New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

bug: Replace auth system with tokens #52

Open

2 tasks

benmcmahon100 opened this issue Jun 28, 2020 · 0 comments

Assignees

Labels

bug

Contributor

benmcmahon100 commented Jun 28, 2020

The current system just checks that a user exists. There is no verification of identity and no checks for collisions in used usernames. See #51

The verification flow should do the following:

Send a mail or use a webgate to get a JWT
JWT should be validated in a flow separate to the command itself and roles should be assigned based off of the roles of the member in LDAP

benmcmahon100 added the bug label

benmcmahon100 self-assigned this

benmcmahon100 changed the title ~~bug: replace auth system with tokens~~ bug: Replace auth system with tokens

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment