Authentication

[Glamdring]

Setup user authentication using spring security and JWT. Use scrypt for storing passwords.

The JWT should contain the following claims: userId, sha512(user.getEmail() + user.isTwoFactorAuthEnabled() +user.getPassword())

The JWT Signature key should be stored in the properties file for now

JWT should be obtained in two ways:

• POST /login (username, password) - returns the token as a secure, httpOnly cookie
• POST /api/oauth/token - following the oauth grant_type=password spec, return the JWT as a bearer token