Level 88
This seems to be a very good API: http://goqr.me/api/
Verifying can indeed be done in many ways. A QR code is pretty fancy, but I think just a random generated number is also perfectly fine. You can also scan for that if you wish.
Jan 12, 2020
3
Level 15
QR code alternatives
https://laracasts.com/discuss/channels/laravel/qr-code-generator https://laracasts.com/discuss/channels/laravel/qr-codes?page=1
I checked out the above posts. It appears even google deprecated their QR code api.
Is the main issue with using these the interpretation side?
The app I'm working on is kind of like ebay but it's construction materials so the buyer goes to the seller's business location to pick up their goods.
My goal is to generate a code of some sort (QR or otherwise) and when a person wins a bid a code is generated. When the buyer goes to pick up their construction materials the seller prints out a pdf with the code on it and the buyer uses their phone to verify the code through the laravel app.
The goal is to "verify" that the real seller is providing the goods and that the buyer has "accepted" them.
I could see just a random number generator working too but if you have any experience in this area I'd like to hear.
Level 15
@bobbybouwmann you've got so many great tips.
It is pretty fancy but I think image in our apps matters a lot. I really like the laracasts videos widgets and recent improvements it just gives the site that polish..
The only thing I'm thinking is if you use a publicly available link or slug to generate the code someone could use your the qr api and 'copy' your code. Just a concern on scammers.
Maybe using a random generated number to create the code ??
Your last line - are you saying we can use the camera to scan a random number?
Level 88
Yeah, you can use the camera to scan a number as well. As long as you put a border around it. A QR code is also scanned from the camera right? Text is easy to scan as well ;)
For security purposes, I would recommend you to generate some URL in your QR data that points to some project that is always behind authentication. This way you can make sure that no one can access the URL without being logged in.
You also then need checks to see if this data matches with the current user, but I think you already have that covered ;)
1 like
Please or to participate in this conversation.