I built a wallet based login.
Signature verification was working, but then I thought the same signature can be reused anytime.
Read some docs and got to know about Nonces.
Implemented it in my code and got it working right.
Now, the user auth flow is much more secure against replay attacks.
I have written down what I learned here, check it out -
https://medium.com/@ashutosh122002/nonce-explained-72c26e92b7ce
Top comments (0)