Find a way to access protected URL from another app

[jrmi]

What we want ?

We need to authenticate some external requests to Terra tools. For instance, un screenshot service that can capture the current map for extraction, pdf inclusion, …

Proposal

We can bypass the current authentication mechanism if the JWT token is in an HTTP header.

Workflow

1. I visit the login page
2. I give my credentials for authentication
3. I'm now identified, the front app do a request to the back and a token is saved
4. I click on the capture button of any map
5. A request is sent to the capture tool with the URL and the saved token
6. The tool make the capture of the URL transmitting the token in header or body
7. The front get the request with the token so drop the authentication phase and save the token in local storage
8. The capture tool can now take the capture of the protected page