WebOfTrust · rodolfomiranda · Mar 12, 2024 · Mar 12, 2024 · Mar 12, 2024
diff --git a/example-web/my-app/src/App.js b/example-web/my-app/src/App.js
@@ -24,7 +24,9 @@ function CircularIndeterminate() {
   );
 }
 
-const VENDOR_URL = "https://api.npoint.io/d59bd3ab0b31de863a20";
+const PROVENANT_URL = "https://api.npoint.io/d59bd3ab0b31de863a20";
+const FACEBOOK_URL = "https://api.npoint.io/1d388b8942c4ec3ed763";
+const GITHUB_URL = "https://api.npoint.io/a75a0383d2820a2153c1";
 
 function App() {
   const [signifyData, setSignifyData] = useState();
@@ -51,9 +53,6 @@ function App() {
   useEffect(() => {
     subscribeToSignature(handleSignifyData);
     isExtensionInstalled((extensionId) => {
-      if (extensionId) {
-        trySettingVendorUrl(VENDOR_URL);
-      }
       setExtensionInstalled(extensionId);
     });
     return () => {
@@ -67,6 +66,10 @@ function App() {
     setParsedSignifyData(null);
   };
 
+  const handleSettingVendorUrl = async (url) => {
+    trySettingVendorUrl(url);
+  };
+
   const handleRequestAutoSignin = async () => {
     console.log("canCallAsync()", canCallAsync());
     if (canCallAsync()) {
@@ -84,33 +87,61 @@ function App() {
 
     if (extensionInstalled)
       return (
-        <div className="auth-btn-container">
-          <p className="auth-heading">Authenticate with</p>
-          <Button variant="contained" color="success" onClick={requestAid}>
-            AID
-          </Button>
-          <Button
-            variant="contained"
-            color="success"
-            onClick={requestCredential}
-          >
-            Credential
-          </Button>
-          <Button
-            variant="contained"
-            color="success"
-            onClick={requestAidORCred}
+        <>
+          <div
+            style={{ display: "flex", flexDirection: "column", rowGap: "8px" }}
           >
-            AID or CRED
-          </Button>
-          <Button
-            variant="contained"
-            color="success"
-            onClick={handleRequestAutoSignin}
-          >
-            Auto Sign in
-          </Button>
-        </div>
+            <Button
+              variant="contained"
+              color="success"
+              onClick={() => handleSettingVendorUrl(PROVENANT_URL)}
+            >
+              Provenant Theme (has Agent)
+            </Button>
+            <Button
+              variant="contained"
+              color="success"
+              onClick={() => handleSettingVendorUrl(FACEBOOK_URL)}
+            >
+              Facebook Theme
+            </Button>
+            <Button
+              variant="contained"
+              color="success"
+              onClick={() => handleSettingVendorUrl(GITHUB_URL)}
+            >
+              Github Theme (has Agent)
+            </Button>
+          </div>
+
+          <div className="auth-btn-container">
+            <p className="auth-heading">Authenticate with</p>
+            <Button variant="contained" color="success" onClick={requestAid}>
+              AID
+            </Button>
+            <Button
+              variant="contained"
+              color="success"
+              onClick={requestCredential}
+            >
+              Credential
+            </Button>
+            <Button
+              variant="contained"
+              color="success"
+              onClick={requestAidORCred}
+            >
+              AID or CRED
+            </Button>
+            <Button
+              variant="contained"
+              color="success"
+              onClick={handleRequestAutoSignin}
+            >
+              Auto Sign in
+            </Button>
+          </div>
+        </>
       );
 
