Oddbean new post about | logout
▲ ▼
brugeman | 9 months ago (raw) | root | parent | reply | flag 
 Did you sign up through the nsec app itself, or through the oauth signup flow from another app?
Asking for new kind is probably due to app requesting to sign something right after you sign in. The other million permissions should be just one - connect to the app (this could probably be avoided, I could bundle it into create account button itself). Browser permission is a must, unfortunately.
If you have any ideas on how to improve it I'd be very happy.
▲ ▼
Karnage | 9 months ago (raw) | root | parent | reply | flag +1 
 other app. I don't know what all it asked for but it was too much to click. I will check it out again soon.
▲ ▼
brugeman | 9 months ago (raw) | root | parent | reply | flag 
 Which other app? I will check what kinds it's signing after sign up, maybe add them to basic perms.
▲ ▼
brugeman | 9 months ago (raw) | root | parent | reply | flag +1 
 @Kieran how about we make apps declare the perms they'd like to have from bunkers? So that connect requests could show the exact list of perms the app needs (not some default list), and also create_account would grant all those perms and thus wouldn't result in extra perm requests right after signup? 
Those could go to nostr.json in some separate section. Could also go to app's nip89 announcement, but the domain would have to point to that first, so it's less direct.
cc @fiatjaf @PABLOF7z