I haven't thought of combining access tokens with biometrics, that could actually be pretty slick. I have no real exposure to WebAuthn, but yeah the more I work

I haven't thought of combining access tokens with biometrics, that could actually be pretty slick. I have no real exposure to WebAuthn, but yeah the more I work in the 3.0 space the more I think that NFTs are one the most misrepresented technologies I can imagine. I'm writing an app that utilizes NFT ownership to authorize access to a service, and it's been really easy to implement, though I'm certain I'll need to continue making improvements to it. But my theory is that I can sign a message with my wallet on the frontend using NaCl, send that message and the signature to my backend and verify it, then verify token ownership using RPC. My PoC implementations have been working pretty well, but I am not sure of any holes that may exist in this approach, so it's still a work in progress.