Sign in with Zcash
Intermediate - 7 min
TL;DR
- Kɔ mu denam adanse a wobɛkyerɛ sɛ wohwɛ Zcash address bi so, sen sɛ wode password bedi dwuma
- Nsusuwii abien na wɔde redi dwuma: wɔde wɔn nsa bɛhyɛ asɛnnennen ase, anaa de sikatua a wɔabɔ ho ban a wɔde koodu bi wɔ memo no mu bɛmena
- Esiane sɛ address ahorow a wɔabɔ ho ban de kari pɛ ne abakɔsɛm sie nti, sɛ woda no adi sɛ wodi so a, ɛnna wo sikasɛm ho ntama
- Nhwɛso no yɛ ntɛm. Gyinapɛn biara nni hɔ a wɔagye atom de besi nnɛ, na nea wɔde di dwuma no ntumi nyɛ adwuma bom
Who is this for?
- Developers a wɔpɛ sɛ wɔkɔ mu a wonni password a wonnye wɔn ankasa data ano
- Wɔn a wɔde di dwuma a wɔbɛpɛ sɛ wɔmfa email address mma wɛbsaet biara
- Obiara a ɔpɛ sɛ ɔhyɛn mu a ɔmfa ne sikasɛm ho abakɔsɛm nkɔ akontaabu bi ho
The Problem
Login options dodow no ara leak biribi:
- Passwords ne email yɛ account a wɔakyekyere wo identity, na abien no nyinaa kowie breach dumps mu
- Social sign-in kyerɛ identity provider no beae biara a wobɛkɔ ne bere a wobɛkɔ mu
- Wallet sign-in wɔ transparent chains so yɛ bɔne sen sɛnea ɛte. Sika kotoku a wode bɛka abom no betumi de wo sika a aka ne wo nkitahodi ho abakɔsɛm nyinaa ahyɛ wɛbsaet no nsa, daa
Mpɛn pii no, worepaw nea ɛyɛ mmerɛw ne nea wobɛda no adi.
Why Zcash?
Zcash tetew proving control fi sikasɛm a wɔda no adi ho:
- Address a wɔabɔ ho ban ma balances ne transaction history yɛ kokoam, enti sɛ wokyerɛ sɛ wokura bi a, ɛnka hwee mfa nea wokura no ho
- Encrypted memos betumi de bere biako login code akɔ kokoam wɔ asɛm bi mu
- Viewing keys ma kwan ma wɔpaw nea wɔda no adi, enti wobetumi ama app bi akenkan kwan a ɛbɛma watumi akenkan nea ehia pɛpɛɛpɛ na ɛnyɛ nea ɛboro saa
How It Works
Akwan abien na ada adi. Wɔn baanu nyinaa ba awiei a app no kura identifier a ɛyɛ den ma wo na enni password.
Ɔkwan 1: Fa wo nsa hyɛ asɛnnennen bi ase
- App no ma asɛnnennen a ɛba random, a wɔde di dwuma pɛnkoro ba
- Wo sika kotoku no de safe a ɛwɔ w’address akyi no hyɛ saa asɛnnennen no ase
- App no hwɛ sɛ nsaano nkyerɛwee no yɛ nokware na ɛde wo kɔ mu
Wɔmmɔ biribiara ho dawuru, enti wontua hwee na wontwɛn block bi. Nkyerɛkyerɛmu a ɛfa ho ne ZIP 304, Sapling Address Nsaano Nkyerɛwee, a ɛda so ara yɛ draft, enti sika kotoku mmoa a wɔde ma wɔ nkrasɛm a wɔde wɔn nsa hyɛ ase no gu ahorow.
Ɔkwan 2: Fa sika a wɔabɔ ho ban di ho adanse
- App no yɛ bere biako koodu na ɛkyerɛ sikatua ho adesrɛ
- Wode asɛm ketewa bi a wɔabɔ ho ban a saa koodu no wɔ memo no mu mena
- App no hwɛ memo no, ɛne code no hyia, na ɛde wo kɔ mu
Eyi ne sika kotoku a ɛboa memos dedaw nnɛ, a ɛyɛ emu dodow no ara yɛ adwuma. Tradeoff no ne sɛ ɛbɔ network fee na wotwɛn confirmation.
Address no a wɔbɛma ayɛ kokoam
Ɛho nhia sɛ app bi de w’address sie na ama atumi ahu wo. Nnwuma binom hash no bom ne application pɔtee bi bo, enti sait biara hu soronko, stable identifier ma ɔdefo koro no ara. Ɛno mma wɛbsaet ahorow ntumi mfa nsɛm a wɔakyerɛw atoto ho mfa nkɔka wo akontaabu ahorow ho.
