search

fission-codes / auth-lobby

The authentication service that Fission services run.
https://auth.fission.codes
GNU Affero General Public License v3.0
12 stars 1 forks source link

Legacy UCANs with invalid signatures #55

Closed icidasset closed 3 years ago

icidasset commented 3 years ago

We should write some code that detects these on start. If the user is working with an invalid, legacy, UCAN, show a message, explaining the situation.

People can recover from this issue by re-linking from their original device (the browser/device they made the account with, the one without a stored ucan). You can get this ucan by doing await localforage.getItem("ucan") in the console. Or, make a new account.

icidasset commented 3 years ago

Added a simple alert message with an explanation and invalid UCAN detection. Ideally no one should see this, except some older accounts from 6 months ago, who didn't re-link their linked devices. On staging.