Ideasy is a service to verify a persons identity. ThirdPartyWebsites can also check via a HTTP request if a registered user in Ideasy want the use of his address to get authorized by Ideasy. That means that noone can make you pay for any things he ordered to your address.
- prevent yourself from identity theft
- prevent your adress from being abused
We plan to provide several ways to identify your self when you create an account at Ideasy. The more ways you use the higher is your security level.
Often user accounts in different are filled with wrong or outdated informations. With Ideasy you can for example check if the information in your database is still correct.
There is a Java backend which has a Http websocket open as API to receive third party requests and answer to them. The Frondend and registration-backend is written in jQuery, PHP, HTML and JavaScript
- third party announces the user with sending a GET request to the server in order to get a sessionId which is valid for 10 minutes.
- third party redirects the user to Ideasy's login Page with the help of the sessionId.
- the user will now logic on this page and will proof his identity in several ways like 2-way-authentication...
- the user will accept which informations Ideasy wants to send back to the third party service and will either accept or reject it.
- Ideasy will now or won't answer the third party service if their information was correct, but Ideasy wont't tell them any blank information in any case.
- the user gets redirected to the third party page.
The API offeres several variables with different functions:
( are necesarry, others are optional )
ideasydomain/verify?skey=65465416541654&link=example.com&priority=5
ideasydomain/login?password=6546541HASHED6541654&id=dfas65f4&email=as454fs@saf
Key | Usage |
---|---|
password |
hashed password |
id |
sessionId |
email |
users email-address |
ideasydomain/checkForAuth?address={ojdsfijasf:jnfas}
Key | Usage |
---|---|
address |
json-formatted address |
- Write MORE Tests