unicef / magicbox

A platform that uses real-time data to inform life-saving humanitarian responses to emergency situations

https://www.unicef.org/innovation/Magicbox

BSD 3-Clause "New" or "Revised" License

86 stars 16 forks source link

Explain how MagicBox manages access control with Auth0 #26

Closed jwflory closed 6 years ago

jwflory commented 6 years ago

Review #22 and #25 first

This PR explains how MagicBox manages access control via Auth0 and tokens.

This takes from @mikefab's Medium article on how we manage access to the API.

Rendered preview of access control doc

Tracking: unicef/magicbox#16.

mikefab commented 6 years ago

This is great. We might want to add that, after a user receives a token, UNICEF will review the applicant before privileges are granted to access schools.

jwflory commented 6 years ago

I updated the pull request to add a note that UNICEF reviews applicants after receiving a token. I'm going to go ahead and merge this based on the previous feedback.

Thanks @mikefab!