     return (

diff --git a/src/_locales/en.json b/src/_locales/en.json
@@ -4,13 +4,16 @@
   "account.onboard.cta": "Don't have a KERIA agent?",
   "account.settings": "Settings",
   "account.support": "support",
+  "action.allow": "Allow",
   "action.back": "Back",
+  "action.cancel": "Cancel",
   "action.click": "click",
   "action.clickToRemove": "click to remove",
   "action.connect": "Connect",
   "action.create": "Create",
   "action.createNew": "Create New",
   "action.delete": "Delete",
+  "action.deny": "Deny",
   "action.disconnect": "Disconnect",
   "action.load": "Load",
   "action.open": "Open",
@@ -43,6 +46,11 @@
   "identifier.uniqueName": "Enter unique name for identifier",
   "identifiers.title": "Identifiers",
   "message.noItems": "No items to show",
+  "permissions.action.noProceedWithoutAgent": "No, Proceed without agent",
+  "permissions.action.yesProceed": "Yes, Proceed",
+  "permissions.desc.loadVendorUrl": "{origin} is requesting to load vendor url {url}",
+  "permissions.label.permissionRequired": "Permissions Required",
+  "permissions.warning.containsAgentUrl": "Response contains an agent Url ({url}), you will get logged out in order to connect with it.",
   "signin.aidOrCredential": "AID or Credential",
   "signin.autoSignin": "Auto Sign in",
   "signin.identifierAlias": "Identifier Alias",

diff --git a/src/_locales/es-419.json b/src/_locales/es-419.json
@@ -4,13 +4,16 @@
   "account.onboard.cta": "¿No tienes un agente KERIA?",
   "account.settings": "Ajustes",
   "account.support": "soporte",
+  "action.allow": "Permitir",
   "action.back": "Atrás",
+  "action.cancel": "Cancelar",
   "action.click": "hacer clic",
   "action.clickToRemove": "haga clic para eliminar",
   "action.connect": "Conectar",
   "action.create": "Crear",
   "action.createNew": "Crear nuevo",
   "action.delete": "Borrar",
+  "action.deny": "Denegar",
   "action.disconnect": "Desconectar",
   "action.load": "Carga",
   "action.open": "Abrir",
@@ -43,6 +46,11 @@
   "identifier.uniqueName": "Introduzca un nombre único para el identificador",
   "identifiers.title": "Identificadores",
   "message.noItems": "No hay elementos para mostrar",
+  "permissions.action.noProceedWithoutAgent": "No, proceder sin agente",
+  "permissions.action.yesProceed": "Si, proceda",
+  "permissions.desc.loadVendorUrl": "{origin} solicita cargar la URL del proveedor {url}",
+  "permissions.label.permissionRequired": "Permisos requeridos",
+  "permissions.warning.containsAgentUrl": "La respuesta contiene una URL de agente ({url}), cerrará su sesión para poder conectarse con ella.",
   "signin.aidOrCredential": "AID o Credencial",
   "signin.autoSignin": "Acceso automático",
   "signin.identifierAlias": "Alias del identificador",

diff --git a/src/_locales/es.json b/src/_locales/es.json
@@ -4,13 +4,16 @@
   "account.onboard.cta": "¿No tienes un agente KERIA?",
   "account.settings": "Ajustes",
   "account.support": "soporte",
+  "action.allow": "Permitir",
   "action.back": "Atrás",
+  "action.cancel": "Cancelar",
   "action.click": "hacer clic",
   "action.clickToRemove": "haga clic para eliminar",
   "action.connect": "Conectar",
   "action.create": "Crear",
   "action.createNew": "Crear nuevo",
   "action.delete": "Borrar",
+  "action.deny": "Denegar",
   "action.disconnect": "Desconectar",
   "action.load": "Carga",
   "action.open": "Abrir",
@@ -43,6 +46,11 @@
   "identifier.uniqueName": "Introduzca un nombre único para el identificador",
   "identifiers.title": "Identificadores",
   "message.noItems": "No hay elementos para mostrar",
+  "permissions.action.noProceedWithoutAgent": "No, proceder sin agente",
+  "permissions.action.yesProceed": "Si, proceda",
+  "permissions.desc.loadVendorUrl": "{origin} solicita cargar la URL del proveedor {url}",
+  "permissions.label.permissionRequired": "Permisos requeridos",
+  "permissions.warning.containsAgentUrl": "La respuesta contiene una URL de agente ({url}), cerrará su sesión para poder conectarse con ella.",
   "signin.aidOrCredential": "AID o Credencial",
   "signin.autoSignin": "Acceso automático",
   "signin.identifierAlias": "Alias del identificador",

