Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add authentication #10

Open
Bad-Science opened this issue Mar 3, 2017 · 0 comments
Open

Add authentication #10

Bad-Science opened this issue Mar 3, 2017 · 0 comments

Comments

@Bad-Science
Copy link
Member

Bad-Science commented Mar 3, 2017

All CREATE/UPDATE/DESTROY operations in the YACS API will be secured with an API key. Ultimately, we would like a have a full user and login system not just for admins, but for students as well. In order to push the admin panel out faster, we may want to just give it a single API key (stored on the environment) and lock down the entire site with a single set of credentials using HTTP basic auth. The built in support for this would make this trivial to implement. We can then release the admin panel before the login system is complete, and switch to the true authentication system once it is complete.

TL;DR - For now we probably just want HTTP basic auth with credentials and api key stored in the environment.

We should get more of the basic functionality done before this is implemented, though.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants