Level 102
I don't know whatsup, but I would think it is simple in theory
- Create a qr code that points to your website with a personal login token (?token=supersecret
- Add logic to the route that matches the token with a user and logs the user in
My only concern is.. Is it safe? How do they ensure I cannot get your qr code?
Edit : assumed you meant whatsapp. They refresh the qr code on the website every x seconds. Just create a new secret key and update the users table, then show the new qr code
1 like