Authentication Investigation

[daiwik-swaminathan]

One big aspect of the website we have not yet tackled is authentication. On many websites that you use, you likely have to login in some form with a popular method being OAuth (authenticating via Google). However, we cannot do this as we do not want to collect any information which could tie stories to an identity. We want to keep things anonymous when it comes to posting stories but we need a way to still tie stories to a user.

So far, we are leaning towards using a randomly generated token that is assigned to a story poster and that token can be used for any future stories that they may post (username +. password is collapsed into this token which is associated with multiple stories).

We are open to feedback and any other suggestions. This task asks that you do some research and note down some possible approaches that might be viable for our use case.

[jinpettit]

I recommend taking a look at Firebase Authentication https://firebase.google.com/products/auth