Jason Tudisco
fcfaec675a
- NIP-46 remote signer in the page (bunker:// and nostrconnect:// pairing) - Chrome extension (NIP-07) with per-site permission prompts, unlocked by the site via externally_connectable; downloadable from the page - Passkey (WebAuthn PRF) encryption of the Drive key file - NIP-49 backups: download or save to Drive; reveal nsec - Fix: oldest key file wins when two devices sign up at once - Fix: never overwrite an existing kind-0 because a relay was slow - Fix: EOSE tracking; relays reconnect with backoff; verify event signatures - One-click re-sign-in (consent only the first time) - Vendored, pinned nostr-tools; CSP; no third-party scripts but Google's Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
7 lines
360 B
JavaScript
7 lines
360 B
JavaScript
// Where the Goostr website lives. "Unlock" in the popup opens this page, which
|
|
// signs you in with Google and hands your key to the extension.
|
|
//
|
|
// When you deploy Goostr, change this AND add the site's origin to
|
|
// "externally_connectable.matches" in manifest.json (e.g. "https://goostr.example.com/*").
|
|
export const GOOSTR_URL = "http://localhost:5174/";
|