diff --git a/src/pages/background/index.ts b/src/pages/background/index.ts
@@ -1,5 +1,8 @@
 import { browserStorageService } from "@pages/background/services/browser-storage";
-import { configService } from "@pages/background/services/config";
+import {
+  WEB_APP_PERMS,
+  configService,
+} from "@pages/background/services/config";
 import { userService } from "@pages/background/services/user";
 import { signifyService } from "@pages/background/services/signify";
 import { IMessage, IIdentifier, ICredential } from "@config/types";
@@ -82,28 +85,14 @@ chrome.runtime.onMessage.addListener(function (
         message.type === "vendor-info" &&
         message.subtype === "attempt-set-vendor-url"
       ) {
+        const currentUrl = await getCurrentUrl();
         const { vendorUrl } = message?.data ?? {};
-        if (!vendorUrl) {
-          return;
-        }
-
-        const _vendorUrl = await configService.getUrl();
-        if (!_vendorUrl) {
-          try {
-            const resp = await (await fetch(vendorUrl)).json();
-            if (resp?.agentUrl) {
-              await configService.setAgentUrl(resp?.agentUrl);
-              await configService.setHasOnboarded(true);
-            }
-            await configService.setData(resp);
-            if (resp?.icon) {
-              await setActionIcon(resp?.icon);
-            }
-            await configService.setUrl(vendorUrl);
-          } catch (error) {}
-        }
-
-        sendResponse({ data: { _vendorUrl } });
+
+        await configService.setWebRequestedPermission(
+          WEB_APP_PERMS.SET_VENDOR_URL,
+          { origin: currentUrl?.origin, vendorUrl }
+        );
+        sendResponse({ data: { success: true } });
       }
 
       if (

diff --git a/src/pages/background/services/config.ts b/src/pages/background/services/config.ts
@@ -7,6 +7,11 @@ const CONFIG_ENUMS = {
   VENDOR_LANG: "vendor-lang",
   AGENT_URL: "agent-url",
   HAS_ONBOARDED: "has-onboarded",
+  WEB_APP_PERMISSION: "WEB_APP_PERMISSION",
+};
+
+export const WEB_APP_PERMS = {
+  SET_VENDOR_URL: `${CONFIG_ENUMS.WEB_APP_PERMISSION}_set_vendor-url`,
 };
 
 const Config = () => {
@@ -65,20 +70,40 @@ const Config = () => {
   };
 
   const getAgentAndVendorInfo = async (): Promise<any> => {
-    const resp = await browserStorageService.getValues([
+    const resp = (await browserStorageService.getValues([
       CONFIG_ENUMS.AGENT_URL,
       CONFIG_ENUMS.VENDOR_URL,
       CONFIG_ENUMS.VENDOR_DATA,
-      CONFIG_ENUMS.HAS_ONBOARDED
-    ]) as any;
+      CONFIG_ENUMS.HAS_ONBOARDED,
+    ])) as any;
     return {
       vendorUrl: resp[CONFIG_ENUMS.VENDOR_URL],
       agentUrl: resp[CONFIG_ENUMS.AGENT_URL],
       vendorData: resp[CONFIG_ENUMS.VENDOR_DATA],
-      hasOnboarded: resp[CONFIG_ENUMS.HAS_ONBOARDED]
+      hasOnboarded: resp[CONFIG_ENUMS.HAS_ONBOARDED],
     };
   };
 
+  const getWebRequestedPermissions = async (): Promise<any> => {
+    const resp = (await browserStorageService.getValue(
+      CONFIG_ENUMS.WEB_APP_PERMISSION
+    )) as any;
+    return resp ?? {};
+  };
+
+  const setWebRequestedPermission = async (
+    permissionKey: string,
+    value: any
+  ): Promise<void> => {
+    const resp = await getWebRequestedPermissions();
+    if (resp[permissionKey] && value === "delete") {
+      delete resp[permissionKey];
+    } else {
+      resp[permissionKey] = value;
+    }
+    await browserStorageService.setValue(CONFIG_ENUMS.WEB_APP_PERMISSION, resp);
+  };
+
   return {
     setUrl,
     removeUrl,
@@ -91,7 +116,9 @@ const Config = () => {
     getAgentUrl,
     setAgentUrl,
     setHasOnboarded,
-    getAgentAndVendorInfo
+    getAgentAndVendorInfo,
+    setWebRequestedPermission,
+    getWebRequestedPermissions,
   };
 };