[{"data":1,"prerenderedAt":515},["ShallowReactive",2],{"navigation":3,"\u002Fdocs\u002Fbancwr\u002Fconnecting-apps":128,"\u002Fdocs\u002Fbancwr\u002Fconnecting-apps-surround":512},[4,19,62,93],{"title":5,"path":6,"stem":7,"children":8,"icon":10},"Getting Started","\u002Fdocs\u002Fgetting-started","1.docs\u002F1.getting-started\u002F1.index",[9,11,15],{"title":5,"path":6,"stem":7,"icon":10},"i-lucide-rocket",{"title":12,"path":13,"stem":14},"Installation","\u002Fdocs\u002Fgetting-started\u002Finstallation","1.docs\u002F1.getting-started\u002F2.installation",{"title":16,"path":17,"stem":18},"Using Diogel","\u002Fdocs\u002Fgetting-started\u002Fusage","1.docs\u002F1.getting-started\u002F3.usage",{"title":20,"path":21,"stem":22,"children":23,"icon":61},"Porwr","\u002Fdocs\u002Fporwr","1.docs\u002F2.porwr\u002F01.index",[24,26,29,33,37,41,45,49,53,57],{"title":25,"path":21,"stem":22,"icon":10},"What is Porwr",{"title":12,"path":27,"stem":28},"\u002Fdocs\u002Fporwr\u002Finstallation","1.docs\u002F2.porwr\u002F02.installation",{"title":30,"path":31,"stem":32},"Dashboard","\u002Fdocs\u002Fporwr\u002Fdashboard","1.docs\u002F2.porwr\u002F03.dashboard",{"title":34,"path":35,"stem":36},"Key Management","\u002Fdocs\u002Fporwr\u002Fkeys","1.docs\u002F2.porwr\u002F04.keys",{"title":38,"path":39,"stem":40},"Profile Management","\u002Fdocs\u002Fporwr\u002Fprofile","1.docs\u002F2.porwr\u002F05.profile",{"title":42,"path":43,"stem":44},"Relay Management","\u002Fdocs\u002Fporwr\u002Frelay","1.docs\u002F2.porwr\u002F06.relay",{"title":46,"path":47,"stem":48},"Messaging","\u002Fdocs\u002Fporwr\u002Fmessaging","1.docs\u002F2.porwr\u002F07.messaging",{"title":50,"path":51,"stem":52},"Media Management","\u002Fdocs\u002Fporwr\u002Fmedia","1.docs\u002F2.porwr\u002F08.media",{"title":54,"path":55,"stem":56},"Wallet Management","\u002Fdocs\u002Fporwr\u002Fwallet","1.docs\u002F2.porwr\u002F09.wallet",{"title":58,"path":59,"stem":60},"Extension Settings","\u002Fdocs\u002Fporwr\u002Fsettings","1.docs\u002F2.porwr\u002F10.settings","i-lucide-puzzle",{"title":63,"path":64,"stem":65,"children":66,"icon":92},"Symudol","\u002Fdocs\u002Fsymudol","1.docs\u002F3.symudol\u002F1.index",[67,69,72,76,80,84,88],{"title":68,"path":64,"stem":65,"icon":10},"What is Symudol",{"title":12,"path":70,"stem":71},"\u002Fdocs\u002Fsymudol\u002Finstallation","1.docs\u002F3.symudol\u002F2.installation",{"title":73,"path":74,"stem":75},"Your vault","\u002Fdocs\u002Fsymudol\u002Fvault","1.docs\u002F3.symudol\u002F3.vault",{"title":77,"path":78,"stem":79},"Accounts and profile","\u002Fdocs\u002Fsymudol\u002Faccounts","1.docs\u002F3.symudol\u002F4.accounts",{"title":81,"path":82,"stem":83},"Approving requests","\u002Fdocs\u002Fsymudol\u002Fapproving-requests","1.docs\u002F3.symudol\u002F5.approving-requests",{"title":85,"path":86,"stem":87},"Remote apps (NIP-46)","\u002Fdocs\u002Fsymudol\u002Fremote-apps","1.docs\u002F3.symudol\u002F6.remote-apps",{"title":89,"path":90,"stem":91},"Settings","\u002Fdocs\u002Fsymudol\u002Fsettings","1.docs\u002F3.symudol\u002F7.settings","i-lucide-smartphone",{"title":94,"path":95,"stem":96,"children":97,"icon":127},"Bancwr","\u002Fdocs\u002Fbancwr","1.docs\u002F4.bancwr\u002F1.index",[98,100,103,107,111,115,119,123],{"title":99,"path":95,"stem":96,"icon":10},"What is Bancwr",{"title":12,"path":101,"stem":102},"\u002Fdocs\u002Fbancwr\u002Finstallation","1.docs\u002F4.bancwr\u002F2.installation",{"title":104,"path":105,"stem":106},"First administrator and signing in","\u002Fdocs\u002Fbancwr\u002Ffirst-administrator","1.docs\u002F4.bancwr\u002F3.first-administrator",{"title":108,"path":109,"stem":110},"Team and roles","\u002Fdocs\u002Fbancwr\u002Fteam","1.docs\u002F4.bancwr\u002F4.team",{"title":112,"path":113,"stem":114},"Connecting apps","\u002Fdocs\u002Fbancwr\u002Fconnecting-apps","1.docs\u002F4.bancwr\u002F5.connecting-apps",{"title":116,"path":117,"stem":118},"Profile, follows and relays","\u002Fdocs\u002Fbancwr\u002Fprofile-follows-relays","1.docs\u002F4.bancwr\u002F6.profile-follows-relays",{"title":120,"path":121,"stem":122},"Health, versions and