cbsmith402 / sheetrock Goto Github PK

The ASP.NET Identity/OWIN providers don't return any profile info for the logged-in user with 3rd party services. Switching to SimpleAuthentication's stuff will give us this along with a few new services (LinkedIn, Github, etc).

The providers are currently configured through the code in App_Start, but to make it more user-friendly, they should be configurable through the web interface

When a user logs in, we should record the date/time, IP address and maybe some other info so we can report it later

Implement something like Passwordless where the user receives an email with a token that can only be used once. That token will log them in to the service until they log out again.

Currently when a token expires, we just 401 and they'll have to log in again. We should allow the client to try sending a refresh token to get a new JWT.

Of course, this also means we will need to generate and store the refresh token as well.