4 ms·
I just did this with my web app that helps you track alt coin earnings. Just enter your wallet addresses and then bookmark the unique url that's generated for y
by deadcast 9y ago
I just did this with my web app that helps you track alt coin earnings. Just enter your wallet addresses and then bookmark the unique url that's generated for you. Access any time with no credentials. Works well so far but might not be best for every app.
- nsomaru 9y agoCool, what kind of stack did you use? Is it open source? Do you have a link?
- deadcast 9y agoYeah it actually is open source! :~) https://github.com/deadcast/ChainTrack https://github.com/deadcast/ChainTrack. It's using Rails 5.1.4 with Ruby 2.4.1.
- zaroth 9y agoUsing the URL as an authentication token is something different and has some insidious security properies for all the various ways that URLs can leak. At the very least you must place the token after the '#' in the URL, disable Google crawling in robots and turn off certain indexing modes using Webmaster tools.
- gruez 9y agojudging from the parent post >[...] that helps you track alt coin earnings. Just enter your wallet addresses [...] makes me think that the it's view-only anyways. even if you got a hold of the wallet address (authentication token), it's not like you can redirect the payout to somewhere else. and while it's true you can see another user's earnings, that information is publicly available on the blockchain anyways.
- UncleMeat 9y agoYour webserver logs now contain ever user's credentials, presumably in plaintext.
- deadcast 9y agoI don't store any personal information. Just public chaincoin wallet addresses so I think in my use case this solution works pretty well. Good ideas to think about though! :)