Weekly Sync - 06 February 2024

[github-actions[bot]]

Please add agenda items below and give your weekly update in a comment. Thank you!

Agenda

• @AlexLakatos @raducristianpopa: off by 1 issue in @interledger/pay

[Tymmmy]

Grant improvements, with pagination, extra details
Continue Testnet cleanup
Org stuff- monthly overviews, new stories for Developer Keys based on WebExtension workweek

[JoblersTune]

Still busy on designing an auth solution for the admin UI. In my experimental setup I have configured an OAuth 2.0 client with a simplified login and consent flow using dummy screens in the admin UI. I only have a dummy successful flow going but can extract the access token now as well. I've been focusing on getting Hydra up in the Docker Compose setup. However I have been encountering issues with that regarding Hydra's redirects, which need to always match exactly for security reasons and I don't know of a good way to resolve URLs correctly when they need to be interpreted both for container -> container communication as well as browser -> container communication.
For now I have tried an approach of moving the admin UI and Hydra containers off the Rafiki network and onto the host network. But this poses other problems. It does at least confirm that the redirect addresses are the issue since I have my basic flow working again.

I will continue on resolving the local setup and with progressing the actual hydra implementation.

[BlairCurrey]

• Integration tests.
  • test docker environment up and running (backend/auth for two MASEs and a shared db)
  • extracted some shared functionality from the mock-account-servicing-entity package into a shared package that the integration tests and mock-account-servicing-entity will use.
  • have a MockASE class which encapsulates all the mock account servicing entity stuff in the tests. At the moment this includes an apollo client, authenticated open payments client, and accounts.
  • starting on the webhook servers for the MockASE's and generally progressing towards actually composing the Postman Open Payments flows as tests. Probably need to figure out signing the headers first -- not sure what else.

[beniaminmunteanu]

Mostly worked on telemetry PR suggestions and maintaining the code review process

[njlie]

• Finished up the polling PR for the Authorization Server
  • Added handling for grants without finish methods to the interaction finish step
• Assisting in getting ORY Hydra set up with the Admin UI
  • Plan to use Hydra to verify tokens for GraphQL API security