if we want to add uploading, leaving comments, changing profile picture, we need to be able to log somebody into scratch's api. but how will that integration work? we'd have to:
- assume it is always running locally and have the user input their username and password
- go along with the massive security holes (and ban from scratch) by having it hosted publicly and asking for scratch logins
- use a browser extension that the website communicates with to do the actions?
- or just not have any of that functionallity at all.
if we want to add uploading, leaving comments, changing profile picture, we need to be able to log somebody into scratch's api. but how will that integration work? we'd have to: