The add auth address screen is a big scare to me

I gave a signer to TBA so I can post and this screen now says it can access funds from my wallet and write?

TBA says it wants to add an auth address but this seems like a signer connection?!

And how does that connect to it having permission to spend from my wallet?

Cc @horsefacts.eth @dylsteck.eth

I work at the posts office

terminally.online

Farcaster Development Boutique @ https://dTech.vision 💜 in love with tech 🤓decentralization, fitness and oldschool rap 😎

The problem is that "sign you into mini apps" includes spending funds in embedded wallets. Bracky, Ponder, Clankermon, etc. There are lots of ecosystem embedded wallets that are authenticated with SIWF. 

Agree the language here isn't ideal but we erred on the side of scary.

Yeah signer is during onboarding. I know the steps and tech which is why I got so scared @ confused

It should literally only say sign you into mini apps and apps using sign in with Farcaster 

Nothing more or less 😅

Cc @v in case you could improve copy here 🙌

agreed the copy should be a different/clearer here, to be very clear on what’s happening here we are just registering an auth address at this step and auth addresses do not have access to move your funds or do signer ops(the signer would’ve previously been created during onboarding). auth addresses are only allowed to SIWF

We agonized over the language a bit but couldn't come up with something simple enough for most people to understand. "this app will have permission to authenticate to apps using your Farcaster identity, including embedded wallets" is technically correct but extremely confusing to a normal person.

We erred on the side of making this warning extra scary because there are so many embedded ecosystem wallets that use Sign in With Farcaster. When you grant an auth address to an app, whoever controls that key *can* sign in to your Bracky wallet, your Ponder wallet, etc. (But not your Farcaster app wallet).

agree, had the same feeling on this screen