Update login API resource for new login flow

danbretl / mid-tier

django webapp

1 stars 0 forks source link

Update login API resource for new login flow #72

Closed rabialam closed 12 years ago

rabialam commented 12 years ago

ApiKeyResource needs to be updated for the new login flow:

User tries to log in with email and password
Account associated with email and correct password: login as usual
Account associated with email but wrong password: return 401 and message saying "Either incorrect email or password" instead of 401 with no message
Account not associated with email: return 401 and message saying "No account associated with this email address" instead of 401 with no message

rabialam commented 12 years ago

Updated flow:

User tries to log in with email and password
Account associated with email and correct password: login as usual (expect 200 code, get key in response)
Account associated with email but wrong password: expect empty response with 401 status code
Account not associated with email: expect response with body="NOT REGISTERED", 401 status code

rabialam commented 12 years ago

These changes are on branch login_flow_refactor.

p7k commented 12 years ago

rabi, please, review some of the syntactic and semantic changes i introduced after you. the branch is already merged into master and deleted from the remote.