StellarGuard

StellarGuard - Add enhanced security to any Stellar account

mikeyrf

StellarGuard On feature 2: it’s probably better to do the 24 word phrase considering most people with hardware wallets have gotten used to that

MisterTicot

That would be awesome to have a two-factor authentication similar to what we have on exchanges (code-only). Maybe you could serve some kind of HTML form that we would embed into a secure iframe? It would have to check that the iframe is indeed sandboxed, and would have to display let's say an user choosen quote or sentence to prove it's from you. Not sure if it's actually possible. I think it would make the user experience awesome!

Anyway keep up the good work, StellarGuard is great ?

MisterTicot Would you mind clarifying what you mean by that? Do you mean the option of having StellarGuard integration/approval embedded directly into the wallet/tool you're using instead of having to go to the StellarGuard website?

MisterTicot

StellarGuard Yes exactly, and having the option to use only the Google authenticator on top of that. (No mail)

StellarGuard

I am going to be focusing heavily on 3rd party integration in the coming months, and something like this is on the top of the list. I want to explore whitelabel solutions around the same time.

However, I want to take the time to do it right (developer API keys, oauth, etc...), so probably won't have something ready in the near future. But it's coming soonish (TM).

elucidsoft

We would like to build in Native support into our wallet and the dotnet sdk for StellarGuard.

StellarGuard

elucidsoft Great! Let me know how I can help. I've done C# in a previous life so I could probably help with the implementation as well.

Send an email to developers@stellarguard.me if you want to get in touch outside of here.

StellarGuard

I've added rudimentary transaction callback support today -- where when submitting a transaction you can specify an optional callback url that is POST'd to on successful transaction authorization and submission.

POST /api/transactions
{
  xdr: "<transaction-xdr>"
  callback: "https://webhook.site/7753d513-fc9b-488e-b762-c4596b79a3e7'
}

And also published version 1.4.1 of the StellarGuard JS SDK with support for it.

const callback = 'https://webhook.site/7753d513-fc9b-488e-b762-c4596b79a3e7';
StellarGuardSdk.submitTransaction(transaction, callback);

You can see the data that gets sent to the callback here: https://webhook.site/#/cc677ade-969d-411e-9b9c-93745f69d37b/407fad2d-a4b3-44e3-a235-d9a32f20c783/0

StellarGuard

I've completed and pushed all 3 of the mentioned features (Onboarding, Transaction Security Level, Recovery Phrase) to https://test.stellarguard.me and will push it to production after a bit more testing. Feel free to get a preview if you have a test account (or sign up for one to try it) and if you do, please let me know what you think.

I'm also very happy to announce that StellarGuard has 3 more fully supported wallets/tools!

Stellar Authenticator
MyStellar.Tools
Nucleo.fi

I'll be adding them to the supported wallets page shortly as well as writing up tutorials for each one. Thank you so much for supporting StellarGuard.

Screenshots of the onboarding flow:

Email Verification
Add Authenticator
Transaction Security Level
Recovery Phrase Warning

MisterTicot

StellarGuard

Just to complete your message StellarGuard is also supported by cosmic-lib, so when cosmicLink.send() and 2FA is enabled the transaction is automatically send to Stellar Guard.

mikeyrf

StellarGuard Let me know if you need help with the tutorial!

StellarGuard

MisterTicot Awesome, I will add that in my description/writeup when I publish a how-to page for it.

StellarGuard

@mikeyrf
@MisterTicot

I've added you to https://stellarguard.me/supported-wallets, let me know if you want any change in the description -- @MisterTicot I didn't know how to word the cosmic.link integration in the description -- any ideas?

@mikeyrf if you have a logo that looks good in a square I can add it next to the name. I took some screenshots when I was testing it out that I can use in my tutorial. But if you have anything in particular you want me to call out in it, let me know.

Will work on all 3 tutorials next.

mikeyrf

StellarGuard Nice! Nothing in particular to call out about the integration.

For the logo, use my profile icon on galactic talk (or pull the profile icon from the square image here: https://nucleo.fi/profile/nucleo/).

Also small typo on the link you provided, it’s Nucleo.fi (not Nucelo.fi)

MisterTicot

StellarGuard

Well, obviously it doesn't feet into support wallets. There's a little sentence at the end about integrating StellarGuard into wallets, so maybe the mention that cosmic-lib comes with transparent StellarGuard support could go there.

I think that ideally you could have a page dedicated to StellarGuard integration with some precise instruction and relevant links that is listed in the footer, on which you could dedicate a few sentences to cosmic-lib. As a developer I would expect to find that kind of information easily, without having to mail the author.

(Edit: by the way thank you for adding Stellar Authenticator)

StellarGuard

All features have now been pushed to production at https://stellarguard.me.

tim

Hi,
I just went through your reg process + stellarport and tried it out. Works like a charm :-). Nice valuable addon to have.

StellarGuard

mikeyrf Apologies on the typo! I’ll fix that and add the icon tonight.

tim

Hi,

I really like your approach and it would improve the security of my service. So I'm thinking to integrate StellarGuard into my "Timed Payment" Service (https://smartstellar.org).

I read your FAQ. I understand I have to check if there is a signer with GCVHEK... and then send the XDR via post.
Can just integrate it or do I need to know anything more?

Regarding the logo, any requirements here? Can I use your logo to signal this account is proteced by your service? Let me know if you would like to look at the solution before I publish anything.

StellarGuard

tim That’s all there is to it! There is also a JS SDK I have published if you happen to be doing it client-side or via NodeJS (https://github.com/stellarguard/stellarguard-js-sdk).

You are free to use any StellarGuard logos, marks, code, or whatever you would like.

Let me know if you have any more questions or need help integrating.

tim

StellarGuard I made a testrun and it works as described. As I have timed transactions I have the additional requirement that the transaction can't be submited right away. Could we have a chat about that? My contact is contact(at)smartstellarDOTorg.