Remove corda webserver from corda project

Description

The Corda webserver is deprecated and has security issues:

  • It is insecure, and was flagged as such during the GDS security review

  • It was only written as a proof-of-concept

  • It does not use the RPC interface to interact with the node

To address this:

  • It should be removed from the main Corda project

  • Any references to it in the main Corda project should be expunged

    • This includes removing reference to it from demobench and from the gradle plugins

  • Any sample apps using it should be updated

    • We need to make sure we don’t break any apps that use it their deployNodes gradle task, or perhaps we just log a warning it doesn’t do anything

Status

Assignee

Tudor Malene

Reporter

James Brown

Feature Team

Kernel Group

Story Points

5

Fix versions

Ported to...

None

Priority

High

Sprint

None
Configure