(discussion) Auth

[carletex]

I see two option to implement Auth / access in BG grants:

1. Same as APP BG

• You need to sign every write operation (EIP 712 would be great)
• For reading everything is open... unless you make people sign a message for reading too.
• Need to implement all the messages for each operation

2. SIWE + JWT

• SIWE once => get a JWT => send any request with the token payload
• Works for read/write

---

I might choose 2 so we try how it goes... and compare to the app bg implementation. But not sure, super open on this.

[damianmarti]

Will the user need to do a lot of write actions?

If the writes are a few, option 1 is enough.

Anyway, it will be useful to have the SIWE + JWT implemented, this flow can be used on other projects too.

[carletex]

Thanks @damianmarti !

Yeah, after tinkering with #17 and #18 it feels that option 1 is good enough for now!

Closing this!