2023-02-07 Aries Cloud Agent - Python Users Group Community Meeting

Zoom Link: https://zoom.us/j/99220079317?pwd=OHk0U05ITnBkSmZ0aXlIQzFDYWg3UT09

Call Time: 8:00 Pacific / 17:00 Central Europe

• Full Meeting:  

• Topics:

• @Stephen Curran (BC Gov/Cloud Compass Computing Inc.) <swcurran@cloudcompass.ca>,Announcements

• @Warren Gallagher (AffinitiQuest.io) <warren@affinitiquest.io>

• @Daniel Bluhm (Indicio PBC) <daniel@indicio.tech>

• @Akiff Manji (Petri Dish Development) <amanji@petridish.dev>

• @Jason Leach (Fullboar Creative / Government of BC) <jason.leach@fullboar.ca>

• @Emiliano Suñé (Quartech / Government of BC) <emiliano.sune@quartech.com>

• @Char Howland (Indicio PBC) <char@indicio.tech>

• Update on BC Gov Code With Us – ACA-Py Indy-SDK to Askar conversion script - Indicio

  • Status: Just about wrapped up! Repo transfer requested (should we have Andrew transfer from the original fork?)
    
    

    • Packaging: Container image (published to HL org GHCR), PyPI package

  • Demo by @Char Howland

  • Repo is: https://github.com/Indicio-tech/acapy-wallet-upgrade

  • Current branch: main

  • From @Timo Glastra – AFJ issue: https://github.com/Indicio-tech/acapy-wallet-upgrade/tree/feature/psql-support

• Update on ACA-Py Container Scanning (brought up last meeting)

  • There are scanner options in Hyperledger, but not chosen.

    • Snyk is a possibility, Qualys was also used and both produced the same results.

  • Based on the testing, the base images were updated to bullseye, which contains no current critical vulnerability.

  • Would like to have multi-architecture release.

• Messages getting stuck when a connection is being established.

  • Message sent to the mediator, received, but connection not setup and message getting stuck.

  • Race condition.

  • Workaround in Bifold, but fix should be in the mediators – hence in ACA-Py/AFJ mediators.

  • On making a connection, the mediator routing and the connection are done in parallel, vs. serial.

  • Issues in ACA-Py and AFJ submitted – each need to be investigated.

  • Indicio to do more investigation

• Adding a Documentation site for ACA-Py - as nice as the AFJ one - https://aries.js.org/

  • PR: 2079 – tricky part is the multiple version support.

  • Proposed approach:

    • Use docusaurus

    • Static site generated from new repo – https://github.com/hyperledger/aries-acapy-docs

    • Landing page in new repo, version specific documentation in folders.

    • GHA manually added for each supported ACA-Py release – automate this in future via a PR created with ACA-Py tag released.

      • Fetch tagged branch from ACA-Py into temp folder

      • Generate a root document if not present (used to support tags created in the past) – else, use one in ACA-Py.

      • Generate the required RST documents for the ACA-Py internal documentation currently used by Read The Docs (using Python doc strings).

      • (Re-)Generate static pages for the tag into correct folder in the docs repo.

    • For now, periodically run the GHA for the "main" branch manually – automate this in the future to run either nightly or when an ACA-Py PR is merged.

    • Publish to "acapy.org" domain.

• Next Release?

  • 0.7.6 or 0.8.0 (depending on breaking changes)

  • Not a cherry-picked release – everything in main branch

  • Issues include fixing/adding revocation notification issues

• Issue 2029: Additional security controls for webhooks for multi-tenancy

  • Added as a PR and then closed, to be refactored as a plugin

  • Enables key updates via an admin interface call.

• Open Discussion:

  •  

  • Does anyone use/see a use case for Web Sockets and Return Route beyond ACA-Py as a mobile agent mediator?

• Does anyone use/see a use case for Web Sockets and Return Route beyond ACA-Py as a mobile agent mediator?

• Understanding Presentation Request Revocation Intervals

  • Presentation Slides

  • Issue Created

• Status of vc-authn-oidc repository – v2.0 branch.