Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Rework Dapp Connection Screen #3340

Open
smaroudasunicorn opened this issue Oct 21, 2024 · 4 comments
Open

Rework Dapp Connection Screen #3340

smaroudasunicorn opened this issue Oct 21, 2024 · 4 comments
Assignees

Comments

@smaroudasunicorn
Copy link
Collaborator

smaroudasunicorn commented Oct 21, 2024

Below an image is presented about dapp connection

We need to rework dapp connection screen. This screen is about dapp requesting from the wallet to provide address of active account. Should not seem like a transaction.

  • Identicon should not be created for the URL
  • Allow Access is misleading, since we do not providing access to the wallet here.
  • Concrete explanation shall be displayed, we are not connecting to the account, we are getting the address of current account.
  • Site URL should not be displayed 2 times

Image

@smaroudasunicorn smaroudasunicorn changed the title Rework Sign Message Screen Rework Dapp Connection Screen Oct 21, 2024
@onvisions
Copy link
Collaborator

onvisions commented Oct 23, 2024

Dapp Connection Screen

CASE 1. The dApp name can be fetched, the URL can be fetched, dApp favicon/logo can be fetched and displayed.

MVP Dapp Connection Template - Default

CASE 2. The dApp name can not be fetched, dApp favicon/logo can not be fetched and displayed so we are replacing it with the generic label "DAPP" and generic icon.

MVP Dapp Connection Template -Generic Dapp

CASE 3. Unknown URL! Rare case that can still occur. URL cannot be fetched by Superhero Wallet. In this case neither the favicon nor the dApp name will be available. Most probably it's a risky app with basically "unknown source". User should be warned about potential risks.

Tx Access, Sign, Raw tx (2)

Figma reference: https://www.figma.com/design/3oGLWzSH0oJljo4RETZtur/Superhero-Wallet-UI-(%E2%9C%94%EF%B8%8FUpdated)?node-id=37239-260033&node-type=frame&t=xkVASfrr0tXWPBQs-0

@onvisions
Copy link
Collaborator

onvisions commented Oct 23, 2024

@sotiris @CedrikNikita IMO there's an issue with the way we grant permission to third party dApp to view not only the current account but also all "current active accounts" in the future. In other words the dApp asks only once for permission to view current address but it will be able to view all "currently active addresses" until Superhero Wallet is connected. @CedrikNikita correct me if I'm wrong here.

I am concerned that the user is not aware what's happening. As a user I'd expect to give permission affecting only my current account address when connecting, logging in, providing permission to a dApp or platform.

I might want to use different accounts for different platforms and purposes. I would not expect to grant access to the dApp to view all my wallet account addresses and that's what we are currently doing. I think we should reconsider this behavior and ask for permission each time the currently active account is changed.

@smaroudasunicorn
Copy link
Collaborator Author

@onvisions dapp requests access to one address is not this the case?

@onvisions
Copy link
Collaborator

onvisions commented Oct 24, 2024

@onvisions dapp requests access to one address is not this the case?

As far as I understood this is not the case and that's why I raised my concerns from user perspective. Let's sync with @CedrikNikita to be on the same page if it's needed.

As far as the current task is concerned I have created the design according to request:
the dApp is asking for permission to view user's currently active account address (the address that is active at the moment of granting the permission).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants