0004080: wallet-bank signaling should be event-based

ID	Project	Category	View Status	Date Submitted	Last Update
0004080	Taler	wallet (WebExtension)	public	2015-12-04 15:08	2019-12-26 20:37

Reporter	Florian Dold	Assigned To	Marcello Stanisci	Resolution deadline
Implementer		Reviewer
Release signed by		Deployed by
Verifier		Communicator
Data protection authority notification required	No
CSIRT notification required	No
Estimated effort (hours)		Actual effort (hours)	0
Fast-track	No
Work package	none
Priority	normal	Severity	minor	Reproducibility	have not tried
Status	closed	Resolution	fixed
Target Version	0.0	Fixed in Version	0.0

Summary	0004080: wallet-bank signaling should be event-based
Description	Right now, the wallet heavily modifies the bank pages' DOM. It even triggers form submissions (i.e. the wallet triggers form submission in the bank's DOM), which doesn't seem like a good idea. Instead, the communication should be event-based, and the events should carry all relevant information.
Tags	No tags attached.

Date Modified	Username	Field	Change
2015-12-04 15:08	Florian Dold	New Issue
2015-12-04 15:08	Florian Dold	Status	new => assigned
2015-12-04 15:08	Florian Dold	Assigned To	=> Marcello Stanisci
2015-12-04 18:56	Florian Dold	Note Added: 0009977
2015-12-04 18:59	Florian Dold	Status	assigned => informing
2015-12-04 18:59	Florian Dold	Resolution	open => fixed
2015-12-05 00:31	Christian Grothoff	Status	informing => closed
2016-09-26 12:00	Christian Grothoff	Fixed in Version	=> 0.0
2016-09-26 12:01	Christian Grothoff	Target Version	=> 0.0
2019-12-26 20:37	Florian Dold	Category	wallet (browser-based) => wallet (WebExtensions)
2023-04-13 18:37	Florian Dold	Category	wallet (WebExtensions) => wallet (WebExtension)

Florian Dold 2015-12-04 18:56 manager ~0009977	Thinking about this a bit more, my initial criticism was possibly misguided. However, the POST request against the bank should return a redirect and no html, so that wallet browser extensions do not violate the cross origin policy.