Avatar
brugeman 1y ago

New iframe-based signing coming to nsec.app and nostr-login!

Many of you have tried nsec.app and had issues. It might be slow and unreliable, because it involves talking over relays and waking up the signer using web push. iOS users had to keep nsec.app tab open to make it work.

Now check out this demo:

https://v.nostr.build/sajUBBgYejAShlcr.mp4

Basically, client app (or a library like nostr-login) can embed signer (nsec.app) as an invisible iframe and talk to it using browser APIs. Talking to your keys no longer involves relays or web push - it's instantaneous! Works perfectly fine on iOS Safari.

We're releasing the updated nostr-login on https://npub.pro, https://nostr.band and on https://primal.nostrapps.org for you to try it. If all goes well and public scrutiny doesn't kill this, we'll publish the new nostr-login on unpkg and every app using it will get a boost with nsec.app.

The NIP proposal is here: https://github.com/nostr-protocol/nips/pull/1557

I encourage web client devs to check it out, maybe this is how we take safe key access to the next level of usability on the web!

Reply to this note

Please Login to reply.

Discussion

Avatar
Luxas 1y ago

Nice, I was just about to send you a DM that it never imports keys on Brave on ios

Avatar
brugeman 1y ago

Could you please try with https://primal.nostrapps.org? Can you use nsec.app with Brave on iOS there?

Avatar
Luxas 1y ago

It stays stuck when importing key

Avatar
brugeman 1y ago

Oh ok thanks for the report! Will look into it

Avatar
Luxas 1y ago

Heads up... I signed up from desktop... and the login also exhibits the same behavior on mobile (infinite loading on button)

Avatar
Luxas 1y ago

fwiw it must be a webkit issue as I tried other browsers. I'm also using lockdown mode... So let me know if you'd like me to test with it disabled.

Avatar
Luk₿lack 🧡🎩💜⚡ 1y ago

I have been trying on mobile Bromite.. It seems working only wheter I paste nsecbunker link in it.. otherwise it loops infinite loading connection.. maybe it causes this its privacy features.. I'll be testing it on desktop in the noon

Avatar
The Southern Gentleman - 100% Naturally Extracted Tobacco Elixers 1y ago

Hello and thanks for the awesome app.

I was trying to get this going yesterday on ios. I found some instructions at https://nsec.app/ios.html

but I looked hard and couldnt find where these setting were:

Follow these steps:

Go to iOS Settings → Advanced → Experimental.

Enable Push API.

Open use.nsec.app in a browser.

-----------

couldnt find advanced>experimental under main Settings for iOS, or Brave or Safari. I tried both ipad and iphone running iOS 17.

Avatar
brugeman 1y ago

Hi yes you're right, those instructions are outdated. New iOS graduated Push API from experimental and you no longer need that setting. But you still need to add the nsec.app to homescreen, and even then we're seeing issues with reliability. So I would say for now you'll have to just need use.nsec.app tab open while working with connected apps.