Access and refresh tokenToken generation, validation and app integration with API.

[KhirulIslam]

We need a mechanism to secure our api endpoints. To do that we need the following mechanisms.

• Define scope and different user groups.
• Implementation of access and refresh token generation
• Integration with existing endpoints

In terms of user groups, we have the following user groups.

• App user (donor and receiver)
• Organization
• Blood bank
• Admin (superuser)

Acceptance criteria:

• Token-based authentication and authorization implemented for all user groups.
• Existing API Integration.
• Integration with web and mobile app