logs","\u002Fdocs\u002Fbancwr\u002Fhealth-and-logs","1.docs\u002F4.bancwr\u002F7.health-and-logs",{"title":124,"path":125,"stem":126},"Updating","\u002Fdocs\u002Fbancwr\u002Fupdating","1.docs\u002F4.bancwr\u002F8.updating","i-lucide-server",{"id":129,"title":112,"body":130,"description":489,"extension":506,"meta":507,"navigation":508,"path":113,"seo":509,"stem":114,"__hash__":511},"docs\u002F1.docs\u002F4.bancwr\u002F5.connecting-apps.md",{"type":131,"value":132,"toc":488},"minimark",[133,138,142,150,166,173,176,185,189,196,203,219,222,226,229,303,308,315,330,336,339,343,349,355,359,362,388,391,395,398,402,421,424,427,431,434,448,455,458,462,485],[134,135,137],"h2",{"id":136},"how-apps-connect","How apps connect",[139,140,141],"p",{},"Nostr apps use Bancwr as a remote signer over NIP-46. An app sends signing requests through relays, and the bunker answers them.",[139,143,144,145,149],{},"No app can connect on its own. An administrator issues a ",[146,147,148],"strong",{},"connection token"," for each app. The token:",[151,152,153,157,160,163],"ul",{},[154,155,156],"li",{},"names the team member the app is connected for,",[154,158,159],{},"lists the event kinds the app may sign,",[154,161,162],{},"works for one connection only,",[154,164,165],{},"expires after 1 hour, 24 hours or 7 days.",[139,167,168,169,172],{},"Every connected app signs as ",[146,170,171],{},"the bunker's key",", not the member's own key. \"For a member\" records who the app belongs to. It is not a separate key.",[139,174,175],{},"An app can only sign the event kinds its token allows. There is no \"everything\" option.",[139,177,178,179,184],{},"NIP-46 must be on, and the bunker needs at least one relay. See ",[180,181,183],"a",{"href":182},"\u002Fdocs\u002Fbancwr\u002Finstallation#nip-46-and-the-bunkers-relays","NIP-46 and the bunker's relays",".",[134,186,188],{"id":187},"the-connections-page","The Connections page",[139,190,191,192,195],{},"Open ",[146,193,194],{},"Connections"," in the sidebar. Administrators and users can open it.",[139,197,198],{},[199,200],"img",{"alt":201,"src":202},"The Connected apps page, with a connected app, the token form and unused tokens","\u002Fimg\u002Fscreenshots\u002Fbancwr\u002Fconnections.png",[151,204,205,212],{},[154,206,207,208,211],{},"An ",[146,209,210],{},"administrator"," sees every connected app, and whom each one is for.",[154,213,214,215,218],{},"A ",[146,216,217],{},"user"," sees the apps connected for them.",[139,220,221],{},"Signers do not have this page.",[134,223,225],{"id":224},"issuing-a-connection-token","Issuing a connection token",[139,227,228],{},"Only administrators can issue tokens.",[230,231,232,236,247,254,290,297],"ol",{},[154,233,191,234,184],{},[146,235,194],{},[154,237,238,239,242,243,246],{},"Under ",[146,240,241],{},"Issue a connection token",", choose ",[146,244,245],{},"For",": the member this app is connected for. It defaults to you.",[154,248,249,250,253],{},"Enter a ",[146,251,252],{},"Label"," to recognise the app later, such as \"Damus on my phone\".",[154,255,238,256,259,260],{},[146,257,258],{},"May sign",", choose what the app may sign:\n",[151,261,262,268,274,280],{},[154,263,264,267],{},[146,265,266],{},"Notes and reactions"," (kinds 1 and 7)",[154,269,270,273],{},[146,271,272],{},"Notes, reactions and reposts"," (kinds 1, 6 and 7)",[154,275,276,279],{},[146,277,278],{},"Profile only"," (kind 0)",[154,281,282,285,286,184],{},[146,283,284],{},"Choose kinds…",", then enter kind numbers separated by commas, such as ",[287,288,289],"code",{},"1, 7, 30023",[154,291,292,293,296],{},"Choose how long the token is ",[146,294,295],{},"Valid for",": 1 hour, 24 hours or 7 days.",[154,298,299,300,184],{},"Click ",[146,301,302],{},"Issue token",[304,305,307],"h3",{"id":306},"the-connection-string","The connection string",[139,309,310,311,314],{},"Bancwr shows a ",[287,312,313],{},"bunker:\u002F\u002F"," connection string and a QR code.",[230,316,317,324],{},[154,318,319,320,323],{},"Give the string to the app, or scan the QR code with it. Use ",[146,321,322],{},"Copy"," to copy the string.",[154,325,299,326,329],{},[146,327,328],{},"Done"," when the app