Skip to content

Latest commit

 

History

History
18 lines (17 loc) · 1.15 KB

TODO.md

File metadata and controls

18 lines (17 loc) · 1.15 KB

Todo

  1. Listing applications with admin_id in URL doesn't work.
  2. Password and PasswordHash is not written for both admins and users.
  3. No checking for essential fields in request body of all endpoints.
  4. Extra 'ID' in addition to an 'id' field in list applications response.
  5. Edit API.md to include changes since last generated.
  • POSTPONED: Until issue 11 are resolved.
  1. Deploy to a single instance ECS.
  • POSTPONED: Until issues 11, 5 are resolved.
  1. Figure out a better alternative HMAC based API keys.
  2. Implement refresh tokens (better HMAC alternative) for API keys.
  3. Authorise requests on /application endpoints using admin's JWT in authorization header.
  4. Authorise requests on /user endpoints using access token generated by application's refresh token.
  5. Delete TemporaryAccessToken before pushing first stable version
  6. Make sure all json tags are PascalCase.
  7. GenerateRefreshTokenForApplicationHandler is making three requests to database. Try to reduce it to two.
  • SOLUTION: Could remove validation from db service and end up removing the update access token service entirely.