search

Orthocorp / orthoverse-avatars

0 stars 0 forks source link

Authentication #11

Closed kf106 closed 1 year ago

kf106 commented 1 year ago

Redwood ethereum authentication is no good (feel free to try it if you don't believe me).

We do need authentication, and connectkit's wallet connect button doesn't do that - it just shares an address string and provides the ability to make transaction requests to the wallet (and we don't need the latter, unless at some point we decided to "sell" accessories - something that personally I'd rather avoid).

So what I think would be wonderful is if we could Redwood's default authentication backend, remove the username/password stuff, and extend the connectkit button so it presents the user with a challenge to sign. That then gives you the backend session cookie that allows you to write to the database.

We've already got challenge/response signing code that works in orthoverse-prismarine

That's the high level overview. There are of course lots of specifics to subsequently go into.

kf106 commented 1 year ago

Done using a mix of ethereum-auth and a tutorial article.