Open tanerochris opened 4 years ago
Any update on this?
Ok guys, about solution. I noticed you installed next-session
already since we won't be doing cross-site requests. I guess the simpler path to take is next-session to store the user
information and will be access in the browser context as props.
So what i will need to work on now are (Thats creating methods since api design comes later);
The work includes password encryption and storage.
Also if we need to have a lock mechanism there are two options, using a took like Fail2ban
, or i build it within the code. Please lets pick on, i build into code or Fail2ban
like service (Which entails just logging login fail attempts and banning IP)
Basic Authentication (Login/Signup) Password recovery Discussion open about the library to use like passportjs, discuss with the team about the solution to be used.