simplajs / simpla

Open, modular, and serverless content management for a modern web
https://www.simplajs.org
MIT License
527 stars 36 forks source link

Check if project ID belongs to user on login #30

Closed madeleineostoja closed 7 years ago

madeleineostoja commented 8 years ago

Right now we don't check the project ID that Simpla() was initialised with when the user logs in. There's no security concern here (they still can't do anything if they don't own the project), but there are UX ramifications:

There is no valid use case for logging in with the Simpla SDK that has an invalid project key.