Developed Utopian Connect (New Authentication System)

in #utopian-io6 years ago (edited)

Utopian is moving from the "Core" SteemConnect to our own personally-stylized and Utopian-flavored version! It will be available at https://connect.utopian.io and will provide a secure authentication layer/service between Utopian and the Steem Blockchain.

It's based on a fork of Steemit Inc and Busy's SteemConnect, but is tailored to fit Utopian's needs. I have developed it so that:

  • log-in is more seamless, quicker, and easier for the user
  • appearance and color scheme align with Utopian
  • it works with the @utopian-io account rather than @utopian.app sub-account
  • works better with Utopian and runs locally

The final release is set to be in the next few days after intensive testing.

New Sign-in Process

Here's a GIF I made of the new sign-in process with Utopian Connect (just some of it):

Dec-05-2017 17-52-01.gif

You can see how the color scheme and appearance varies from before.

Proof of Work

I have linked a few of my pull requests on Github to this Utopian contribution. However, I also work directly with the repository through commits, so you may want to check those out as well here.

Here are a few of my changes:

  • Front-end: Change branding and naming to Utopian
  • Front-end: Credit original SteemConnect and provide backlink
  • Front-end: Alter colorscheme, design, appearance to blue/purple gradients
  • Back-end: Remove useless/unnecessary panels and layers
  • Front-end: Make log in process much faster and intuitive
  • Back-end: Work directly with @utopian-io account rather than a buffer account
  • Front-end: Added Security Document to describe our security precautions

DISCLAIMER

  • This tool is untested and will likely not go out into production/release soon.
  • We are not trying to replace SteemConnect and if we do end up using this tool, we will properly credit the original SteemConnect on every page. The tool will only be used for internal Utopian purposes and nothing else.
  • The tool will only be used for INTERNAL purposes.
  • There are many security concerns to evaluate and we may end up not using this tool.

Thanks for reading,
@mooncryption

note: Please read the huge Disclaimer portion of the post!



Posted on Utopian.io - Rewarding Open Source Contributors

Sort:  

I am really surprised to see this post since we have not even tested it and there are some security concerns to evaluate. I want to remark that Utopian is NOT willing in any way to replace the exisiting Steem Connect or to provide this as a service as Steem Connect is doing.

We are only trying to evaluate different INTERNAL possibilities to make the user experience much easier INSIDE Utopian and trying the Steem Connect approach was interesting.

I am not planning to release this tool in the short term and for sure not before we have the registration process in place.

Please make evident in your post that we are not willing to replace Steem Connect in any way and if we will ever end up deciding to have an INTERNAL login system, based on SC or not, we will first evaluate the risks and the possibilities and if we end up choosing SC we will always credit them for the work.

Thanks @ekitcho for notifying me about this post.

Very bad idea in my point of view.
Forking steemconnect is opening phishing possibilites and doesn't mean anything. SC2 is supposed to officialised by Steemit inc and the community, and the code reviewed to ensure user safety.

Right now you're taking Active keys from you own domain and I strongly warn Steemians here to avoid entering their keys somewhere else than on Steemconnect.com (and Steemit.com).

The goal of SteemConnect is to avoid any 3rd party app to handle users private keys and create a hack possibility.

What you call the buffer account (proxy) is there for a reason as well. It allows quick undelegate (launched by Steemconnect or Steemit) of all app users authorities in case of abuse from the App.

I really suggest you to participate in the open source mindset and bring your contribution to the SC2 GitHub and tool instead of starting a new connect that will create security issue for users.

cc @elear

Thanks for your comment. Sorry about this post, it looks like I didn't convey what we were trying to do.

See the new huge 'Disclaimer' banner in the post and @elear's comment for more information.

Thank you for the contribution. It has been approved.

You can contact us on Discord.
[utopian-moderator]

1up-logo.png


You've got a 1UP from the @utopian-1up curation trail. 22 Utopians have upvoted your quality contribution to the open source community.

Follow the trail for profitable curation of quality content on SteemAuto.

@utopian-1up is neither organized nor endorsed by Utopian.io!

this is good for income.

is this change related to to avatars not loading or that happened for some other reason?

No, the changes aren't available or online yet.

@mooncryption I am now on Utopian and learning the ropes on finding topics to post on. Already getting my 1st payday in about an hour... thanks for encouraging me to join up

Wow, that's amazing! We're glad to have you at Utopian, and I'm sure you'll do really well :)

Nice progress! I notice in the gif that for a short moment the login panel seems to shake or expand? Definitely not a big deal, but...

That's a useful info of steem keep it up @mooncryption I appreciate your post

Nice steem thanks for sharing sir

Coin Marketplace

STEEM 0.29
TRX 0.12
JST 0.033
BTC 63855.79
ETH 3113.00
USDT 1.00
SBD 4.04