ac4g / prototype Goto Github PK

Methods

Remove duplication

• createPayloadWithAccessAndRefreshTokenFromAuthToken
• createPayloadWithAccessAndRefreshTokenFromRefreshToke

Rebuild the hole website in to dark mode

in last commits

RegistrationController methods:

• index
• verifyEmail

RegistrationService

• refactor completely

• show project name and logo
• show scope list
• make link to the project page

• creating project
• creating apps
• generating client credentials
• managing scopes for apps

redirect user after registration to previous page

Method

• updateItem

• add password forgotten function

API response format builder should be moved from controller to APIClientListenerService

Website

• show all items
• search
• filter (by game for example)

write an API public key exchange for chat encryption

Errors

• undefined variable $form

Refactoring

• method: oauthLoginAction

• if the user is not 2fa verified, send him to route 2-step-verification?action=enable

setup cron job for deleting expired reset password tokens

in last commits

• reset password
• 2fa

• pass hole access token object
• validate from the array decoded from jwt if the client is permitted

Remove developer account for oblige to create project

• do it possible with normal account

do not remove developer account completely

• add predis as redis service

• add 2fa authentification
• create profile page for visiting users page
• follow

write a documentation for

• inventory
• item
• user
• storage
  -API

for:

• AuthToken
• AccessToken
• RefreshToken

in:

• APIAuthorizationListener
• API/SecurityController

• only the creator of with valid contractor is permitted to give user a item
• or manipulate it

Todo

• set a middleware for Inventory API for validating Client if he is the creator or has a valid contract
• build a contract system for allowing or denying contract requests and setting specific permissions

• cache call in API/SecurityController -> use only array from decoded token
• rebuild AccessToken creation from refresh token object to refresh token array

add pagination to:

• Inventory
• Item
• API

Items per request

default: 20
max: 100

add cache to all entrypoints

Routes

InventoryController

• api_inventories
• api_inventory_by_property
• api_inventory_by_property_and_item_id
• api_inventories_item_by_id_remove_parameters

ItemsController

• api_items_by_identifier PATCH
• api_item_by_id_process_parameters DELETE

• Fix error causing in search engine, if the search term contains reserved characters
  

• add cancel function to 2fa setup

Class and methods to long

• create chat system
• voice chat
• video chat

change user

• logout him
• redirect to login
• after login redirect back to oauth

create an API to access users information

To pass into db, use public and to decrypt use private key

For secure reasons

• log users login (ip, time, location, device name)
• if ip is different from previous ones, send email notification

If user is already logged, he does not need to write his credentials just sign approve

• change password
• change nickname
• change email
• enable/disable 2fa
• publicity
• avatar

• database
• generate 6 codes
• show the 6 codes during 2fa setup
• use 2fa recovery tokens as one time code

create API version control

• add filter search
• create item
• create group
• create collection
• show item information
• edit item

Routes

• Inventory by uuid
• Items | Items by uuid

functionality

• search query
• by amount
• by project name
• by creator (uuid or nickname)

Item

• by parameter

Filter structure:

• in url
• activation with ?filter=1
• first search in cache via Redis Search
• cache returns null, search in db

Routes with parameter property are split into:

• by id
• by username

Some questions that still need to be answered

• Only the creator has the ability to manipulate his item in inventory or also others with or without permission?
• Should we add contract system than if with permission?