Open c4po opened 8 years ago
https://jwt.io/introduction/ seems to be a nice way to do it.
Not sure how we going to release this w/o auth method
Using passport?
are you going to use oauth? if so, how do you do ACLs? Say anyone with google account can login ?
ACLs is another scope I think.
I guess we need to support both oauth2 (API calls) and simple username/password.
Google, Github, LinkedIn etc..?
Okay sound good. passport looks good to me
limit the scope to google OAuth for now
I'm thinking to use API management software like https://github.com/Mashape/kong to manage the API authentication. We can use google OAuth for GUI
Yes, This is for the GUI. But once we have it for the GUI, we get it pretty cheap for API as well.