  4. What is a best practice for Signing in from different devices for the same account, and what would you suggest as the best practice to manage multiple device keys from a SEP30 perspective?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.