Why Nostr? What is Njump?
2023-09-15 17:13:41

hodlbod on Nostr: PABLOF7z what is your opinion of using OAuth instead of tokens to integrate with ...

what is your opinion of using OAuth instead of tokens to integrate with nsecbunker? I think this would be a much more familiar flow, and would allow clients to introduce users to the pattern rather them having to discover it themselves. The key store could also double as a nip 05 provider. So:

- The user clicks "sign in with nostr address" and enters an address (or clicks sign up)
- The client redirects using OAuth to the domain name in the nostr address
- The nip05 provider asks the user to sign up/log in, asks the user to approve scopes, etc, and redirects the user to the original app
- If the app needs further permissions they can redirect the user again to the provider so the user doesn't have to be checking the bunker all the time

Author Public Key
npub1jlrs53pkdfjnts29kveljul2sm0actt6n8dxrrzqcersttvcuv3qdjynqn