ATLBitLab / twelvecash

API for creating BIP-353 usernames
https://twelve.cash
MIT License
22 stars 5 forks source link

Add ability to update offer #7

Open sbddesign opened 4 months ago

sbddesign commented 4 months ago

Ability to update the offer, which requires a way to authenticate the user. Probably rely on a signed message from the lightning node/wallet. A message is signed when username is created, then we expect a valid signature from the same pubkey in order to update the offer?

Another tricky thing is that if the lightning node/wallet changes, then you might want to change the offer still without having access to the original key. If I lose access to a lightning wallet (I hope not), I still want to own stephen and sbddesign.

paulosacramento commented 1 month ago

I have been thinking a lot about this. VPN services that do not require user credentials for registration may be the best example of how to deal with this problem. All the other alternatives (email, lightning wallet, nostr, etc) seem not be suitable.

Mullvad's example can be followed here: during the registration process on Twelve Cash, an Secret Account Number could be generated. This Secret Account Number would act both as an identifier in the context of the Twelve Cash system and as a password for logging in and making changes.

As we can see in the screenshot below, it would also be very important to clearly communicate that this information should be kept private. Screenshot 2024-08-31 at 16 54 31