Authentication, notifications, and unified sections of extension

[benhalpern]

I think a few features we'll want for the browser extension are the concept of seeing notification badges for individual communities I am a part of.

Example:

One way or another I think the major technical burden is how authentication would work in this way.

In terms of doing this in a way that is private and secure but also pretty seamless I could see a scenario where when the extension is installed it reads the user's API keys, stores them locally and uses them to ingest relevant APIs. I feel like that is legit as long as it's clear what's going on, behavior is as configurable as it needs to be, and we can ensure that the secrets can't leak.

I'd love input on that hypothetical functionality— particularly from a security perspective.

[nickytonline]

Just linking my comment from @benhalpern's post Is the approach to privacy within the forem browser extension valid? as it contains info relevant to this issue.