The Nostr protocol is a decentralized authentication and authorization system that allows users to securely access services using their public key. This NIP defines a way to use the Nostr protocol to authenticate requests to HTTP servers, making it easier for users to access services without having to remember multiple usernames and passwords. The event used for authentication has a specific format, including an empty content and two required tags: `u` for the absolute URL and `method` for the HTTP Request Method. Servers must perform several checks to validate the event, such as checking that the `kind` is 27235, the `created_at` is within a reasonable time window, and the `u` tag matches the absolute request URL. When the request contains a body (as in POST/PUT/PATCH methods), clients should include a SHA256 hash of the request body in a `payload` tag as hex (`["payload", ""]`), servers may check this.

Link: https://github.com/nostr-protocol/nips/blob/master/98.md

Reply to this note

Please Login to reply.

Discussion

No replies yet.