Registration about envirocar-server HOT 3 CLOSED

This Includes:

Login
Logout
Chnage Password

from envirocar-server.

Login & Logout are not directly applicable as the the service is stateless.

The current login is modelled as sending the headers X-User: username and X-Token: token with every request that requires authorization.

The Facebook/Google/OpenID registration should be handled by the website/app groups as the OAuth process requires user interaction that we can't handle for the website or app. We should talk to them next tuesday.

Currently a user is registered with a name, a mail address and a access token (that should be obtained from the OAuth provider). The token is currently not changeable, saved as a hash and the app/website should save them as a cookie/in SQLite to access the service. We still have to examine if the OAuth providers are always providing the same access token every time we request it with the same secrets (which should be shared between app and website).

Deletion is also already implemented.

from envirocar-server.

Create new issues for OAuth.

from envirocar-server.