circles-myxogastria icon indicating copy to clipboard operation
circles-myxogastria copied to clipboard

Implementing a Log-out function

Open triaslucia opened this issue 3 years ago • 1 comments

In the current state user cannot log out from their accounts. They can just close the tab. We offer the process of log-in into the circle's account but we still have no log-out function. This creates a very confusing scenario as the process flow of Account-log is incomplete. Plus it creates a security leak, as I can close the tab, but until I don't restart my computer and erase cookies, I can re-open the wallet by only typing the URL.

We should implement a Log-out function I want users to be able to click on a button and log out from their garden account. I want this log-out not to be reversible (e.g. going backwards on the browser's history) unless people log-in to the account.

Describe alternatives you've considered 1_We should implement a Log-out button. 2_ We should think of an Alert msg , if a person is thinking of login-out while a process is still running. 3_We should think if we want people to be able to stop processes by logging out or if we want the process to be always finalized before, the Log-out will sort effect.

Design Material coming soon...

triaslucia avatar Jun 25 '21 10:06 triaslucia

The only thing which keeps the user "logged in" is the private key. If we would remove it (aka, being logged out) the person would need to enter it again to come back (in form of a seed phrase).

Still, something similar to a "log out" would be possible if we encrypt the key in the browser. So you can only "log in" again by entering the password to decrypt it. I initially thought the key would always need to be decrypted as soon as you come back to the page, but we could also make this a manual option you do when "logging out".

Related PR #124 and issue https://github.com/CirclesUBI/circles-myxogastria/issues/80

adzialocha avatar Jun 29 '21 09:06 adzialocha