Authentication - Backend

codydaig commented 5 years ago

Implement Authentication on the backend.

My initial thoughts to help guide getting started:

Use JWT (JSON Web Tokens)
A "User" is the same as a "Volunteer" in the database so no need to create new nodes.
It might be easy to just default volunteer passwords to "null" and not allow sign in until a password is set. Maybe through a forgot password? (Open to ideas here)
Make sure we are hashing passwords with salts.
I don't see a need to store tokens in the database at this time.
Tokens should expire.

Let me know if you need any other guidance.

mjraybk07 commented 5 years ago

TODO: We will follow with user sign in, and then middleware to protect /authorize / authenticate transactions

mjraybk07 commented 5 years ago

We added a PR#24 which incorporates and replaces PR#23. It adds the user login api and protect / authorization middleware https://github.com/codydaig/911vm/pull/24

This completes our submissions for the above issue and features

codydaig / 911vm