PDF Publication Title:
Text from PDF Page: 054
The objective of the system is to make it possible for any third-party to allow users to log into their website using an Ethereum address as an identifier. No username or password is required. We assume a user attempting to login with an Ethereum address is a user who currently holds an Ethereum address with some Ether (that is, a user that holds an Ethereum account for other uses). Based on these assumptions, this is how our sample system worked: 1. A user browses to a third-party website that requires login. An input text area for the user’s Ethereum address is displayed. 2. The user inputs his or her Ethereum address and clicks “login”. 3. The third-party backend produces a challenge string and signs a JWT with the challenge embedded in it. 4. The user sends the challenge string to the login method of the Login contract already avail- able on Ethereum. 5. The backend watches the Ethereum network for the challenge string. It must be sent by the owner of the Ethereum address that was input in step 2. 6. If the challenge is seen by the backend within a reasonable timeframe, the user is then marked as logged in using the Ethereum address from step 2 as the identifier. A new JWT with full access to the third-party website is issued. There are a series of problems with this approach. Namely: • The user must manually make a call to the login method of the Login contract using an Ethereum wallet of his or her choice. • The user must know the address and the interface of the Login contract beforehand. • The user must spend some Ether to login because the contract relies on events that are logged to the blockchain (that is, they perform writes). This makes the contract require gas to run. • The backend must wait for a new block to be mined and propagated through the network before the login is completed (minimum latency in the order of 12 seconds or more). As you can imagine, these limitations make our simple authentication example impractical. So what can we do about them? 3.2 Towards a Practical Authentication Solution for Ethereum Users Authentication is what we do at Auth0, so we teamed up with the guys from GFT’s Innovation Team (Ivo Zieliński, Konrad Kozioł, David Belinchon and Nicolás González)7 to think of a better way of using Ethereum for this purpose. We came up with a proof of concept which we will share with you in this chapter. First, let’s describe the design goals for our system: • It should allow users with an Ethereum address to use that address to login to a third party website (that supports this login method). • It should be easy to use and reasonably easy to setup. • It should not compromise the security of the user’s Ethereum account. 7 http://www.gft.com/ 52PDF Image | Intro to Ethereum and Smart Contracts
PDF Search Title:
Intro to Ethereum and Smart ContractsOriginal File Name Searched:
intro-to-ethereum.pdfDIY PDF Search: Google It | Yahoo | Bing
NFT (Non Fungible Token): Buy our tech, design, development or system NFT and become part of our tech NFT network... More Info
IT XR Project Redstone NFT Available for Sale: NFT for high tech turbine design with one part 3D printed counter-rotating energy turbine. Be part of the future with this NFT. Can be bought and sold but only one design NFT exists. Royalties go to the developer (Infinity) to keep enhancing design and applications... More Info
Infinity Turbine IT XR Project Redstone Design: NFT for sale... NFT for high tech turbine design with one part 3D printed counter-rotating energy turbine. Includes all rights to this turbine design, including license for Fluid Handling Block I and II for the turbine assembly and housing. The NFT includes the blueprints (cad/cam), revenue streams, and all future development of the IT XR Project Redstone... More Info
Infinity Turbine ROT Radial Outflow Turbine 24 Design and Worldwide Rights: NFT for sale... NFT for the ROT 24 energy turbine. Be part of the future with this NFT. This design can be bought and sold but only one design NFT exists. You may manufacture the unit, or get the revenues from its sale from Infinity Turbine. Royalties go to the developer (Infinity) to keep enhancing design and applications... More Info
Infinity Supercritical CO2 10 Liter Extractor Design and Worldwide Rights: The Infinity Supercritical 10L CO2 extractor is for botanical oil extraction, which is rich in terpenes and can produce shelf ready full spectrum oil. With over 5 years of development, this industry leader mature extractor machine has been sold since 2015 and is part of many profitable businesses. The process can also be used for electrowinning, e-waste recycling, and lithium battery recycling, gold mining electronic wastes, precious metals. CO2 can also be used in a reverse fuel cell with nafion to make a gas-to-liquids fuel, such as methanol, ethanol and butanol or ethylene. Supercritical CO2 has also been used for treating nafion to make it more effective catalyst. This NFT is for the purchase of worldwide rights which includes the design. More Info
NFT (Non Fungible Token): Buy our tech, design, development or system NFT and become part of our tech NFT network... More Info
Infinity Turbine Products: Special for this month, any plans are $10,000 for complete Cad/Cam blueprints. License is for one build. Try before you buy a production license. May pay by Bitcoin or other Crypto. Products Page... More Info
CONTACT TEL: 608-238-6001 Email: greg@infinityturbine.com (Standard Web Page)