search

navx2810 / gbs-grm

0 stars 0 forks source link

Secure the API with JWT. #17

Open navx2810 opened 7 years ago

navx2810 commented 7 years ago

Probably using this payload { CID | GID | AID }

CID -- Customer ID GID -- Groomer ID AID -- Admin ID

Admin > Groomer > Customer

navx2810 commented 7 years ago

Maybe I can create a decorator to put on top of a route and check the security, follow it with enum to check for the privilege group.

navx2810 commented 7 years ago

Depending on what data storage we go with, we may choose to roll our own identity server or go with http://docs.identityserver.io/en/release/index.html#.