Skip to content

NIP-07: Lack of permissionless check whether currently active user has authorized methods #1421

@alopatindev

Description

@alopatindev

I found that current ways web apps handle persistent sessions are too limited or broken:

  • some web apps don't remember user account at all and require pressing Login button on every page refresh
  • some remember the account but don't react on the fact that the user actually switched it in their browser extension
  • some apps ask for permissions out of the blue, probably to make sure that it's the same user that was logged in before.

Could we have some permissionless API to check whether currently active user has already authorized certain methods for the given website? Something like

async getAuthorizedMethods(): { getPublicKey: boolean, getRelays: boolean, ... }

I believe that could be one of the things that simplifies session management in web apps and possibly makes web apps more complete and predictable for end-users.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions