search

HeyPuter / puter

🌐 The Internet OS! Free, Open-Source, and Self-Hostable.
https://puter.com
GNU Affero General Public License v3.0
26.83k stars 1.84k forks source link

Sign-in through QR code on sign-in page #649

Open kveroneau opened 4 months ago

kveroneau commented 4 months ago

Originally brought up on Discord, the idea is to provide a sign-in system similar to the Discord desktop app, where in the app on the desktop it will display a QR Code, and then on the Discord mobile app, you can open a settings menu to scan the sign-in QR Code to authenticate a new session on the PC. Essentially, when presented with the Puter sign-in page, as an alternative to manually entering in your username and password, you can instead display a QR code on the desktop browser, which can then be scanned by the Puter web app to provide authentication. I do believe modern HTML5 and JavaScript APIs can use the camera on a device, and have the web app process it, in this case, to provide authentication.

Currently Puter can do the reverse of this, where say, you are signed into Puter on a Desktop PC or ChromeBook, and can click an option to display a QR Code in the browser, which when scanned by a smartphone or tablet, will authenticate you. This method does not work really well for desktop PCs, or say public kiosks which may not have a webcam or a QR scanning app.

jelveh commented 4 months ago

Thanks for posting this awesome idea. I'm very interested in implementing this feature. One thing I need to investigate a little more (or beta test) before pulling the trigger is the security aspect of this flow.

KernelDeimos commented 3 weeks ago

I'm adding the mobile-support label to this because I think this sign-in flow is currently less common than the one we support, but it will become more common as we improve mobile support.