Oddbean new post about login | logout What API? There is no API, there is only signed events in relays. For example can publish a message to a chachi chat with nak: nak -k 9 -c message -t h=groupid relay.url
cool, that you can do that with Nak. but that is CLI let's say we don't want to build another chat UI inside of an existing nostr client that does other stuff. i just want to auto auth, client to client. how do you suggest we do that? Right now every client requires a user to go through a NIP-07 auth process. Lots of repeat logins when switching from web app to web app really sucks ass. If a client is willing to provide NIP98, then let one client programmatically sign into another, is that what the spec is for? or did i read it totally wrong?
Sorry, just to clarify: you want to embed Chachi with all its HTML and JS inside another client? Or do you want to write a different chat UI that can interact with the same chat rooms that Chachi does?
I want both. now which NIP do i use for these?
If you want to make a chat client you use NIP-29. There are other clients that do it, like https://chat29.pages.dev/groups.0xchat.com'zcfCdcfn7b27TYtw/ and https://groups.nip29.com and 0xchat etc -- am I misunderstanding you?
If you want to embed an HTML client somewhere else then there is not a NIP for it because it's not advisable at all, but you would have to use an <iframe> or some other way to render HTML in that other environment. And then you could inject a faux window.nostr global in there. Not the same thing, but as an inspiration, https://github.com/fiatjaf/window.nostr.js injects a window.nostr global in websites, but instead of an extension it powers that with NIP-46 calls to bunkers.
I think you read it totally wrong. NIP-98 is just a suggestion of how people can authenticate to single specific centralized server APIs. It is not relevant for pure Nostr clients that talk to various relays with websockets.
NIP-98 is probably not even worth having as a NIP, since it confuses more than it enlightens. It is not necessary to have a standard there since no one benefits from it as each server is completely isolated and uses it in specifically different ways.
So in the case of LNBits, NIP-98 is used to auth with nostr, Is that what you mean by centralized server. Since there is an LNBits API for NIP98 login (afaik) , it means that any nostr client, can auth to lnbits ..... so if this is not the correct interpretation, let me know