wirewirewirewire / pandoa-backend

12 stars 4 forks source link

Auth concept for Cases #6

Closed smarthomeagentur closed 4 years ago

smarthomeagentur commented 4 years ago

We need a concept for authentication for submittend Cases. The User should be able to edit own cases. Also there should be some workflow to enable/activate cases after verification

Kaipirinha commented 4 years ago

I would use something existing, universal and commonly used like google/facebook oauth/oidc:

image

But that would involve the frontend as well as the backend, e.g.:

Phone -> App (Authenticates) -sendsBearerToken-> Backend (Retrieves User Data with bearer token and stores/retriev it accordingly)

smarthomeagentur commented 4 years ago

auth via passport linked to case is implemented