[TASK] RFP For 2FA Service (part of Kitwallet) Endpoint

[trechriron]

Summary

We need a replacement for this specific endpoint currently wrapped up in the Kitwallet endpoint.

Details

Contract Helper contains the following functions;

• Indexer Endpoints (solved)
• Funding TestNet Accounts (solved)
• Signing NEAR Wallet 2FA (multisig) Transactions
  • NEAR Wallet is sunset, so this isn’t used for normal transactions anymore
  • But it still facilitates the deactivation of wallet.near.org 2FA accounts so they can be migrated

Contract helper instances on *.kitwallet.app are hosted on AWS. Older versions run on render.com and do not support 2FA or indexer functionality:

• Helper.mainnet.near.org - used most often likely because it’s the documented URL.

• Helper.nearprotocol.com - primarily used with near.cli-rs

  • https://github.com/near/near-cli-rs/blob/main/src/config.rs#L45
  • https://github.com/search?q=helper.nearprotocol.com&type=code

• Make a decision on the future of 2FA support.

  • api.kitwallet.app can continue to support this as usual until we decide to terminate support. Only mainnet support is required.
  • Once discontinued, we can delete the AWS accounts associated with all kitwallet.app domains.
  • Accounts could still be recovered so long as we retain the DB (to confirm email/phone associated with account ID) and the DETERM_KEY_SEED environment secret (to derive the multisig signing key used by Contract Helper). This would still need to be hosted in some capacity since it requires the user to provide the private key, but it doesn’t need to be a public service (i.e. like the current ZenDesk integration in AWS).

Additional Information

[trechriron]

@frol - has anyone in your orbit started or released anything that can be used as replacements for these services?