Hi,
I've been trying to implement a system to login a mobile device by scanning a Qr code on my desktop flutter app. I've been able to do so by passing my actual credentials in an encrypted string through qr.
When the qr is generated it listens to a an entry in my database in realtime; which is updated with the session id once my mobile logs in after scanning. This allows me to log out the mobile session from my desktop dashboard
I know this is certainly not secure.
What would be the best way to achieve this functionality?
Summary
The user is asking for advice on implementing a system to log in a mobile device by scanning a QR code on a desktop app. They have currently implemented it by passing encrypted credentials through the QR code, but acknowledge that this method is not secure. They are seeking the best way to achieve this functionality.
Possible solution: Instead of passing actual credentials, they can use a temporary code. It is suggested to integrate with an OAuth provider like Auth0 to handle the authentication process. Auth0 provides a guide on implementing this functionality with their service.
Drake
Sep 27, 2023, 01:06
typically, instead of passing an actual password, some sort of temporary code is passed.