Add authentication and authorization

[vityaman]

We want to use JWT for token based auth.

Also we need to think about theoretically supporting multiple login methods: Yandex ID, ITMO ID, Telegram (for bot).

References

• Spring, Yandex ID, JWT: https://github.com/vityaman-edu/lms/tree/trunk/botalka
• React, Yandex ID, JWT: https://github.com/vityaman-edu/web-taparia-nest-react

Parent

• 15

Depends on

• 16

[vityaman]

@Kimiega, what do you think about using Yandex ID for authentication? It should be slightly more secure and trusted by users, than to store login and passwords here.

[vityaman]

Do not forget to encrypt JWT payload. I did not this in LMS: https://github.com/vityaman-edu/lms/issues/133

JWT Payload should be at least user_id, roles.

[vityaman]

Our JWT token must support RFC8725.