search

Doichain / dapp

Doichan dApp - a Meteor.js implementation of the "Doichain Atomic Double-Opt-In" Protocol
https://www.doichain.org
MIT License
6 stars 6 forks source link

Receive multipart/form-data POST and trigger DOI-Request in Send-dApp directly #20

Open silkroadnomad opened 6 years ago

silkroadnomad commented 6 years ago

Current Situation: A website user enters its data and email address into a form which is sent to an application server. This application server takes this information and reformats it into an REST-API call to Send-dApp opt-in in order to start the doi request process on doichain.

Enhancement: It would be possible to reduce this workflow one step1 so the Send-dApp directly can receive a multipart-formdata POST from a defined referrer.

Here it is necessary ot combine the RPC-API call with a captcha which was created before it was called.

silkroadnomad commented 6 years ago
  1. How easy is it to fake a referrer? Probably not so easy if we make sure it contains a certain cookie.
  2. Another question would be how to make sure that nobody is abusing the interface? Right now this doesn't seem possible except the form contains some sort of 2-factor code which makes sure the user is real or solved a captcha correctly.