search

foundersandcoders / open-tourism-platform

An open platform to facilitate the creation of apps to promote local tourism and business in Nazareth
MIT License
17 stars 3 forks source link

Authenticating the access token #121

Closed m4v15 closed 6 years ago

m4v15 commented 7 years ago

How are we securing the routes?

Should they be accessible only by client's logged in with oauth, or also by people directly logged into the platform. This question affects what we do next.

The module has an authenticate function that returns the token. However this will presumably fail if a request is made that has a JWT in a cookie and no access token?

mattlub commented 6 years ago

close this as it was addressed?

mattlub commented 6 years ago

126