arades79 / hyperdome

the safest place to reach out
Other
27 stars 1 forks source link

Use session IDs instead of Flask-Login for counselors #51

Closed arades79 closed 4 years ago

arades79 commented 4 years ago

Summary

This PR removes most integration into Flask-Login, as it is more complex than necessary for this stage. counselor logins are currently totally unauthenticated, and the API was changed to consolidate logic for guests and counselors. Eventually authentication via the database and Bcrypt will be re-enabled, but it is unlikely that Flask-Login will be re-enabled due to the complexity of using redirects and ensuring they are adequately secured.

Checklist