...
After several discussions with the team, it was decided that the extra steps for the user to transferFrom may not be worth the security benefits of using approve. We will go with the direct mint.
Prototype Testing
Prototype was tested:
Called wraptokens with Eth address
Used https://oneclickdapp.com/matrix-second allowance to confirm available wfio (Oracle account currently holds the minted wfio)
Used transferFrom to transfer tokens to ETH address.
Added wfio token contract to Metamask and the correct amount of wfio appeared.
Todo
Only initial validation was done on wraptokens.
Need to update oracle to use _mint (to user address).
...