Social Actions + Sticky Permissions

[deodad]

It'd be nice for Mini Apps to be able to prompt a user to like, recast, or follow without needing to manage a signer on behalf of the user. A common use case here is Mini Apps that render their own feeds of casts or leaderboards of users.

This could be exposed as Mini App SDK actions like like, recast, and follow and would require a prompt for the user to approve the operation, which would involve something similar to a transaction preview so the user has a clear understanding of what they are doing. This would be fine for one-off actions but quickly get annoying if users want to do something like scroll a feed inside your app.

To work around this, Mini App Hosts could provide a permissions toggle that let's users indicate the Mini App can take this action in the future without a prompt. Mini App Hosts would need to track these settings and expose them under a manage page for each Mini App (much like App specific permission toggles on iOS or Android).

This setting would be opaque to the Mini App—they don't need to maintain any state about a user's settings or worry about prompting users for certain permissions. They can simply call an action such as like and the user will either get a prompt or not depending on how they've configured things in the Mini App host. This makes it optional for Mini Apps Hosts to support.

Why shouldn't every Mini App get their own signer?

• Security - a signer can post on your account at any time having a bunch of signers out there for small applications risks a situation where someone is able to post on your account in a malicious manner
• Complexity for app devs - managing signers and using signers is significantly more work for an application developer than using the Mini App SDK.
• Worse UX - users need to go through the Farcaster Connect flow to grant a signer, this cane (rightfully) feel scary and some number of users will churn

[chejazi]

One additional UX thought is that sticky permissions could get lumped into the "Add Frame" prompt, and users have the ability to toggle any/all of:

• Notifications
• Like
• Recast
• Follow

Similar to how when you login with Google/etc, you can choose what permissions to give up front. App devs would specify the permissions they want to ask for

[deodad]

This was my initial direction but I like my proposal above more since since users don't need to take multiple actions when adding. For example, imagine if whenever you installed on app on iOS you had to toggle all the notification / camera / etc permissions up front instead of once you're using the app. It'd be unnecessary friction and harder for the user to reason about what permissions they should grant.

This "lazy" requesting feels nice since it just happens as part of the like flow and the user can opt in at any time.

[vrypan]

I like it. Only thing I would add is the corresponding sdk.action should return a status that lets the miniapp know what actually happened.