has it.",[331,332,333],"warning",{},[139,334,335],{},"The connection string is shown once. Anyone with it can connect until it is used or expires. The bunker keeps only a hash of its secret, so it cannot show it again. If you lose it, revoke the token and issue a new one.",[139,337,338],{},"If NIP-46 is turned off on the bunker, Bancwr says so instead of issuing a token.",[304,340,342],{"id":341},"unused-tokens","Unused tokens",[139,344,345,346,348],{},"Tokens that have not been used yet, and have not expired, are listed under ",[146,347,342],{},". Each shows its label, whom it is for, what it may sign, and when it expires.",[139,350,299,351,354],{},[146,352,353],{},"Revoke"," to cancel a token before an app uses it.",[134,356,358],{"id":357},"connected-apps","Connected apps",[139,360,361],{},"Each connected app shows:",[151,363,364,371,377,382,385],{},[154,365,366,367,370],{},"The name, address and picture the app gave about itself, with an ",[146,368,369],{},"Unverified"," badge.",[154,372,373,376],{},[146,374,375],{},"App key",": the app's own public key.",[154,378,379,381],{},[146,380,258],{},": the event kinds it was granted.",[154,383,384],{},"When it connected, and when it last signed.",[154,386,387],{},"Whom it is for (administrators only).",[139,389,390],{},"An app that gave no name is shown by its key.",[304,392,394],{"id":393},"names-are-not-verified","Names are not verified",[139,396,397],{},"NIP-46 lets an app name itself. The name, address and picture are what the app says, and Bancwr does not check them. They are never used to decide anything. Recognise your apps by the label and the time they connected.",[134,399,401],{"id":400},"revoking-an-app","Revoking an app",[230,403,404,408,413],{},[154,405,191,406,184],{},[146,407,194],{},[154,409,299,410,412],{},[146,411,353],{}," on the app.",[154,414,299,415,417,418,184],{},[146,416,353],{}," again to confirm, or ",[146,419,420],{},"Cancel",[139,422,423],{},"Users can revoke the apps connected for them. Administrators can revoke any app.",[139,425,426],{},"The app can no longer sign once revoked.",[304,428,430],{"id":429},"when-a-connection-ends","When a connection ends",[139,432,433],{},"A connection ends when:",[151,435,436,439,442,445],{},[154,437,438],{},"the app logs out,",[154,440,441],{},"someone revokes it,",[154,443,444],{},"the same app connects again with a newer connection, which replaces it,",[154,446,447],{},"the member it was made for is removed from the team.",[139,449,450,451,454],{},"Ended connections are hidden. Turn on ",[146,452,453],{},"Show ended"," to see them, with why and by whom each one ended.",[139,456,457],{},"Connections are kept across restarts of the bunker.",[134,459,461],{"id":460},"what-the-bunker-can-sign-over-nip-46","What the bunker can sign over NIP-46",[139,463,464,465,468,469,468,472,468,475,468,478,481,482,184],{},"The bunker supports these NIP-46 requests: ",[287,466,467],{},"connect",", ",[287,470,471],{},"get_public_key",[287,473,474],{},"sign_event",[287,476,477],{},"ping",[287,479,480],{},"switch_relays"," and ",[287,483,484],{},"logout",[139,486,487],{},"It does not support the NIP-04 and NIP-44 encryption requests, so apps cannot ask it to encrypt or decrypt messages.",{"title":489,"searchDepth":490,"depth":490,"links":491},"",2,[492,493,494,499,502,505],{"id":136,"depth":490,"text":137},{"id":187,"depth":490,"text":188},{"id":224,"depth":490,"text":225,"children":495},[496,498],{"id":306,"depth":497,"text":307},3,{"id":341,"depth":497,"text":342},{"id":357,"depth":490,"text":358,"children":500},[501],{"id":393,"depth":497,"text":394},{"id":400,"depth":490,"text":401,"children":503},[504],{"id":429,"depth":497,"text":430},{"id":460,"depth":490,"text":461},"md",{},true,{"description":510,"title":112},"Connect Nostr apps to Bancwr over NIP-46 with single-use connection tokens that name the team member and limit which event kinds the app may sign.","pvWHrPQj6Uf4zUevdBUiP9di9wRSRs_x0SBWmSuNlo4",[513,514],{"title":108,"path":109,"stem":110,"description":489,"children":-1},{"title":116,"path":117,"stem":118,"description":489,"children":-1},1793311924199]