Re-Implement Auth0 for controlling access to content manager
@jsrj is already working on this.
Since Jun 4, 2019.
- Dominant language
- Vue
- Stars
- 1
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
Is your feature request related to a problem? Please describe.
In order to allow controlled access to the content management view, user authentication will need to be re-implemented to allow logging in with the custom-built Admin credentials via Auth0.
Describe the solution you'd like
- Sift through the wildly out-of-date and more recent tutorials and documentation on Auth0 and Auth0's Blog to determine the best approach with least headache as of 2019 (e.g. check that an article or blog entry is not dated from 2015 or 2017 as these are no longer relevant either to Vue.js OR Auth0).
- Have authentication implemented such that the cm/ route can only be accessed by an authenticated user and only by the user with the correct permissions.
- Implement token validation on the content-manager API and have it re-check permissions before allowing certain actions on any of it's endpoints.
Describe alternatives you've considered
A basic express API built from scratch, however this would significantly increase technical debt and exceed time requirements to implement correctly per security standards. Using a service such as Auth0 cuts down development time and reduces risk at the point in the development process.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.