Sort:  

I ended up going different way.
Server encode a token/secret using user's public key. Then user decode it using steem_keychain.requestVerifyKey. If successful then we got a handshake for the future.

It could be better in some cases than the way I wrote about. I am guessing we need to send 2 requests, one for fetching encoded message, another letting server know use successfully decoded the message.

But I think its more secured in some use cases. Thanks for sharing the idea.

Coin Marketplace

STEEM 0.04
TRX 0.33
JST 0.083
BTC 62872.28
ETH 1690.61
USDT 1.00
SBD 0.42