Trade-offs
Ɛfata sɛ wunya ntease ansa na wode asi so anaasɛ wode wo ho ato so.
| Wɔde wɔn nsa ahyɛ ase asɛnnennen | Shielded sikatua |
|---|
| Ɛka a wɔbɔ | Free | Network ho ka wɔ login biara ho |
| Ahoɔhare | Ntɛm ara | Twɛn sɛ wobesi so dua |
| Wallet mmoa | Limited, ZIP 304 yɛ nsɛm a wɔakyerɛw | Broad, nea ehia memos nkutoo |
| Gyae nkɔnsɔnkɔnsɔn kyerɛwtohɔ | Dabi | Yiw, asɛm bi wɔ hɔ |
Anohyeto ahorow a wɔkyɛ:
- No account recovery by default. Sɛ wohwere safoa no a, ɛkyerɛ sɛ wobɛhwere akontaabu no, gye sɛ app no hyehyɛ ɔkwan a wobɛfa so asan anya
- Address reuse betumi abɔ wo. Address koro a wode bedi dwuma wɔ site pii so no san yɛ tracking haw no, ɛno nti na app pɔtee identifiers ho hia no
- No ratified standard. Adwuma biara wɔ n'ankasa nhyehyɛe, enti login a wɔasi ama biako no ne foforo nyɛ adwuma
- Ɛnyɛ anonymity on its own. Ɛde wo sikasɛm sie app no, nanso app no da so ara tumi profile nea woyɛ bere a woakɔ mu no
Common Mistakes to Avoid
- Asɛnnennen mmara bi a wɔbɛsan de adi dwuma. Ɛsɛ sɛ wɔde di dwuma pɛnkoro na wɔde di dwuma pɛnkoro na ɛtwam ntɛmntɛm, anyɛ saa a wobetumi asan abɔ nea wɔakyere no bio
- Asking users to send a meaningful money to log in. Katua no yɛ adanse, enti ɛsɛ sɛ sika no yɛ nea ɛho nhia
- Raw address no a wɔbɛkora so bere a application pɔtee bi a ɛkyerɛ sɛ wɔyɛ adwuma no bɛyɛ adwuma koro no ara
- Fa no sɛ nkrasɛm a wɔde wɔn nsa hyɛ ase yɛ adwuma wɔ baabiara. Hwɛ sika kotoku a wɔn a wɔde di dwuma no wɔ ankasa
- Memo a wɔbɛfa no sɛ kokoamsɛm wɔ nokwasɛm no akyi. Ɛda no adi sɛ nea ɔde kɔmaa no no yɛɛ ade, ɛnyɛ password
Projects Exploring This
Wɔkyekyeree eyinom maa Zcash Login track of ZecHub Hackathon 3.0 na ɛyɛ nea ɛwɔ hɔ. Wɔyɛ sɔhwɛ ahorow mmom sen nneɛma a wɔawie, na ɛkyerɛ sɛnea ɛsono sɛnea wobetumi akyekye adwene koro no ara.
- ZecAuth - sika kotoku nkitahodi protocol ma Zcash, wɔ honhom mu a nea WalletConnect yɛ wɔ baabi foforo. App no kyerɛ QR code anaa
zecauth:// link a ɛde asɛnnennen bi ka ho ne tumi ahorow a ɛrebisa, te sɛ sign in, payment requests, anaa viewing access. Nkitahodi biara nni hɔ, sika biara nni hɔ, nkɔnsɔnkɔnsɔn nkitahodi biara nni hɔ. Ɛde protocol specification a wɔakyerɛw a ɛka code no ho mena
- ZShield - dane address a wɔabɔ ho ban no yɛ W3C DID ne OpenID Connect identity. Browser no yɛ keypair, server no de nonce ma wɔ ZIP 304 style interface so, wallet no de ne nsa hyɛ ase, na server no san de JWT ba. Esiane sɛ nea efi mu ba no ne OIDC hyia nti, app ahorow a ɛwɔ hɔ dedaw no betumi adi no a wɔmfa bespoke nkabom nni dwuma
- ZecPass - di ne wurayɛ ho adanse denam memo a wɔde wɔn nsa ahyɛ ase so, na wɔasi sɛnea ɛbɛyɛ a app no nsua nea ɔde di dwuma no address koraa da. Ɛnya application scoped hash a wɔde bedi dwuma sɛ stable identifier, ɛkora nsɛnnennen a wɔde di dwuma pɛnkoro ne bere a wɔde ahyɛ mu, na ɛde drop in React button a Node verification library ka ho mena
- Portal - login denam shielded transaction a wode bere biako koodu wɔ memo no mu, a ɛreyɛ adwuma wɔ mainnet so bɛmena so. Wɔsan de nsu a ɛsen saa ara di dwuma de bue nneɛma a wɔatua ho ka na wɔde mena anaa wogye sika fi link bi so
- ZcashMe - de sikatua a wɔabɔ ho ban di dwuma sɛ adanse a ɛkyerɛ sɛ obi yɛ onipa, na ɛde n’adwene si desktop to mobile gap so sɛnea ɛbɛyɛ a sɛ wobɛkɔ laptop so a, ɛho renhia sɛ wobɛtrɛw browser mu
- ZBooks - akontabuo ne sikatua adwinnadeɛ a ɛfa sign in ne Zcash sɛ auth primitive a wɔtumi de di dwuma bio sene sɛ ɛbɛyɛ afiri no ankasa, na ɛkenkan sikakorabea data denam Unified Full Viewing Key so
Related pages
