developmentseed / developmentseed/observe-api

Improve session handling

Open
#55 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
2
Forks
1
PR merge metrics
No merged PRs in 30d

Description

At the moment we are using OAuth to sign up users with their OpenStreetMap account and [hapi-auth-jwt2](https://github.com/dwyl/hapi-auth-jwt2) to manage access to the API. This plugin provides a low level interface to implement auth, but doesn't offer out of the box expiration and token refresh strategies. We should look into how to implement these to improve security.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.