freighter
freighter copied to clipboard
Feature Request: Make getPublicKey() return a Signed Message
What problem does your feature solve?
Improve authentication to a third party (web application, ecc) ensuring that a user owns the corresponding secret key
What would you like to see?
In my opinion could be useful if the getPublicKey() will implements:
Accept:
- an input parameter String (this will be an arbitrary token generated by the requesting application)
Return:
- Public Key (this is already returned)
- Message Signed
- Signature
Almost like albedo (albedo.link) does:
- see at albedo documentation
- and link to see what albedo signs
This feature will permit also to the requesting application (web application, ecc) to check the authentication data
What alternatives are there?
Look like we need function signMessage(msg) and verifyMessage(msg, signature), same as https://github.com/orbitlens/stellar-expert-id do.
In my opinion would be better like albedo (albedo.link): https://albedo.link/playground?section=public_key
The view public key function of Albedo return also the signed message and the signature. In this manner is more simple even for the user because it requires only one UI interaction.
+1 this feature would be useful in my opinion
bumping now
version 5.2.6 adds signBlob
which signs arbitrary data(base64 encoded) & returns signature.
https://github.com/stellar/freighter/releases/tag/5.2.6