search

blueprint-site / blueprint-site.github.io

The site with Create Mod addons
https://blueprint-site.github.io/
MIT License
12 stars 6 forks source link

Implement an user-system #53

Open TheReal-Flo opened 1 month ago

TheReal-Flo commented 1 month ago

Implement an user-system

This is required to manage and restrict access to the API

JavaBoii commented 1 month ago

What exactly do you mean by access to the API. Who is getting access? @TheReal-Flo

TheReal-Flo commented 1 month ago

The users using the site for example, to download and upload schematics, like schematics, vote in the awards, subscribe to a newsletter...

LeoCaprile commented 1 month ago

I think we could manage it with some auth library, like lucia-auth, in for the backend.

for the front, maybe use some library too, or roll our own.

What exactly do you mean by access to the API. Who is getting access? @TheReal-Flo

Restricting access to the API by requiring authorization in every request, the authorization should come after the user authenticates.

JavaBoii commented 1 month ago

@LeoCaprile i thought more of passport https://www.npmjs.com/package/passport What do you think

TheReal-Flo commented 1 month ago

@LeoCaprile i thought more of passport https://www.npmjs.com/package/passport

What do you think

Yeah, me too. I have already got an package with predesigned login buttons for a lot of services

LeoCaprile commented 1 month ago

@LeoCaprile i thought more of passport https://www.npmjs.com/package/passport What do you think

I used passport before in work, was not a good experience to be honest. :(

I'm looking forward to use something more modern and with good docs. I used lucia-auth also, and was a smoth experience. But if you guys are experienced with passportjs, I'm okay with going with it.

JavaBoii commented 1 month ago

@LeoCaprile oh no, i will gladly take someones opinion with experience over mine hahah. Then lets go with lucia-auth

TheReal-Flo commented 1 month ago

Idk, lucia-auth looks kinda "incomplete" to me, also it would be a hassle to implement oauth there. We should go with Passport, it's easy to use and should also be easy to learn for @LeoCaprile

LeoCaprile commented 1 month ago

Idk, lucia-auth looks kinda "incomplete" to me, also it would be a hassle to implement oauth there. We should go with Passport, it's easy to use and should also be easy to learn for @LeoCaprile

No worries, lets go with Passport then!