Welcome to wwWallet Frontend repository! This application is a user-friendly web wallet that empowers users to manage their digital credentials effortlessly. With a seamless interface and powerful features, users can view their credentials, obtain new ones from issuers, present credentials to verifiers, and access their presentation history.
- ✨ Features
- 🔍 Prerequisites
- 📦 Installation
- 🚀 Usage
- 🔐 PRF Compatibility
- 🔥 Firebase
- 🎨 Tailwind CSS
- 💡 Contributing
Our Web Wallet provides a range of features tailored to enhance the credential management experience:
-
Credential Display: Users can easily view their stored digital credentials in a structured manner, making it simple to keep track of their qualifications.
-
Issuer Interaction: Seamless integration with issuers allows users to request and receive new digital credentials directly within the wallet.
-
Verifier Presentation: Users can present their credentials to verifiers using the wallet, providing a secure and efficient method of showcasing their qualifications.
-
Presentation History: The wallet maintains a history of credential presentations, allowing users to review and track when and where they've shared their credentials.
- Node.js
- npm/yarn
-
Clone the repository:
-
Option 1: Using HTTPS
git clone https://github.com/your-username/wallet-frontend.git
-
Option 2: Using SSH
git clone git@github.com:your-username/wallet-frontend.git
-
Navigate to the project folder:
cd wallet-frontend
-
Configure Environment Variables: The project uses environment variables to manage different configurations. A
.env
file is used to keep all these variables. There is a.env.template
file in the repository. Copy it and rename it to.env
.cp .env.template .env
Now, open the .env file and fill in the variables according to your own configuration. Below is an explanation for each variable:
- HOST: The IP address where your app will be running (default is '0.0.0.0').
- PORT: The port on which your app will run (default is 3000).
- REACT_APP_WS_URL: The URL of the websocket service.
- REACT_APP_WALLET_BACKEND_URL: The URL of your backend service.
- REACT_APP_LOGIN_WITH_PASSWORD: A Boolean value which show/hide the classic login/signup.
- REACT_APP_FIREBASE_ENABLED: Enable of disable Firebase (
true
orfalse
) for push notifications. If left empty, it will be handled asfalse
. - REACT_APP_FIREBASE_VAPIDKEY: Your Vapid key (public key for cloud messaging firebase) for push notifications.
- REACT_APP_FIREBASE_API_KEY: Your API key for Firebase.
- REACT_APP_FIREBASE_AUTH_DOMAIN: Your Firebase authentication domain.
- REACT_APP_FIREBASE_PROJECT_ID: Your Firebase project ID.
- REACT_APP_FIREBASE_STORAGE_BUCKET: Your Firebase storage bucket.
- REACT_APP_FIREBASE_MESSAGING_SENDER_ID: Your Firebase Messaging Sender ID.
- REACT_APP_FIREBASE_APP_ID: Your Firebase App ID.
- REACT_APP_FIREBASE_MEASUREMENT_ID: Your Firebase Measurement ID.
- REACT_APP_DISPLAY_CONSOLE: Handle console logs (
true
orfalse
). If left empty, it will be handled astrue
. - REACT_APP_INACTIVE_LOGOUT_SECONDS: Session will time out after approximately this time in seconds since the last user activity (default is 15 minutes).
- REACT_APP_WEBAUTHN_RPID: WebAuthn relying party ID (when running locally, set to
localhost
). This must match theconfig.webauthn.rp.id
setting inwallet-backend-server
. - REACT_APP_OPENID4VP_SAN_DNS_CHECK: Verify at the OID4VP incoming authorization request that the SAN contained in the certificate is the same with the response_uri
- REACT_APP_OPENID4VCI_REDIRECT_URI: Redirect uri after authentication and token request at the authorization server in OID4VCI flow.
-
Install dependencies:
yarn install
-
Start the development server:
yarn start
Once the development server is running, you can access the app by visiting http://localhost:3000 in your web browser. The app provides various pages and components that you can interact with. Explore the features and enjoy using the Wallet Frontend!
The wwWallet Frontend is designed to be compatible with the PRF extension to WebAuthn, ensuring a streamlined and secure registration and authentication process. Below, we present specific compatibility scenarios based on the operating system, emphasizing both WebAuthn and PRF extension compatibility.
The PRF (Pseudo Random Function) extension in WebAuthn enables the evaluation of a hash message authentication code stored on the security key during the retrieval of a credential. This mechanism is crucial for generating secret keys vital for encrypting user data. While WebAuthn supports various authentication methods, the focus of this table is the compatibility with the PRF extension.
[1] Note on Android with FIDO Security Keys over USB: It's essential to have Google Play Services (GPS) version 24.08.12 or later.
*Notes:
- In this table, we use the term "FIDO Security Key" to refer to compatible security keys. It's important to understand that any security key should work with the hmac-secret extension, provided it supports this feature. For a detailed list of security key models that support hmac-secret, you can refer to the FIDO MDS Explorer, where hmac-secret support is listed under metadataStatement > authenticatorGetInfo > extensions.*
- The PRF extension is supported in Mozilla Firefox on iOS only in internal cases because Firefox generally uses the Gecko engine, but on iOS, it is required for all browsers to run on WebKit.
- iOS supports PRF extension starting with the iOS 18 release.
The wwWallet is committed to delivering a secure and adaptable authentication experience with an emphasis on PRF extension compatibility.
This application uses Firebase for authentication and messaging features. To integrate Firebase into your project, follow these steps:
-
Firebase Configuration (
src/firebase.js
):The
firebase.js
file in thesrc
directory and provide your Firebase configuration details. This file initializes the Firebase app and sets up the messaging service. -
Firebase Messaging Service Worker (
public/firebase-messaging-sw.js
):This service worker is responsible for handling background messages and notification clicks. When a background message is received, it triggers a notification, and when the user clicks on a notification, it can perform custom actions.
This project utilizes Tailwind CSS, a utility-first CSS framework that enables rapid development of custom user interfaces with minimal effort. Tailwind CSS offers a collection of utility classes that make styling components and layouts a breeze, eliminating the need for writing extensive custom CSS.
To apply styles using Tailwind CSS, you can directly add utility classes to your HTML or JSX components. For example, to apply padding, margin, text color, and more:
<div class="p-4 m-2 text-blue-500">Styled with Tailwind CSS</div>
Tailwind CSS provides an extensive set of default styles, but you can also customize them to match your project's design. The tailwind.config.js file in the project's root directory allows you to customize colors, fonts, spacing, breakpoints, and more.
Explore the Tailwind CSS documentation to learn about all the utility classes, configuration options, and techniques for building beautiful UIs efficiently.
We welcome contributions from the community to help improve the wwWallet Frontend repository. If you'd like to contribute, follow these steps:
-
Create a New Branch: Create a new branch for your feature or bug fix
git checkout -b my-feature
Replace my-feature with a descriptive name.
-
Make Changes: Make the necessary changes in your code editor.
-
Commit Changes: Commit your changes with a descriptive commit message:
git commit -m "Add new feature"
-
Push Changes: Push your changes to your new branrch:
git push --set-upstream origin my-feature
-
Create a Pull Request: Open a pull request on the original repository. Provide a detailed description of your changes and their purpose.
-
Review and Merge: Your pull request will be reviewed by the maintainers. Make any requested changes and address feedback. Once approved, your changes will be merged into master branch of the project.