Introducing nsec.app and nostr-login!
I've shown the prototype of https://nsec.app in December, and it's essentially an nsecbunker in your browser. It is non-custodial - your keys are stored locally in the browser, and apps can get access to your keys using NIP46. We've now turned that prototype into a real thing, and I invite you to try it. Shoutout to nielliesmons (npub149p…722q) for the designs!
Now how do we help Nostr apps adopt NIP46 for remote key access?
That's where nostr-login library comes in. If your app uses NIP07 to talk to a browser extension, then with just two lines of code you can make it talk over NIP46.
Both of these tools support the new OAuth-like flow proposed by Pablo. Below you can watch a demo of how nostr-login (added to my fork of Snort) works with Nsec.app (or would work with any other nsecbunker).
What this all means is that people could join Nostr on the web, without installing extensions or mobile apps, with their keys stored non-custodially in the Nsec.app, and then could log in to other Nostr apps without copying their private keys.
Demo:
Links:
Snort+nostr-login: https://snort.nostrapps.org
nsec app: https://github.com/nostrband/noauth
nsec app server: https://github.com/nostrband/noauthd
nostr-login: https://github.com/nostrband/nostr-login
brugeman
npub1xd…mntxy
2024-02-12 12:48:52
Author Public Key
npub1xdtducdnjerex88gkg2qk2atsdlqsyxqaag4h05jmcpyspqt30wscmntxyPublished at
2024-02-12 12:48:52Event JSON
{
"id": "44ec8fb8022422fb51135601c814b5fe1c36dd45cb2830b812d50d1eb915e121",
"pubkey": "3356de61b39647931ce8b2140b2bab837e0810c0ef515bbe92de0248040b8bdd",
"created_at": 1707742132,
"kind": 1,
"tags": [
[
"imeta",
"url https://void.cat/d/JSWwYMTtbWxTDTLpe132Kr.mp4",
"dim 590x1280",
"x 72d87bcf5085e1a38220d21fc6d926f5682f7cb1554248f772cf9ef94c58d733"
],
[
"p",
"a9434ee165ed01b286becfc2771ef1705d3537d051b387288898cc00d5c885be"
]
],
"content": "Introducing nsec.app and nostr-login!\n\nI've shown the prototype of https://nsec.app in December, and it's essentially an nsecbunker in your browser. It is non-custodial - your keys are stored locally in the browser, and apps can get access to your keys using NIP46. We've now turned that prototype into a real thing, and I invite you to try it. Shoutout to nostr:npub149p5act9a5qm9p47elp8w8h3wpwn2d7s2xecw2ygnrxqp4wgsklq9g722q for the designs!\n\nNow how do we help Nostr apps adopt NIP46 for remote key access? \n\nThat's where nostr-login library comes in. If your app uses NIP07 to talk to a browser extension, then with just two lines of code you can make it talk over NIP46. \n\nBoth of these tools support the new OAuth-like flow proposed by Pablo. Below you can watch a demo of how nostr-login (added to my fork of Snort) works with Nsec.app (or would work with any other nsecbunker).\n\nWhat this all means is that people could join Nostr on the web, without installing extensions or mobile apps, with their keys stored non-custodially in the Nsec.app, and then could log in to other Nostr apps without copying their private keys. \n\nDemo: https://void.cat/d/JSWwYMTtbWxTDTLpe132Kr.mp4\n\nLinks:\nSnort+nostr-login: https://snort.nostrapps.org\nnsec app: https://github.com/nostrband/noauth\nnsec app server: https://github.com/nostrband/noauthd\nnostr-login: https://github.com/nostrband/nostr-login\n",
"sig": "2391ab041fed491294f4d8e3d27909f2e046272a78e48b166082ac7ec206790bee8eda301df17408e751f0ab96af8e9f9c4944bdfc3422cede6dad2ec3a37b7b"
}