Fully working login popup with nice design had been created. Login system base implementation had been created. System logs us only on the pages we choose other pages doesn't get access to transactions signing interface.
We get fully working programming interface to interact with steem blockchain which knows nothing about private keys which are stored deep inside extension where webpage doesn't have access. Check-mate hackers :)
1. npm install
2. npm run build
3. Now choose browser and procceed with online guidelines to: "temporarily install an extension for testing and debugging"
In build folder you will find created by previous command corresponding extensions code.
1. Login through the popup into extension.
2. Open developer console (in chrome F12)
3. Type for example this line of code:
SteemSecure.broadcast.transfer("bartosz546", "1.000 STEEM", "", function(err,res){console.log(err,res)});
This line will send 1 STEEM to bartosz546, transaction signing proccess will take place deep into the extension.
Browser does not have access to it.