fairDataSociety / fairdrive-theapp

The main app to browse Fairdrive.
GNU General Public License v3.0
21 stars 7 forks source link

Consider storing logged in status after page refresh #501

Open IgorShadurin opened 1 year ago

IgorShadurin commented 1 year ago

Fairdrive's current behavior resets the logged in status whenever a user updates the page. It would be beneficial to reconsider this and possibly introduce a feature to retain the logged in status for a certain period. Here are a few things to determine:

This improvement could significantly enhance the user experience while utilizing the app.

@tomicvladan @tfius

tomicvladan commented 1 year ago

I don't think we can achieve this without sacrificing security. In order to keep user logged in after a page refresh/opening new page/ restarting browser etc., password must be stored somewhere locally. But it can't be encrypted, because there is no way to decrypt it. So if there were be any vulnerabilities in the app, then it would be possible to steal the password.

tamas6 commented 12 months ago

related: #491