bug: Replace auth system with tokens - Githubissues

redbrick / brickbot

A simple serverless bot for the new Redbrick Discord.

9 stars 9 forks source link

bug: Replace auth system with tokens #52

Open benmcmahon100 opened 4 years ago

benmcmahon100 commented 4 years ago

The current system just checks that a user exists. There is no verification of identity and no checks for collisions in used usernames. See #51

The verification flow should do the following:

[ ] Send a mail or use a webgate to get a JWT
[ ] JWT should be validated in a flow separate to the command itself and roles should be assigned based off of the roles of the member in LDAP