Remove corda webserver from corda project

Description

The Corda webserver is deprecated and has security issues:

  • It is insecure, and was flagged as such during the GDS security review

  • It was only written as a proof-of-concept

  • It does not use the RPC interface to interact with the node

To address this:

  • It should be removed from the main Corda project

  • Any references to it in the main Corda project should be expunged

    • This includes removing reference to it from demobench and from the gradle plugins

  • Any sample apps using it should be updated

    • We need to make sure we don’t break any apps that use it their deployNodes gradle task, or perhaps we just log a warning it doesn’t do anything

Assignee

Tudor Malene

Reporter

James Brown

Epic Link

None

Priority

High

Engineering Teams

Kernel

Fix versions

Affects versions

None

Ported to...

None

Sprint

None

Story Points / Dev Days

5
Configure