Merge pull request #120 from niscy-eudiw/main

Readme update with important things to know

README.md

@@ -9,6 +9,7 @@ the [EUDI Wallet Reference Implementation project description](https://github.co
 
 * [Overview](#overview)
 * [Disclaimer](#disclaimer)
+* [Important things to know](#important-things-to-know)
 * [How to contribute](#how-to-contribute)
 * [Demo videos](#demo-videos)
 * [How to use the application](#how-to-use-the-application)
@@ -71,10 +72,21 @@ The released software is an initial development release version:
 -  The initial development release may contain errors or design flaws and other problems that could cause system or other failures and data loss.
 -  The initial development release has reduced security, privacy, availability, and reliability standards relative to future releases. This could make the software slower, less reliable, or more vulnerable to attacks than mature software.
 -  The initial development release is not yet comprehensively documented. 
--  Users of the software must perform sufficient engineering and additional testing in order to properly evaluate their application and determine whether any of the open-sourced components is suitable for use in that application.
+-  Users of the software must perform sufficient engineering and additional testing to properly evaluate their application and determine whether any of the open-sourced components are suitable for use in that application.
 -  We strongly recommend not putting this version of the software into production use.
 -  Only the latest version of the software will be supported
 
+## Important things to know
+
+The main purpose of the reference implementation is to showcase the ecosystem and act as a technical example of how to integrate and use all of the available components.
+
+If you're planning to use this application in production, we recommend reviewing the following steps:
+- Configure the application properly by following the guide [here](wiki/configuration.md)
+- Ensure the Pin storage configuration matches your security requirements or provide your own by following this guide [Pin Storage Configuration](wiki/configuration.md#pin-storage-configuration)
+- Ensure the application meets the OWASP MASVS industry standard. Please refer to the following links for further information on the controls you must implement to ensure maximum compliance:
+    - [OWASP MASVS](https://mas.owasp.org/MASVS/)
+    - [Play Integrity API](https://developer.android.com/google/play/integrity)
+
 ## How to contribute
 
 We welcome contributions to this project. To ensure that the process is smooth for everyone

assembly-logic/src/main/java/eu/europa/ec/assemblylogic/Application.kt

@@ -17,10 +17,8 @@
 package eu.europa.ec.assemblylogic
 
 import android.app.Application
-import android.os.StrictMode
 import eu.europa.ec.analyticslogic.controller.AnalyticsController
 import eu.europa.ec.assemblylogic.di.setupKoin
-import eu.europa.ec.businesslogic.config.ConfigSecurityLogic
 import eu.europa.ec.businesslogic.controller.log.LogController
 import eu.europa.ec.corelogic.config.WalletCoreConfig
 import eu.europa.ec.eudi.wallet.EudiWallet
@@ -35,7 +33,6 @@ class Application : Application() {
 
     private val logController: LogController by inject()
     private val configWalletCore: WalletCoreConfig by inject()
-    private val configSecurityLogic: ConfigSecurityLogic by inject()
     private val analyticsController: AnalyticsController by inject()
 
     override fun onCreate() {
@@ -45,7 +42,6 @@ class Application : Application() {
         initializeEudiWallet()
         initializeLogging()
         initializeTheme()
-        handleStrictMode()
     }
 
     private fun initializeReporting() {
@@ -76,23 +72,4 @@ class Application : Application() {
             configWalletCore.config
         )
     }
-
-    private fun handleStrictMode() {
-        if (configSecurityLogic.enableStrictMode) {
-            StrictMode.setThreadPolicy(
-                StrictMode.ThreadPolicy.Builder()
-                    .detectDiskReads()
-                    .detectDiskWrites()
-                    .detectNetwork()
-                    .penaltyLog()
-                    .build()
-            )
-            StrictMode.setVmPolicy(
-                StrictMode.VmPolicy.Builder()
-                    .detectAll()
-                    .penaltyLog()
-                    .build()
-            )
-        }
-    }
 }

assembly-logic/src/main/java/eu/europa/ec/assemblylogic/ui/MainActivity.kt

@@ -30,8 +30,6 @@ import eu.europa.ec.uilogic.container.EudiComponentActivity
 class MainActivity : EudiComponentActivity() {
     override fun onCreate(savedInstanceState: Bundle?) {
         super.onCreate(savedInstanceState)
-
-        windowFlags()
         setContent {
             Content(intent) {
                 featureStartupGraph(it)