JoinSEEDS / seeds-smart-contracts

Smart contracts for SEEDS - A Regenerative Civilization Building Game.
https://docs.google.com/document/d/1C4w9Ol8VGabCIcQDVPDrwcTRoJXBqhrb7VjslwQbUGU/edit#heading=h.6f4sxygso816
MIT License
20 stars 6 forks source link

Login with Seeds OAuth implementation #391

Open n13 opened 3 years ago

n13 commented 3 years ago

@sebastianmontero @7flash @juliolrmonteiro

What

Websites can identify a Seeds user with OAuth 2 or an OAuth compatible API

The seeds Light wallet (or any other wallet that can process ESR links) is used to sign in

Goal

The goal is to initially be able to log into the DHO with "Sign in with Seeds".

The button leads to a website that requires the user to scan a QR code and make a transaction -> then redirects back to the original site and logs them in.

The flow is similar to the Google login flow, except instead of providing the Google username and password, the user scans a QR code / signs an ESR request. (ESR= EOSIO Signing Request)

This is good enough to log on to normal websites;

For blockchain based websites, like the DHO, the website will need to show a QR code any time the user needs to sign an on chain request. Much like it does now with the Anchor popup, but it will be an ESR Code.

Tech Specs

Mighty Wizards implemented a version using UAL - repo link TBD