Replying to Avatar Blake

Cool. I have a (poor man’s) “Login with Nostr” prototype for Ruby using cookies for sessions.

Why does this matter? You can log into websites without sharing your private key, while still proving you have access to it. Impersonation is not possible.

Most Nostr sites today just load your pubkey and then ask to sign posts as you publish them - that’s fine too. The goal here is to only show content for that pubkey - so proof you hold the private keys are required sooner (basically just a normal login).
Avatar
Blake 2y ago

CC #[1]

Source code here.

https://gist.github.com/blakejakopovic/b0065b9327c48c148bfe989c08137ba1

For clarity, this doesn’t do full event auth validation, as I may not use Ruby - no reason it can’t be added where I’ve commented.

This is the simplest code to get this working, so not prod ready, but decent example code.

Reply to this note

Please Login to reply.

Discussion

Avatar
Blake 2y ago

And we may need a new NIP for this as we don’t need parts of 42 that are relay specific.

Avatar
Blake 2y ago

Where I think this could be fun and useful is being able to log into a relay via a web porta and set personal preferences like “friends of friends only mode”, or “explicit content filter”, or whatever. Maybe even see stats for your pubkey or devices recently active.