Skip to content
This repository has been archived by the owner on Sep 18, 2024. It is now read-only.

[FEATURE] Use a third-party app for authentification #22

Open
1 task done
Juknum opened this issue Nov 8, 2023 · 0 comments
Open
1 task done

[FEATURE] Use a third-party app for authentification #22

Juknum opened this issue Nov 8, 2023 · 0 comments
Labels
status: triage The issue needs to be sorted in the right project type: feature The issue is a request for new functionality including changes, enhancements, refactors, etc
Milestone

Comments

@Juknum
Copy link
Member

Juknum commented Nov 8, 2023

Est-ce que votre suggestion est liée à un problème ? Décrivez-le

There is currently now way to safely log-in in the API, the password must be sent in clear text to the API (which is a very important issue).

This is due to:

  1. The API not sharing it's salt key to the end-user system (the Sith 4 for e.g.)
  2. Because of that, hashed received password cannot be compared to registered hashed password

Décrivez la feature que vous souhaiteriez voir

  • Use a third-party system that would manage user email + password authentification
    • That third-party app would return a JWT Token that would be understood by the API
    • Allow for third parties app (Google, GitHub...) to be used to login into the API

Capture(s) d'écran

No response

Notes

No response

Code de Conduite

  • J'accepte de suivre le code de conduite de ce projet
@Juknum Juknum added status: triage The issue needs to be sorted in the right project type: feature The issue is a request for new functionality including changes, enhancements, refactors, etc labels Nov 8, 2023
@Juknum Juknum added this to Sith v4 Nov 8, 2023
@Juknum Juknum moved this to Todo in Sith v4 Nov 8, 2023
@Juknum Juknum modified the milestones: v1.0.0, v1.1.0 Nov 8, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
status: triage The issue needs to be sorted in the right project type: feature The issue is a request for new functionality including changes, enhancements, refactors, etc
Projects
Status: Todo
Development

No branches or pull requests

1 participant