Overview
Flutter as the Frontend platform chosen by the team after learning both pros and cons.
Moving forward we want to consolidate with other teams like Security, GTM, SRE, Fraud/Risk
Flutter Tools or Libraries
Within Flutter itself, it has additional features which to be considered. We want to raise this to the team so the team can align and decide what’s best for us.
To be considered | Proposal Usage | Team Decision |
|---|---|---|
Flutter version | Latest | |
Null Safety | Enabled | |
Local Storage | | |
State Management | | |
Event Bus / Pub sub | Cubit within Bloc https://pub.dev/packages/flutter_bloc | |
Biometric + IDM* Security (What will our IDM be?) | https://pub.dev/packages/local_auth + Custom implementation | Forgerock SDK POC first, will need to create Flutter wrapper and homemade plugin for this. Forgerock Saas or on-prem. Andre Laksmana (Unlicensed) will get the security implementation detail in Jago
|
Dependency injector | | |
Push Notification | https://firebase.flutter.dev/docs/messaging/overview/ | Ably is chosen |
Crash Reporting | firebase https://firebase.flutter.dev/docs/crashlytics/overview or | firebase https://firebase.flutter.dev/docs/crashlytics/overview |
Analytics* GTM+Data+Fraud (What do we want to use for analytics platform?) | https://firebase.google.com/docs/analytics | Ion Mudreac need feedback from Analytics/Data team. |
Mobile Monitoring* SRE+Data (How do we monitor Production?) | https://firebase.google.com/docs/analytics or | team prefers https://firebase.google.com/docs/analytics Next step is to design analytics events within SaFi app Widgets so that it automatically include the events reporting to the analytics wrappers. And we can also have the choice to disable the event reporting, but by default is reported. |
Feature Flag | https://firebase.google.com/docs/remote-config | |
Language References | Need discussion, static versus dynamic | |
Asset Management | GCS Bucket combined with MS and Hive Localstorage |
|
VKYC |
| |
Liveness | ||
Mobile App Security | vkey onespan https://everspin.global/en/index.html | Ion Mudreac we need to discuss this one |
SAST | Sonarqube |
|
Direct call to IDM should be wrapped instead. Shall we use GraphQL? Proper versioning of API is important.