Skip to content

Commit

Permalink
Added a NKCSS.Antelope.Verify section to inform about server-side val…
Browse files Browse the repository at this point in the history
…idation options
  • Loading branch information
NKCSS authored and rakeden committed Jun 18, 2024
1 parent aa8d4a5 commit 2a30542
Showing 1 changed file with 16 additions and 0 deletions.
16 changes: 16 additions & 0 deletions docs/build/tutorials/server-side-veritification/index.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
---
title: ServerSide Verification
order: 100
---

# Using NKCSS.Antelope.Verify to validate clientside logins on the backend

Both [MyCloudWallet](https://mycloudwallet.com) and [Anchor](https://github.com/greymass/anchor) offer an option to, as part of the standard identity proof request, also sign a proof that you can individually validate on the backend. These proofs can be validated using ECDSA and are ideal for Unity/.NET backend applications and are invisible to the user, not requiring any additional actions compared to the normal client-side-only workflow.

## How to enable this for MyCloudWallet

You can look [here](https://github.com/worldwide-asset-exchange/waxjs#21-login-combining-proof-system) to see how you can make MyCloudWallet provide the additional proof, or check the [NKCSS.Antelope.Verify](https://github.com/NKCSS/NKCSS.Antelope.Verify/) for an example implementation.

## How to enable this for Anchor

There isn't any documentation available that I could find, but it boils down to a `proof` property being available in the login response, which can be used to validte on the backend. It's signed with a 60-second expiration to prevent replay attacks. You can see [an implementation example in the NKCSS.Antelope.Verify repository](https://github.com/NKCSS/NKCSS.Antelope.Verify/blob/97eac764b52bb185ab4a762ebe00afc1fb4c146b/VerificationExample/wwwroot/js/site.js#L99).

0 comments on commit 2a30542

Please sign in to comment.