I'm not sure what exactly this thread is about (and don't know what "my original post above and Juhan's specific thinking" refers to, link?), but while glancing over this was just wondering if by "proxy" you perhaps would be interested in one of the "API management" solutions out there?
Stuff like https://cloud.google.com/endpoints/, formerly known as Apigee, as an example on the paid for hosted as a service end of the spectrum, or https://www.3scale.net on the open source, optionally with professional support subscription, side. On Tue, 21 May 2019, 22:19 VIctor Romero, <[email protected]> wrote: > Hi, > > We have been working in a proxy using node.js and has been deployed to > firebase, but any capable node.js server could be used. > > Mobile wallet <-> proxy <-> Mifo's/Fineract APIs > > We have used the proxy to accomplish the goals to be aligned to BIAN 4.0 > and OpenBanking Mexico usability guidelines. > > We already have donated the code to Mifos and we are removing the legacy > code. And the proxy code can be also donated. > > Regards > > Victor > > > > Obtener BlueMail para Android <http://www.bluemail.me/r?b=14874> > En 21 may 2019, en 2:54 p. m., James Dailey <[email protected]> > escribió: >> >> Devs - I would like to resurface this discussion. Please see my original >> post above and Juhan's specific thinking. >> >> (direct) Channel access without a middle-layer or proxy of some kind is >> not recommended in production. >> >> By implication, anyone building a front end app that is aimed at end >> users and all of those already built, should be labeled on our sites as >> "for demo purposes only". >> From what we know all of the (larger) companies out there that are using >> a customer facing front end, they are securing it beyond what is provided >> by default on our community built apps. >> >> And, we should have a group working on the design of that proxy/middle >> layer for both Fineract1.x and FineractCN. >> >> @ShivanshTiwari please note for Mifos Mobile Wallet project. If there >> is a way to include a proxy service that speaks to your app and then to the >> backend APIs that would be a good idea I think. >> >> - James >> @jdailey67 >> >>
