yral-dapp / hot-or-not-auth

Other
1 stars 0 forks source link

Add login page #9

Closed rosarp-gobazzinga closed 9 months ago

rosarp-gobazzinga commented 10 months ago
  1. Check if static html is sufficient
  2. If not, then add Leptos for interactivity
  3. Add login page with 2 providers (google, internetidentity)
rosarp-gobazzinga commented 10 months ago

Change user_identity to some signature with expiration. Remove from json payload, put in http cookie. Page redirect:

To Check:

rosarp-gobazzinga commented 10 months ago

identification need to be constant, as it is key in KV store. So adding expiration & pubkey etc and hashing it wont be helpful. As hash/signature will keep on changing if expiration changes.

Possible solution: HS256(Base64(pubkey)) , encrypt with (server side) users private key and send across. Which can then be used as key in KV store. store directly.