diff options
| author | Adam Soltys <[email protected]> | 2026-09-04 08:24:04 -0700 |
|---|---|---|
| committer | Adam Soltys <[email protected]> | 2026-09-04 08:24:04 -0700 |
| commit | 53b283837f6b8341602b17ff9210cb85d1ec8ae0 (patch) | |
| tree | edc87e68d8c54ec225eddf10239d86a138a186f5 /dev.js | |
| parent | bb165f01af7972b339424b5730596bc0340a67e2 (diff) | |
| download | coinosv3-53b283837f6b8341602b17ff9210cb85d1ec8ae0.tar.gz coinosv3-53b283837f6b8341602b17ff9210cb85d1ec8ae0.zip | |
Passkey identities stay signed in across reloads: the passkey-derived nostr key is now kept in the wallet's nostrlogin state and resumeLogin reattaches from it instantly, so opening chat no longer greets passkey users with "Your nostr signer isn't connected". Kept deliberately and only for the passkey door: a pasted nsec keeps its used-once-never-stored promise, but a passkey key exists only through this app's PRF derivation and re-deriving it costs a WebAuthn ceremony (system dialog + biometric) on every open — and the same storage already holds the wallet seed, so this is the same exposure class. Existing passkey sessions heal on their next reconnect: that ceremony saves the key, and none is asked for again
Co-Authored-By: Claude Fable 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01MGzU12QrAA4G6BYGzGVdXz
Diffstat (limited to 'dev.js')
0 files changed, 0 insertions, 0 deletions