Try wwwhisper Out

[alexfinnarn]

https://elements.heroku.com/addons/wwwhisper

It allows for access control via routes using a token system. If this works, it's the simplest thing to do, although Auth0 and next-auth provide ways for token auth vs. traditional logins.

Acceptance Criteria

• [x] Add connect-wwwhisper to dependencies
• [x] Add code to server.js
• [x] Configure on Heroku

var wwwhisper = require('connect-wwwhisper');
// app holds a reference to express or connect framework, it
// may be named differently in your source file.
app.use(wwwhisper());

// Alternatively, if you don't want wwwhisper to insert
// a logout iframe into HTML responses use.
app.use(wwwhisper(false));

[alexfinnarn]

This addon works, but since there are API requests, images in /public, etc. the rules don't work as well as I'd hope. I'll leave this in the codebase but turn it off. It might useful at some point.